Kali Linux Penetration Testing (Intermediary) Training Course

Introduction

• Overview of the Kali Linux distribution
• Deployment and configuration procedures
• Operational maintenance and update protocols

Kali Linux File Systems, Directories, and Access Controls

• Workspace and panel customization
• Directory and file creation workflows
• File and directory identification methods
• Command execution and manual page reference
• File permission management and hidden file handling
• Process monitoring and termination procedures

Advanced Command-Line Operations

• Utilizing HTOP and ATOP for extended resource monitoring
• Text stream processing with head, tail, wc, and history
• Defining persistent aliases and practical applications
• Command-line web resource acquisition
• Bash shell scripting fundamentals
• Filtering and structuring output using grep and cut

Pre-Engagement Planning and Information Gathering

• Establishing rules of engagement
• Standards for executing penetration testing assessments
• DNS resolution and network route analysis
• Network reconnaissance and port scanning
• SMB enumeration and open-source intelligence (OSINT) collection

Vulnerability Scanning and Security Analysis

• Web application vulnerability assessment
• Identification of CMS platforms and frameworks
• Directory traversal and file enumeration using ZAP
• Web crawling and directory listing techniques
• Security analysis via Nmap NSE and Nikto
• Privilege escalation analysis using Legion and Unix-privesc-check
• Bypassing firewall and IDS mechanisms with Nmap

Exploitation Techniques

• Executing SQL injection attacks
• Performing blind SQL injection assessments
• Compromising outdated web applications and server infrastructure

Reporting and Documentation

• Creating comprehensive penetration testing reports
• Documenting engagement specifics

Conclusion and Future Actions