Kali Linux Penetration Testing (Intermediary) Training Course

Introduction to Kali Linux

• Overview of the Kali Linux distribution
• Installation and configuration processes
• Usage and update management

Kali Linux Files, Directories, and Permissions

• Customising the workspace and panels
• Creating new directories and files
• Locating specific files and directories
• Utilising commands and man pages
• Managing Linux file permissions and hidden files
• Managing and terminating Linux processes

Advanced Commands

• Extended commands using HTOP and ATOP
• Line searching with head, tail, wc, and history
• Setting persistent aliases and real-world applications
• Command-line web downloading tools
• Scripting with the bash shell
• Sorting output using grep and cut

Pre-engagement and Information Gathering

• Rules of engagement
• Standards for penetration test execution
• DNS and route analysis
• Network and port scanning techniques
• SMB and OSINT analysis

Vulnerability Scanning and Analysis

• Scanning web applications for vulnerabilities
• Identifying CMS and frameworks
• Forcing browsing of directories and files using ZAP
• Web crawling and directory listing
• Analysing vulnerabilities with Nmap NSE and Nikto
• Analysing vulnerabilities using Legion and Unix-privesc-check
• Evasion of Firewalls and IDS using Nmap

Exploitation

• Exploiting SQL injection vulnerabilities
• Practical demonstration of blind SQL injection attacks
• Escalating from outdated web applications to server compromise

Reporting

• Structuring penetration testing reports
• Documenting engagement details