Kali Linux Penetration Testing (Intermediary) Training Course

Introduction to Kali Linux

• High-level overview of Kali Linux features and capabilities.
• Step-by-step installation and configuration of Kali Linux.
• Essential usage patterns and system update procedures.

Files, Directories, and Permissions in Kali Linux

• Personalising the workspace layout and panel settings.
• Creating new directories and files efficiently.
• Locating specific files and navigating the directory tree.
• Using command-line tools and consulting man pages for assistance.
• Managing Linux file permissions and identifying hidden files.
• Controlling and terminating Linux processes as required.

Advanced Command-Line Techniques

• Utilising extended HTOP and ATOP commands for system monitoring.
• Searching and filtering lines using head, tail, wc, and history.
• Creating persistent aliases and applying them in real-world scenarios.
• Downloading web resources via command-line utilities.
• Writing basic scripts in the bash shell.
• Sorting and filtering output results using grep and cut.

Pre-engagement and Information Gathering

• Defining and adhering to rules of engagement.
• Following industry standards for penetration testing execution.
• Analysing DNS records and network routing paths.
• Conducting comprehensive network and port scans.
• Performing SMB enumeration and Open Source Intelligence (OSINT) analysis.

Vulnerability Scanning and Analysis

• Scanning web applications for potential security weaknesses.
• Identifying underlying CMS and framework technologies.
• Forcing browsing of directories and files using ZAP.
• Executing web crawling and generating directory listings.
• Analysing vulnerabilities using Nmap NSE and Nikto.
• Conducting advanced vulnerability analysis with legion and Unix-privesc-check.
• Techniques for evading firewalls and Intrusion Detection Systems (IDS) using Nmap.

Exploitation

• Exploiting SQL injection vulnerabilities.
• Demonstrating blind SQL injection attacks in practice.
• Escalating from outdated web applications to full server compromise.

Reporting

• Structuring and writing effective penetration testing reports.
• Documenting specific engagement details and findings.