Kali Linux Ethical Hacking: Beginner to Advanced 2026

Navigate the file system, edit and move files, and manage software with pwd, ls, cd, mkdir, touch, nano, cat, mv, cp, rm, ping, ifconfig, and apt.

Explore the ls command in Kali Linux, using options like -l, -a, -t, -R, -i, -G and -h to reveal detailed file attributes, hidden files, size, order, and recursive listings.

Learn to use the cd command to navigate the file system, move to root and home directories, verify with pwd and ls, and move back with dot dot.

Discover how to access and use the pre-installed Kali Linux tools, from vulnerability analysis and web scanning to the social engineering toolkit, via the application menu and step-by-step open-source guides.

Explore the /etc/passwd file in depth, a core user account management component that stores username, uid, gid, home directory, and shell. Learn reading, editing, and Linux security and permissions.

Learn to set Linux file permissions for read, write, and execute using chmod, plus x, and verify with ls -l; understand owner, group, and others, with examples like 775.

Explore common Linux symbols like the home shortcut ~, the current and parent dir ., .., the pipe and redirection, wildcard *, comments #, and sudo with practical examples.

Explore how nmap enables network discovery and security auditing, revealing hosts, open ports, and running services, while supporting multiple scan techniques across Linux, macOS, and Windows.

Master Kali Linux's Wireshark to capture and analyze network traffic, apply capture and display filters by host, IP, port, or protocol, and save or export pcapng files for analysis.

Master Kali Linux troubleshooting from the terminal by diagnosing broken dependencies and package conflicts, inspecting package status, and reinstalling damaged packages with apt and dpkg commands.

Explore how to use Nicktoon in Kali Linux to perform comprehensive web server tests, identify configuration items, vulnerabilities, and plugins, with installation and practical scanning guidance.

Learn to use sqlmap on Kali Linux to test for SQL injection, enumerate database tables, and dump database contents from vulnerable web applications.

Learn to configure Burp Suite in Kali Linux for web application testing by setting up the proxy, installing the certificate, and using features such as dashboard, target, repeater, and intruder.

Compare burp suite professional and community editions on kali linux; the professional version includes bob collaborator and full vulnerability scanning, including web app and api scans, with multiple scan modes.

Explore the CIA triad—confidentiality, integrity, and availability—and how encryption, authentication, and access control protect data, while examining threats like man-in-the-middle, DNS poisoning, denial of service, ransomware, and recovery strategies.

Master Kali Linux networking basics for cybersecurity, covering LAN and WAN, IP addressing, NAT, firewall and DMZ, port forwarding, OSI and TCP/IP concepts, and MAC address spoofing.

Learn to set up a Kali Linux VM with VMware Workstation Player by downloading and extracting the 7z file, then booting Kali. Run sudo apt update and sudo apt upgrade.

Master Kali Linux reveals social engineering tactics like phishing, spear phishing, and credential harvesting, with hands-on demos of clone pages and temporary mail to show attacker data theft and defense.

Learn footprinting and reconnaissance through passive methods—whois, search engines, social media, and public databases—then apply active techniques like amass and subdomain enumeration to map the attack surface.

Identify the attack surface through thorough information gathering and reconnaissance, enumerate domain endpoints and URLs, and analyze historical data from Wayback Machine to surface vulnerabilities.

Explore how HTTP works, the client-server model, and HTTP requests and responses, including GET, POST, and PUT methods; learn to intercept and manipulate traffic with Burp Suite.

Explore the terminal as the interface between user and system, use ifconfig to view IP address and interfaces, and manage updates with apt-get, upgrading software, and chaining commands with &&.

Learn to use uname to retrieve basic hardware and operating system information, exploring options like --help, -A, -m, -p, and -o, including virtual-machine limitations.

Learn the ls command (lzw) to list files and folders, distinguish directories, files, and executables in the root directory, and reveal hidden entries with -A.

Explore essential Kali Linux commands by mastering cd to change directory, touch to create blank files, and cat to read file contents, with practical navigation and file manipulation tips.

Learn to manage files and folders in Kali Linux with beginner-friendly commands like touch, rm, mkdir, ls, and rmdir. Use rm -rf to forcefully remove non-empty directories.

