uCertify

Kali Linux Penetration Testing

Discover penetration testing techniques for system and network scanning, exploitation, and more.

(KALI-LINUX.AE1) / ISBN : 978-1-64459-423-0
Lessons
Lab
TestPrep
AI Tutor (Add-on)

About This Course

The Kali Linux Penetration Testing Bible is a comprehensive online course that equips you with the skills and knowledge needed to become an ethical hacker. The course focuses on deep understanding of the entire hacking lifecycle and covers a wide range of topics, from networking fundamentals to advanced exploitation techniques. Learn how to use Kali Linux tools and commands, for performing effective penetration tests. It is a hands-on course fully equipped with Live Labs that enable you to gain practical experience through real-world scenarios and exercises using Kali Linux.

Skills You’ll Get

  • Expertise in using Kali Linux tools and commands for penetration testing 
  • Understanding of network fundamentals: protocols, topologies, and scanning techniques
  • Automating tasks and creating custom tools by using bash scripting 
  • Expertise in Linux system administration, user management, file systems, and remote access
  • Identify and assess vulnerabilities in systems and networks
  • Understanding of exploitation methods: buffer overflows, privilege escalation & pivoting
  • Understanding of web application vulnerabilities and testing techniques
  • Understanding of social engineering tactics and techniques
  • Knowledge of cryptographic algorithms and hash-cracking methods
  • Understanding of assembly language and reverse engineering techniques
  • Expertise in Python for penetration testing automation and custom tool development

Download Course Outline

1

Introduction

  • What Does This Course Cover?
2

Mastering the Terminal Window

  • Kali Linux File System
  • Managing Users and Groups in Kali
  • Files and Folders Management in Kali Linux
  • Remote Connections in Kali
  • Kali Linux System Management
  • Networking in Kali Linux
  • Summary
3

Bash Scripting

  • Basic Bash Scripting
  • Printing to the Screen in Bash
  • Variables
  • Script Parameters
  • User Input
  • Functions
  • Conditions and Loops
  • Summary
4

Network Hosts Scanning

  • Basics of Networking
  • Network Scanning
  • DNS Enumeration
  • Summary
5

Internet Information Gathering

  • Passive Footprinting and Reconnaissance
  • Summary
6

Social Engineering Attacks

  • Spear Phishing Attacks
  • Payloads and Listeners
  • Social Engineering with the USB Rubber Ducky
  • Summary
7

Advanced Enumeration Phase

  • Transfer Protocols
  • E‐mail Protocols
  • Database Protocols
  • CI/CD Protocols
  • Web Protocols 80/443
  • Graphical Remoting Protocols
  • File Sharing Protocols
  • Summary
8

Exploitation Phase

  • Vulnerabilities Assessment
  • Services Exploitation
  • Summary
9

Web Application Vulnerabilities

  • Web Application Vulnerabilities
  • Summary
10

Web Penetration Testing and Secure Software Development Lifecycle

  • Web Enumeration and Exploitation
  • Secure Software Development Lifecycle
  • Summary
11

Linux Privilege Escalation

  • Introduction to Kernel Exploits and Missing Configurations
  • Kernel Exploits
  • SUID Exploitation
  • Overriding the Passwd Users File
  • CRON Jobs Privilege Escalation
  • sudoers
  • Exploiting Running Services
  • Automated Scripts
  • Summary
12

Windows Privilege Escalation

  • Windows System Enumeration
  • File Transfers
  • Windows System Exploitation
  • Summary
13

Pivoting and Lateral Movement

  • Dumping Windows Hashes
  • Pivoting with Port Redirection
  • Summary
14

Cryptography and Hash Cracking

  • Basics of Cryptography
  • Cracking Secrets with Hashcat
  • Summary
15

Reporting

  • Overview of Reports in Penetration Testing
  • Scoring Severities
  • Report Presentation
  • Summary
16

Assembly Language and Reverse Engineering

  • CPU Registers
  • Assembly Instructions
  • Data Types
  • Memory Segments
  • Addressing Modes
  • Reverse Engineering Example
  • Summary
17

