Udemy
    •  
    •  
    •  
    •  
    •  
    •  
    •  
    •  
Subscribe
Turn what you know into an opportunity and reach millions around the world.
Learn More
Your cart is empty.
Keep shopping
Practical Guide to Penetration Testing with Kali Linux
Rating: 4.1 out of 5(19 ratings)
223 students

Practical Guide to Penetration Testing with Kali Linux

End-to-End Penetration Testing solutions using Kali Linux to protect your network devices from attacks!
Created byPackt Publishing
Last updated 6/2019
English

What you'll learn

  • Set up your environment for performing penetration testing using Kali Linux.
  • Perform penetration testing on your websites. Master most recent hacker tools and techniques.
  • Perform deauthentication attacks on Wi-Fi routers. Use GPU power for hacking WPA2 Wi-Fi routers.
  • Take a detailed walk-through of Burp Suite and understand a few Burp tools
  • Get familiar with the post-exploitation attacks on Windows and Linux to maintain access to a target
  • Explore a vast variety of stealth techniques to bypass a number of protections when penetration testing
  • Create easy-to-follow reports with precise information and detailed findings
  • Learn Various Information Gathering tools techniques. Perform Network and Web Vulnerability Analysis.
  • Perform Password Cracking Techniques. Wifi hacking to learn wireless penetration techniques.
  • Learn MITM and Social Engineering Attack. Perform Exploitation and Post Exploitation Attack.

Course content

3 sections • 115 lectures • 11h 51m total length

  • The Course Overview4:36

    This video will give you an overview of the course.

  • Installing kali Linux12:07

    In this video, we will learn how we can install any version of Kali Linux

    • Kali Linux overview

    • Download Kali Linux and Vmware workstation

    • Install Kali Linux in full screen mode

  • How to Install Metasploitable?5:31

    In this video, we will learn how to install the intentionally vulnerable virtual machine called Metasploitable 2.

    • Overview of Metasploitable 2

    • Download metasploitable 2

    • Install Metasploitable 2

  • How to Install Windows 8.1 on VMware to Set Up Our Lab?7:39

    The aim of this video is to install Windows 8.1 for performing the system exploitation.

    • Download Windows 8.1 from torrent

    • Install Windows 8.1 in Vmware workstation

    • Ping Windows 8.1 and Kali Linux to each other for checking the communication with each other.

  • Exploring Penetration Testing and Its Types5:44

    In this video, we will learn explore the different types of penetration testing

    • Overview of Penetration Testing with Example.

    • Types of Penetration Testing

    • Specific Fields of Penetration Testing

  • Advanced OSINT and Information Gathering5:38

    In this video, we will learn the Advanced OSINT Data gathering and information gathering

    • Phases of Penetration Testing

    • Active Information Gathering

    • Passive Information Gathering with Example

  • Vulnerability Assessment with Exploit Demo9:33

    In this video, we will get to know, how we can exploit a vulnerable virtual machine to get the root level access.

    • Download and Install Kioptrix Level 1 machine

    • Perform Information Gathering

    • Perform the Exploitation phase to get the root level access.

  • Introduction to Metasploit8:34

    In this video, we will get to know about Metasploit, it’s versions and important commands that you should know.

    • Overview of Metasploit

    • Overview of community edition of Metasploit in Kali Linux

    • Some basic but important commands of Metasploit.

  • How to Create Payloads?5:53

    In this video, we will learn common terms that are used in System Penetration Testing and also How one can create a Payload

    • Common terms of system penetration testing

    • Choose correct Payload

    • Make the use of command correctly.

  • How to Get Reverse Shell?5:42

    In this video, we will get to know about getting the access to the vulnerable Operating System.

    • Configure the Listener

    • Run the listener and send the payload to Windows machine

    • Execute payload file on the victim’s system.

  • How to Create Undetectable Payloads?6:25

    In this video, we will try to create an undetectable payload.

    • Make an executable with correct payload

    • Use of encoders

    • Identify how many antiviruses are able to detect the executable payload.

  • How to Use Veil-Evasion?4:51

    In this video, we will come to know about an awesome anti-virus bypassing tool called Veil-Evasion

    • Overview of Veil-Evasion tool

    • Install Veil-Evasion tool

    • Make a Payload using Veil

  • Hack Webcam and Facebook Account of Victim4:45

    In this video, we will get to know about hacking webcam of a user, not only that we will also come to know how we can hack the password of Facebook accounts.

    • Turn on the windows defender

    • Copy the payload on Windows 8.1 and execute it

    • Get the reverse shell and perform the post exploits and commands to see the live webcam streaming of the victim.

  • Introduction to Web Application Penetration Testing5:48

    This video will help us to understand WebApp Penetration Testing from scratch. Not only that we will also talk about Proxy, it’s types as well as some terms about Burp suite tool

    • Overview of basic terms of Web app Penetration Testing

    • Explanation of Proxy

    • Types of Proxy with Example

  • Setup Proxy in Browser5:38

    In this video, we will get to know that how we can set the proxy configuration in to our browser.