Learn how to copy files with cp, including renaming to a new destination. Move files with mv and view your current path with pwd to navigate the filesystem.

Master Kali Linux: a practical guide teaches you to use the mv command to move and rename files, and the locate command to find files by name across the system.

Master the sort command in Kali Linux to arrange file content in ascending order and use -r for descending order.

Master zip and unzip in Kali Linux with zip and unzip commands, use -D for directory targets, handle prompts, and verify results on the desktop.

Use whereis to locate command modules and reveal full paths, such as rls or cat. Review history, repeat with up arrow or !number, and clear with history -c.

Learn to create a new user with add user, set a password with passwd, switch users using su, and verify identity with who am I and home directories.

Master Kali Linux commands by applying chmod to set admin, group, and others permissions, using r, w, x or the numbers 4, 2, 1.

Master Kali Linux: a practical guide for everyone teaches how to inspect and modify file permissions with ls -l, chmod (u,g,o), numeric 777/000, and explains owner, group, others, and 644.

Apply the same permission to a folder and all its contents using chmod -R. Set 777 to grant full permissions for admin, group, and others, and observe the xyz directory.

Master essential Linux terminal shortcuts, including clear with Ctrl+L, kill with Ctrl+C, stop with Ctrl+Z, copy with Ctrl+Shift+C, paste with Ctrl+Shift+V, and edit commands with Ctrl+A, Ctrl+E, and Ctrl+K.

Explore anonymity on the internet, discuss why you cannot be 100% untraceable, and learn about tools like Tor browser, VPNs, proxies, and IP address changers.

Learn how proxy servers generate a fake identity by routing requests through a proxy. Bypass blocks with firewall rules and access blocked sites via an intermediary.

Install and run anon surf on Kali Linux to route traffic via proxy servers and view IP addresses. Manage the tool with start, stop, and restart commands.

Explore how vpn creates an encrypted tunnel unlike a proxy, protecting you from tracking by isp, government, and hackers, and learn how to set up a vpn.

Learn to configure an OpenVPN on Kali: download vpnbook free config, extract files, use tcp 443 with OpenVPN, enter vpnbook credentials, and keep the terminal open to sustain the connection.

Explore Tor, the onion router, a free open source tool for anonymous communication that routes through three or more proxies, and learn about surface, deep, and dark web.

Learn how to make a website live on the surface web by configuring domain names, hosting, and DNS, then understand the contrast with Tor and the dark web, emphasizing legality.

Learn how tor routes requests through entry, middle, and exit relays, applying layered protection and encryption up to the exit relay before the destination is reached. Proxychains is introduced.

Explore proxychains, a pre-built Kali Linux tool that routes applications through a chain of proxy servers, and learn how to install Tor and proxychains when needed.

Learn to set up Tor and configure proxychains in Kali, switch to dynamic chain, add socks5 proxy at 127.0.0.1:9050, and verify new exit IP by running browser through proxychains.

Learn to temporarily spoof your mac address in Kali using mac changer, replacing it with a new one. IP changes alone don’t guarantee anonymity, and mac spoofing is not permanent.

Learn to use the built-in kali tool macchanger to view, set, and reset MAC addresses on network interfaces, including random and manual MAC options with sudo.

Use nmap with -sS and -A on the Windows 7 target from Kali to reveal open ports, services, OS and host discovery details, including NetBIOS names.

Learn to use nmap's verbose mode (-v) to reveal details of scans as it processes targets, including website targets, while noting the gui Zenmap option and Kali's prebuilt nmap.

Explore search exploits using offline tools with the exploit database. Learn to use search exploit with -E for exact matches, locate Windows 10, OpenSSH, Android, and SQL injection exploits.

Explore website footprinting with whatweb to identify technology stacks and PHP versions, use whois for domain data, and run dub with a word list to reveal hidden files and directories.

Conduct vulnerability analysis of web servers and applications with Nikto in Kali to discover insecure files, misconfigurations, and outdated software, saving results in html, xml, text, or json.

Demonstrates cross-site scripting and clickjacking on a real website, showing how alerts, profile updates, malicious redirects, and virus downloads undermine user security.

