Learn Penetration testing on Kali Linux - for beginners

Learn to customize Kali Linux workspaces and panels, organize terminal and graphical tools, and tailor performance monitors for efficient penetration testing workflows.

Create directories and files in Kali Linux, redirect outputs to files, write with echo, edit with a text editor like mousepad, view with cat, and delete items with remove commands.

Learn to find and locate files and directories on Kali Linux using find and locate, search by name, and use wildcards, with practical examples like wordlists.

Learn to navigate Kali Linux files and directories with cat, wildcards, and redirection; copy, move, and delete with cp, mv, and rm, and use man pages plus tools like nmap.

Learn linux file permissions and hidden files, and practice viewing and changing permissions using chmod and ls -la; discover cloning and using the harvester from GitHub.

Explore Linux process management by listing, viewing, and terminating processes with ps, top, and kill commands; learn interactive process monitoring, process IDs, and safe cleanup.

Explore htop extended commands in Kali Linux, using the interactive process viewer to filter, search, and kill processes, with color-coding for root vs normal users and customizable display options.

Learn atop extended commands to monitor and filter processes on kali linux, switch between all and active processes, view detailed process data, and use color coding and real-time toggles.

Master Linux command line tools like head, tail, wc, and grep. Use pipes, cat, and history to search, count lines, and explore files for penetration testing.

Learn to create and use Linux command line aliases to shorten long commands, with persistent aliases stored in a file for real-world examples.

Explore two command-line web downloaders, wget and curl, for downloading files from the terminal, with scriptable options, background operation, protocol support, and header manipulation for penetration testing tasks.

Master bash shell scripting basics for Kali Linux beginners, including shebang usage, executable scripts, and using read with if statements to run commands like ping.

Learn how the and and or boolean operators in shell scripting work, using examples with echo and user name checks to run or skip commands.

Use grep and cut to extract and sort IP addresses from a map scan report, teaching how to filter report data with delimiters and field selection.

Explore the rules of engagement for Kali Linux penetration testing, including scope, contact plans, testing types (black/white/clear box), data handling, incident response, and reporting.

Learn the penetration testing execution standard from pre-engagement to reporting, covering scoping, information gathering, vulnerability analysis, scanning, exploitation, and how to remediate risks.

Master dns analysis in Kali Linux pen testing through dns enumeration, revealing subdomains, domain records, and ip ranges for informed exploitation.

Analyze route analysis by mapping ip address ranges, cidr masking, and dns considerations for ipv4 and ipv6. Use traceroute and discovery tools to identify hosts behind a target network.

Learn network and port scanning with masscan and nmap on Kali Linux, discovering open ports, banner grabbing, and service details while exploring firewall evasion techniques.

Explore open source intelligence analysis using spider foot, the harvester, and awakening to collect data from public sources for reconnaissance and information gathering.

Practice osint with spider foot and harvester to collect public sources. Use Rick and Angie for reconnaissance via CLI and web interfaces; create workspaces, load modules, and query the database.

Learn vulnerability analysis on Kali Linux by using the Nmap Scripting Engine and Nikto to identify vulnerabilities across targets, update databases, and tailor scans from default to non-intrusive modes.

Explore vulnerability analysis with Legion on Kali Linux, automating vulnerability discovery across services, misconfigurations, and CVE IDs, while using Unix privilege escalation checker for a centralized dashboard.

Learn firewall and IDS evasion with nmap by fragmenting packets, spoofing sources, and adjusting timing and scan types to bypass filters and identify open or filtered ports.

Identify WordPress CMS and its plugins with WPScan, assess outdated versions and vulnerable plugins, and review server details to reveal web application vulnerabilities.

Learn how to use Zap for forced browsing to discover hidden directories and files with directory lists and file extensions, and compare forced browsing with normal spidering for beginners.

Learn how to use the Nikto web vulnerability scanner to identify misconfigurations and vulnerabilities such as SQL injection, remote file inclusion, and authentication bypass, with tuning and reporting.

Explore how to uncover hidden directories and files in applications using web crawling, directory listing tools, and brute-force techniques. Compare unauthenticated versus authenticated scans to assess exposure and access controls.

Learn web vulnerability scanning with Burp Suite Professional and OWASP ZAP on Kali Linux, covering scope, proxies, spidering, and active scanning to detect SQL injection and XSS.

Explore blind sql injection in action, an inferential attack that reveals data with no visible responses, using boolean and time-based methods to enumerate database users and names.

Exploit an outdated Dicky Wiki 1.9.5 vulnerability with Metasploit, verify exploitability, gain a shell, and demonstrate post-exploitation actions like uploading files to the target server.