Kali Linux Penetration Testing (Advanced) Training Course

Introduction

• Overview of Kali Linux.
• Installing and configuring Kali Linux.
• Using and updating Kali Linux.

Penetration Testing Standards and Classification

• Open Web Application Security Project (OWASP).
• Licensee Penetration Testing (LPT).
• White box and black box testing.
• Penetration testing vs. vulnerability assessment.

Advanced Penetration Methodology

• Target framework and scope.
• Gathering client requirements.
• Checklist for test plan.
• Profiling test boundaries.
• Advanced penetration testing using Kali Linux.

Information Discovery

• Hacking Google.
• Gathering DNS and WHO information.
• Gathering route and network information.
• Gathering all-in-one information.

Scanning and Enumerating Target

• Advanced network scanning.
• Port and UDP port scanning.
• Stealth port scanning techniques.
• Packet crafting with Hping.
• Nmap scanning and plug-ins.
• Active and passive banners and system OS enumeration.
• Enumerating users, groups, and shares.
• Enumerating DNS resource records and network devices.

Vulnerability Assessment Tools

• Nessus.
• OpenVAS.

Target Exploitation

• Setting up Metasploit.
• Exploitation with Metasploit.
• Meterpreter session.
• VNC exploitation.
• Stealing password hashes.
• Adding custom modules to Metasploit.
• Using immunity debugger.
• Writing exploits.

Privilege Escalation and Access Maintenance

• Breaking password hashes.
• Cracking telnet, SSH, and FTP passwords.
• Using Metasploit post-exploitation modules.
• Protocol tunneling.
• Proxy usage.
• Installing persistent backdoors.

Advanced Sniffing

• ARP poisoning.
• DHCP starvation.
• MAC flooding.
• DNS poisoning.
• Sniffing credentials from secured websites.

DOS Attack

• SYN attack.
• Application request flood attack.
• Service request flood.
• Service attack permanent denial.

Penetration Testing

• Web penetration testing.
• Wireless penetration testing.

Exploitation and Client Side Attack

• Exploiting browser vulnerabilities.
• Buffer overflow.
• Fuzzing.
• Fast-track hacking.
• Phishing passwords.
• Generating backdoors.
• Java applet attack.

Firewall Testing

• Firewall overview.
• Testing firewall and ports.
• Rules of testing firewall.

Management and Reporting

• Documentation and results verification.
• Dradis framework.
• Magic tree and Maltego.
• Data collection and evidence management.
• Report types and presentation.
• Post-testing procedure.

Summary and Next Steps