Explore vulnerability assessment with Red Hawk, a PHP all-in-one tool for information gathering and vulnerability scanning, combining Nmap, whois, DNS, and subdomain analysis for Kali Linux.

Audit your own unix-based system with the Linux audit tool to test security defenses, identify misconfigurations and vulnerable software, and follow server hardening tips.

Perform a database assessment with sqlmap in Kali to detect and exploit sql injection flaws on a site, selecting database, table, and column details using -D, -T, -C, and --dump.

Learn to use JSQL, a GUI-based lightweight tool for SQL injection, in Kali Linux, to explore databases, fetch metadata, and view tables like users and products.

learn to perform sql injection using the sqlsus tool in kali linux, including generating a configuration file, pointing to a vulnerable url, and extracting database tables and columns.

Explore password attack concepts and the difference between encryption and hashing; hash is a one-way encryption that makes decryption impossible, explaining why passwords are stored as hashes.

Learn how plain text becomes an md5 hash, see that md5 outputs 32 characters, and understand how passwords are stored as hashes and verified by matching input hashes.

Identify hash type with hash identifier to guide password cracking, then generate and compare hashes from candidate passwords using MD5, SHA-1, and SHA-512 in Kali.

Master Kali Linux practical workflow for cracking password hashes using an online tool like find my hash, generating MD5 hashes, and running a Python script from a cloned repository.

Create a custom word list using a Ruby app that spiders a URL to a chosen depth. Explore options like -C and -m, and save results to a password list.txt.

Create a custom offline wordlist in Kali Linux using crunch by setting min and max length and character sets, outputting results to screen or a file.

Explore cracking passwords offline with John the Ripper on Kali Linux, using the shadow password file, hashes, and word lists to reveal root and user passwords.

Learn to crack a hash from another system with John the Ripper by preparing a hash file and using the raw-md5 format.

Crack hashes from password-protected zip and rar files by using zip2john or rar2john, then run John the Ripper with a wordlist for a dictionary attack.

Learn offline password cracking with THC Hydra in Kali, using its graphical mode to target SSH on Metasploitable 2, configure word lists, and analyze successful authentication attempts.

Explore cracking passwords with medusa, a modular login brute force tool in Kali Linux, showing how to supply host, username, password lists, modules, and ports to test offline.

Learn sniffing and spoofing by capturing network packets with tools like Wireshark, analyze unencrypted data, understand man-in-the-middle (MITM) concepts, and see how Wireshark works in Kali.

Start Wireshark from the terminal, select your interface, and begin capturing packets while exploring the four graphical user interface sections—packet filtering, packet list, packet details, and packet bites.

Learn to use Wireshark to capture http traffic, view when credentials appear in plain text over http, and why https with SSL encrypts data to protect login details.

Explore spoofing attacks, where attackers impersonate legitimate sites by injecting fake DNS entries to redirect users to attacker-controlled pages, while the URL and look stay largely unchanged.

Explore DNS spoofing with Ettercap in Kali Linux, demonstrating how attackers redirect traffic to fake DNS entries on public wifi and highlighting security cautions.

Configure Ettercap for man-in-the-middle testing with unified sniffing, target selection, and dns spoofing, then verify apache, scan hosts, and start sniffing.

Explore wireless attacks and wifi hacking by understanding key terms like WPA, WPA2, WEP, pre-shared key, BSSID, ESSID, RF, IEEE 802.11, and channel before practical lab tasks.

Explore wireless attacks with aircrack-ng to crack WEP, including external adapters, monitor mode, airodump-ng data capture, fake authentication loops, and final password cracking.

Learn to crack wpa and wpa2 using aircrack-ng, with monitor mode and airodump-ng, capture a handshake, and perform a dictionary attack.

Explore wireless attacks with a graphical user interface in kali linux, enabling monitor mode, scanning access points, selecting a target, and cracking passwords using a dictionary.

Explore Metasploit, the open source framework for exploits in penetration testing, and learn to start the MSF console in Kali, view exploits and payloads including Android exploits.

Master Kali Linux presents a practical buffer overflow attack using Metasploit against a Windows XP target, demonstrating a reverse TCP payload, a Meterpreter session, and post-exploitation techniques.

