Kali Linux Penetration Testing (Intermediary) Training Course

Introduction to Kali Linux

• Overview of the Kali Linux ecosystem
• Installation and configuration procedures
• Usage and system updates

Kali Linux Files, Directories, and Permissions

• Customizing the workspace and panels
• Creating and organizing directories and files
• Locating and identifying files and directories
• Using commands and referencing manual pages
• Managing Linux file permissions and hidden files
• Process management and termination in Linux

Advanced Commands

• Utilizing HTOP and ATOP for extended monitoring
• Searching using head, tail, wc, and history commands
• Creating persistent aliases and applying them in real-world scenarios
• Command-line web downloading techniques
• Bash shell scripting fundamentals
• Sorting and filtering results with grep and cut

Pre-engagement and Information Gathering

• Establishing rules of engagement
• Standards for executing penetration tests
• DNS and network route analysis
• Network discovery and port scanning
• SMB and OSINT (Open Source Intelligence) analysis

Vulnerability Scanning and Analysis

• Scanning for web application vulnerabilities
• Identifying CMS platforms and frameworks
• Force browsing directories and files using ZAP
• Web crawling and directory listing techniques
• Vulnerability analysis with Nmap NSE and Nikto
• Assessing vulnerabilities using Legion and Unix-privesc-check
• Evasion techniques for firewalls and IDS using Nmap

Exploitation

• Exploiting SQL injection vulnerabilities
• Practical demonstrations of blind SQL injection attacks
• Exploiting outdated web applications to compromise servers

Reporting

• Structuring and presenting penetration testing reports
• Documenting engagement details