Kali Linux Penetration Testing (Intermediary) Training Course

Introduction to Kali Linux

• Comprehensive overview of Kali Linux.
• Guides on installation and configuration.
• Best practices for usage and system updates.

Files, Directories, and Permissions in Kali Linux

• Customizing the workspace and panel settings.
• Creating and organizing directories and files.
• Locating and managing specific files and directories.
• Working with commands and referencing manual pages.
• Managing Linux file permissions and hidden files.
• Monitoring and terminating Linux processes.

Advanced Command-Line Operations

• Utilizing HTOP and ATOP for extended system monitoring.
• Techniques for searching lines using head, tail, wc, and history.
• Setting persistent aliases and applying them in real-world scenarios.
• Using command-line tools for web content downloading.
• Writing scripts in the Bash shell.
• Sorting and filtering results using grep and cut.

Pre-engagement and Information Gathering

• Establishing rules of engagement.
• Adhering to penetration testing execution standards.
• Analyzing DNS records and network routes.
• Conducting network and port scans.
• Performing SMB and OSINT (Open-Source Intelligence) analysis.

Vulnerability Scanning and Analysis

• Scanning for vulnerabilities in web applications.
• Identifying CMS platforms and underlying frameworks.
• Forcibly browsing directories and files using ZAP.
• Performing web crawling and directory enumeration.
• Analyzing vulnerabilities using Nmap NSE scripts and Nikto.
• Conducting vulnerability assessments with Legion and Unix-privesc-check.
• Evasion techniques for firewalls and IDS using Nmap.

Exploitation Techniques

• Exploiting SQL injection vulnerabilities.
• Executing blind SQL injection attacks in a live context.
• Targeting outdated web applications for server compromise.

Reporting and Documentation

• Structuring professional penetration testing reports.
• Documenting detailed engagement specifics.