Identify and analyze web application firewalls with the woof woof tool in information gathering, learning to detect, identify vendors like Cloudflare and AWS WAF, and tailor testing.

Explore the Fierce DNS analysis tool in Kali Linux for recon, using domain enumeration, brute-forcing subdomains, and optional HTTP connections to identify live hosts and infrastructure.

Master Kali Linux: a practical guide introduces LBD, a lightweight load balancer detector, to identify DNS and HTTP level load balancing and infer multiple backend servers using simple command-line checks.

Explore information gathering with DNS recon to map a domain's DNS records (A, MX, NS, TXT) and assess zone transfers.

learn how arping identifies live hosts on a local network for information gathering, use flags like -c, -i, -q, and -w to control scans and verify mac addresses.

Identify live hosts quickly with fping, a high-performance, multi-host ICMP pinging tool that scans subnets in parallel and lists responsive devices for fast network discovery.

Explore hping3 to identify live hosts and perform stealth reconnaissance by crafting TCP, UDP, ICMP, and raw IP packets for firewall testing and port scanning.

Explore Unicorn Scan, a high performance asynchronous network reconnaissance tool for stealthy port scanning, comparing its speed and evasion capabilities with Nmap to map live hosts and services.

Explore Zenmap, the GUI front end for nmap, to perform fast and thorough network and port scans with visual topology maps, OS fingerprinting, version detection, and ping sweeps.

Master Kali Linux users learn to use the harvester for passive osint, collecting emails, subdomains, hosts, and IPs from public sources like Google, Bing, DuckDuckGo, LinkedIn, and GitHub, with flags.

Master Kali Linux teaches you to use Netmask to convert and analyze network addresses, cidr notation, and ip ranges, revealing network and broadcast addresses and usable hosts.

Learn to use NBT scan in Kali Linux for SMB analysis, mapping NetBIOS names and MAC addresses on Windows hosts, by scanning single IP addresses or subnets with verbose outputs.

Master Kali Linux: SpiderFoot automates OSINT analysis by gathering data from over 200 data sources to map domains, IPs, emails, and infrastructure for comprehensive reconnaissance.

Master Kali Linux course teaches route analysis with net discover, a passive ARP reconnaissance tool that identifies live hosts on a local subnet, revealing IPs, MACs, vendors, and last seen.

Explore SSL dump to analyze SSL and TLS traffic, decode handshakes, inspect cipher suites and versions, and optionally decrypt data with private keys or key logs for real-world security analysis.

Explore sslh, a Kali Linux SSL analysis tool that multiplexes SSL/TLS traffic on a single port, routing to https, ssh, or other services; learn configuration, flags, and practical use cases.

Master Kali Linux: a practical guide for everyone teaches you to use SSL scan to audit SSL and TLS configurations, test cipher strength, and verify certificates.

Explore voice over IP security testing with voice over IP hopper, learning to perform VLAN hopping, CDP/LLDP spoofing, and VLAN discovery to assess VoIP network vulnerabilities.

Perform vulnerability analysis with spike generic fuzzing to test SMTP services using prewritten SP files. Locate, run, and monitor fuzzing traffic with Wireshark to reveal protocol weaknesses.

Explore WPScan, a WordPress security scanner, to identify core version, plugins, and themes. Learn how it detects vulnerabilities, misconfigurations, and potential entry points for secure web application analysis.

Dirb is a command line web content scanner that uses directory brute force to uncover hidden directories and files, such as admin pages and misconfigured scripts, aiding web reconnaissance.

Explore web application analysis with ffuf, a fast go-based fuzzing tool for URL discovery and directory brute-forcing. Learn to use wordlists, customize threads and matchers, and view results with curl.

Explore DirBuster, a GUI Java tool by OWASP, to brute force web directories and files using wordlists, with real-time results, adjustable threads, and cross-platform support.

Explore how to use SQLite browser to open, inspect, and create SQLite databases, study tables, indices, and relationships, and run custom queries for database assessment in cybersecurity.

Explore enum4linux, a Linux tool that enumerates Windows or Samba SMB hosts, wrapping samba utilities to reveal users, groups, shares, policy details, and OS version from a target IP.