Kali Linux Penetration Testing (Intermediary) Training Course

Introduction to Kali Linux

• Overview of the Kali Linux ecosystem.
• Installation and configuration processes.
• Utilizing and updating the distribution.

Files, Directories, and Permissions in Kali Linux

• Customizing the workspace and panel layout.
• Creation of directories and files.
• Techniques for locating specific files and directories.
• Using commands and consulting man pages.
• Managing Linux file permissions and handling hidden files.
• Process management and termination techniques.

Advanced Command-Line Operations

• Extended use of HTOP and ATOP commands.
• Search techniques using head, tail, wc, and history.
• Setting persistent aliases and real-world application cases.
• Using command-line web downloaders.
• Basics of scripting in the bash shell.
• Filtering and sorting results with grep and cut.

Pre-engagement and Information Gathering

• Establishing rules of engagement.
• Adhering to penetration testing execution standards.
• Performing DNS and route analysis.
• Conducting network and port scans.
• Analyzing SMB and gathering Open Source Intelligence (OSINT).

Vulnerability Scanning and Analysis

• Scanning web applications for vulnerabilities.
• Identifying CMS and frameworks.
• Force browsing directories and files using ZAP.
• Web crawling and directory listing techniques.
• Analysis using Nmap NSE and Nikto.
• Assessment using legion and Unix-privesc-check.
• Evasion of firewalls and IDS using Nmap.

Exploitation

• Exploiting SQL injection vulnerabilities.
• Executing blind SQL injection attacks.
• Transitioning from outdated web applications to server compromise.

Reporting

• Structuring penetration testing reports.
• Documenting engagement details.