Kali Linux Penetration Testing (Intermediary) Training Course

Introduction to Kali Linux

• Overview of the Kali Linux ecosystem
• Installation and configuration procedures
• Usage and maintenance updates

File Directories and Permissions in Kali Linux

• Customising workspaces and panels
• Creating new directories and files
• Locating and finding specific files and directories
• Using commands and accessing manual pages
• Managing file permissions and hidden files
• Controlling and terminating Linux processes

Advanced Command-Line Operations

• Utilising extended commands like HTOP and ATOP
• Searching and filtering with head, tail, wc, and history
• Creating persistent aliases and applying real-world use cases
• Using command-line web downloaders
• Scripting fundamentals in the bash shell
• Sorting and refining results using grep and cut

Pre-engagement and Information Gathering

• Establishing rules of engagement
• Adhering to standards for penetration testing execution
• Analysing DNS and network routes
• Conducting network and port scanning
• Performing SMB and OSINT analysis

Vulnerability Scanning and Analysis

• Scanning web applications for vulnerabilities
• Identifying CMS platforms and frameworks
• Force browsing directories and files using ZAP
• Web crawling and retrieving directory listings
• Analysing vulnerabilities with Nmap NSE and Nikto
• Utilising legion and Unix-privesc-check for analysis
• Evasion techniques for firewalls and IDS using Nmap

Exploitation Techniques

• Exploiting SQL injection vulnerabilities
• Executing blind SQL injection attacks in real-time
• Escalating from outdated web applications to server compromise

Reporting

• Structuring penetration testing reports
• Documenting engagement details