    • Open your MozillaFirefox browser.

    • Make the configuration changes in Network Proxy settings

    • Configure the https request integration of Firefox browser with Burp suite

  • Introduction to Repeater and Intruder in Burp Suite8:37

    This video will walk you through some of the advance utilities of burp suite like intruder, repeater and Interceptor.

    • Enable the proxy configuration in Firefox browser. Intercept the traffic on Burp Suite

    • Send the request to intruder and do the changes to crack the password of admin login page of a wi-fi router.

    • Repeat a particular request again and again

  • Exploiting Remote Command Execution4:13

    This video will help us to understand a vulnerability called Remote Code Execution. This is a zero-day vulnerability. We will also exploit this vulnerability in DVWA.

    • Understanding the Remote Code Execution vulnerability

    • Open DVWA with security level low.

    • Exploit Remote Code Execution on DVWA

  • Web Application Penetration Testing Walkthrough10:10

    In this video, we will explore the SQL Injection and with that we will also exploit a machine called Kioptrix level 2.

    • Download and Install Kioptrix Level 2 virtual Machine.

    • Understand and bypass the login page using SQL Injection

    • Exploit RCE and then run the privilege escalation exploit for centOS 4.5

  • Understanding Network Penetration Testing4:54

    This video will help us to understand the basics of wireless penetration testing, and will help us to get to know about monitor mode and how you can setup a USB wi-fi adapter to use the functionality of monitor mode

    • Overview of types of modes on a USB wi-fi adapter

    • Setup a USB wi-fi adapter with Kali Linux

    • Enable Monitor mode on Kali Linux using a monitor mode enabled USB Wi-Fi adapter

  • How to Sniff Data of Wi-Fi Routers?5:24

    This video will give us the brief idea about sniffing of Wi-Fi Routers. We will also get to know the way to capture the data packets of all the Wi-Fi routers in that range of our USB Wi-Fi adapter.

    • Enable Monitor mode

    • Run airodump-ng with monitor mode interface

    • Run airodump-ng for a particular Wi-Fi router with monitor mode interface.

  • Performing Deauthentication Attacks on Wi-Fi Routers6:53

    In this video, we will learn about deauthentication attack and how we can Jam the signal of a particular Wi-Fi router without even connecting to it.

    • Enable Monitor mode.

    • Run airodump-ng with monitor mode interface

    • Run aireplay-ng with 1000 deauthentication packets against a particular target and that’s how out machine will start jamming the victim’s machine.

  • How to Capture WPA Handshake?4:36

    This video will give us get the brief idea about the WPA/WPA2 handshake. Not only that this video will explain the way to capture the WPA handshake.

    • Understand WPA/WPA2 handshake

    • Run airodump-ng with monitor mode interface and then start the sniffing on a particular wi-fi router that you want to hack, write all the data packets in to a file.

    • Now try to disconnect a client from the Wi-Fi Router using aireplay-ng tool. This way you will able to capture the handshake of a Wi-Fi Router.

  • How to Create a Password Wordlist?4:26

    In this video, we will get to know about an awesome tool called crunch that can generate the variety of password wordlist

    • Introduction to crunch tool

    • Basic example to generate a password list

    • Template based example to generate a precise wordlist using crunch tool.

  • How to Crack Password Using Aircrack-ng?2:30

    In this video, we will crack the password of Wi-Fi router using a tool called aircrack-ng.

    • Overview of the aircrack-ng command

    • Executing the aircrack-ng command for cracking the password of Wi-Fi Router

    • After getting the password, connect to the Wi-Fi using windows PC.

  • Cracking Password Using the Power of GPU7:39

    In this video, students will feel the power of strong computing device called GPU. We will crack the password of a Wi-Fi router using the tool called hashcat with the integration of Gigabyte GTX1060 graphics card.

    • Download and install the hashcat tool in Windows 10 host OS.

    • Convert the handshake .cap into. hccapx format.

    • Run the hashcat tool with the handshake and wordlist file.

Requirements

  • Some prior exposure to the basics of Kali Linux and Windows command-line syntax is assumed.
  • Prior hands-on experience with penetration testing/ethical hacking will be beneficial but not necessary.

Description

Are you a System Administrator, Penetration tester, or Network engineer looking to take your penetration testing skills to the next level? Then this course is for you! It is your one-stop solution to safeguarding complex network devices and modern operating systems from external threats using Kali Linux.

Kali Linux is rated as the #1 security operating system. In view of all this, companies are hiring ethical hackers just like you to perform network and website vulnerability testing to help prevent hackers from getting in. With the Linux operating system and its core structure based on Debian, it comes jam-packed with all the tools you need to penetration-test your websites and infrastructures.