Buffer/Stack Overflow

  • Basics of Stack Overflow
  • Stack Overflow Exploitation
  • Summary
18

Programming with Python

  • Basics of Python
  • Running Python Scripts
  • Debugging Python Scripts
  • Practicing Python
  • Python Basic Syntaxes
  • Variables
  • More Techniques in Python
  • Summary
19

Pentest Automation with Python

  • Penetration Test Robot
  • Summary
20

APPENDIX A: Kali Linux Desktop at a Glance

  • Downloading and Running a VM of Kali Linux
  • Kali Xfce Desktop
  • Summary
21

APPENDIX B: Building a Lab Environment Using Docker

  • Docker Technology
  • Summary
22

1

Mastering the Terminal Window

  • Managing Users Using Users Commands
  • Changing the Permissions of a File Using the chmod Command
2

Network Hosts Scanning

  • Performing Port Scanning and Identifying Live Hosts
  • Performing Zone Transfer Using dig
3

Internet Information Gathering

  • Footprinting a Website
  • Using Google Hacking Database (GHDB)
  • Using Shodan to Find Webcams
  • Using the Information Gathering Tool
4

Social Engineering Attacks

  • Gathering Information Using the Social Engineering Toolkit
  • Analyzing Malware Using VirusTotal
  • Creating Reverse and Bind Shells Using Netcat
5

Advanced Enumeration Phase

  • Performing Session Hijacking Using Burpsuite
6

Exploitation Phase

  • Performing Vulnerability Scanning Using OpenVAS
  • Searching Exploits Using searchsploit
  • Securing the FTP Service
  • Using the msfvenom Program
7

Web Application Vulnerabilities

  • Exploiting Local File Inclusion and Remote File Inclusion Vulnerabilities
  • Conducting Cross-Site Request Forgery Attacks
  • Exploiting Command Injection Vulnerabilities
  • Exploiting a Website Using SQL Injection
  • Attacking a Website Using XSS Injection
8

Linux Privilege Escalation

  • Creating a Shell Script and cron Job
9

Windows Privilege Escalation

  • Using Basic Enumeration Commands
  • Displaying Networking Information
  • Using Meterpreter to Display the System Information
10

Pivoting and Lateral Movement

  • Using Mimikatz
  • Cracking Passwords Using Cain and Abel
11

Cryptography and Hash Cracking

  • Performing Symmetric Encryption
  • Examining Asymmetric Encryption
  • Observing a SHA256-Generated Hash Value
  • Observing an MD5-Generated Hash Value
12

Pentest Automation with Python

  • Finding Live Hosts by Using the Ping Sweep in Python

Any questions?
Check out the FAQs

Are you still confused? Know more about how learning this Kali Linux course will upgrade your career.

Contact Us Now

It is a Debian-based Linux distribution system designed specifically for penetration testing and ethical hacking. It provides an isolated environment for conducting vulnerability assessments and penetration testing, making it one of the most ideal and secure platforms.

Kali Linux is one the most preferred system widely used by hackers, security researchers, and IT professionals for the following reasons:

  1. Comes with a vast pre-installed array of tools designed for penetration testing
  2. Provides a secure and isolated environment for conducting tests
  3. Adapts to specific needs, allows adding or removing tools and packages 
  4. A large and active community of cybersecurity professionals for community support
  5. Ideal platform for cybersecurity training and hands-on learning

You need to have a basic understanding of computer networking, operating systems (especially Linux), command-line interfaces, and Kali Linux. To excel in this course, you should possess a very keen interest in cybersecurity and the willingness to learn new concepts and tools.

This course covers a wide range of Kali Linux tools including Metasploit for vulnerability exploitation, Nmap for network scanning, Wireshark for network traffic analysis, John the Ripper for password cracking, Aircrack-ng for wireless network cracking, Hydra for brute-force password attacks, and more.

Yes, there is a very menial difference between penetration testing and ethical hacking while both are used interchangeably. Penetration testing involves systematic exploitation of vulnerabilities to assess their security whereas ethical hacking includes everything from vulnerability assessment, and risk assessment to security awareness training.

Related Courses

All Courses