This comprehensive 3-in-1 course follows a step-by-step practical approach to discover the secrets of Pentesting using Kali Linux and gain access to a system using a portfolio of different techniques. To begin with, you’ll create a persistent reverse shell to perform penetration testing on your websites. You’ll also perform de-authentication attacks on Wi-Fi routers. You’ll get familiar with the post-exploitation attacks on Windows and Linux to maintain access to a target. Finally, you’ll not only perform server-side and client-side attacks but also master major Kali Linux tools and techniques.

Towards the end of this course, you'll not only discover the secrets of Pentesting using Kali Linux but also gain access to a system using a portfolio of different techniques!

Contents and Overview

This training program includes 3 complete courses, carefully chosen to give you the most comprehensive training possible.

The first course, Hands-On Infrastructure Penetration Testing, covers how to defend your systems from methodical and proficient attackers. This course will provide you with advanced penetration testing techniques with Kali Linux that will help you exploit databases and web/application servers and perform network penetration. With this course, you will prevent your system from being exploited by using techniques such as reverse shells. Moving on, this course will not only walk you through managing vulnerabilities but will also show you how to protect endpoints. You will explore web pentesting, learn how to set up your LAB environment, and explore the various vulnerabilities that exist nowadays. Towards the end of this course, you will also perform wireless penetration testing to defend against the wireless assets. Finally, you will have mastered the skills and methodologies you need to breach infrastructures and provide complete endpoint protection for your system via Kali Linux.

The second course, Practical Web App Pentesting with Kali Linux, covers discovering the secrets of Pentesting using Kali Linux. You will learn how to test your network against various types of attack and develop a network-testing environment that can be used to test scanning tools and techniques. Employ methods effectively used by real hackers to ensure the most effective penetration testing of your network; select and configure the most effective tools from Kali Linux to test network security; employ stealth to avoid detection in the network being tested, and recognize when stealthy attacks are being used against your network. Exploit networks and data systems using wired and wireless networks as well as web services. Identify and download valuable data from target systems and learn to maintain access to compromised systems. Use social engineering to compromise the weakest part of the network—the end users. Use port scanning for UDP scanning, stealth scanning, and connect/zombie scanning using pen testing tools. You will learn how to utilize the arsenal of tools available in Kali Linux to conquer any network environment. By the end of this course, you will be a pro with the Kali Linux tools you need to perform advanced penetration testing; you will know how to exploit vulnerable systems and how to patch them.

The third course, End-to-End Penetration Testing with Kali Linux, covers performing vulnerability assessment and penetration testing. You will learn how to test your network against various types of attack and develop a network-testing environment that can be used to test scanning tools and techniques. Employ methods effectively used by real hackers to ensure the most effective penetration testing of your network; select and configure the most effective tools from Kali Linux to test network security; employ stealth to avoid detection in the network being tested, and recognize when stealthy attacks are being used against your network. Exploit networks and data systems using wired and wireless networks as well as web services. Identify and download valuable data from target systems and learn to maintain access to compromised systems. Use social engineering to compromise the weakest part of the network—the end users. Use port scanning for UDP scanning, stealth scanning, and connect/zombie scanning using pentesting tools. You will learn how to utilize the arsenal of tools available in Kali Linux to conquer any network environment. By the end of this course, you will be a pro with the Kali Linux tools you need to perform advanced penetration testing; you will know how to exploit vulnerable systems and how to patch them.

Towards the end of this course, you'll discover the secrets of Pentesting using Kali Linux and gain access to a system using a portfolio of different techniques.

About the Authors

  • Parvinder Yadav has worked with wireless penetration testing for more than 4 years and has a deep knowledge of networking. He has created a lot of projects such as a Wi-Fi jammer using shell scripting and the Raspberry Pi 2; a portable hacking device which just weighs 100 grams and can hack almost any Wi-Fi router; a portable wireless CCTV camera (using the Raspberry Pi) that is the same size as a mobile; a portable media server; a radio station using the Raspberry Pi; and a lot more. He is the author of PNPtutorials, he is a geeky YouTuber and a Tech-Freak, and has more than 55K subscribers to his channel on YouTube.

  • Paul Olushile graduated with a diploma degree in computer science and is currently working as a Cyber Security Expert. He loves teaching and hence he is freelancing to share his expertise with the students for over 4 years now as a Unix/Linux Administrator. He has a diverse set of certifications, interests, and experiences including server administration.

  • Sunil Gupta is a certified ethical hacker. Currently, he teaches 45,000+ students online in 150+ countries. He is a specialist in ethical hacking and cybersecurity. His strengths lie in vulnerability assessment, penetration testing, intrusion detection, risk identification, data analysis, reporting, and briefing.

Who this course is for:

  • IT Professionals, System Administrator, Network Engineer, SOC Analyst, Pentesters and Security Analysts who have a basic knowledge of Kali Linux and want to utilize advanced penetration testing techniques as well as maximize their network testing using the advanced features of Kali Linux.

Report abuse