Learn Kali Linux 2019: Perform powerful penetration testing using Kali Linux, Metasploit, Nessus, Nmap, and Wireshark

Setting Up Kali - Part 2

Installing Windows as a VM

Installing Ubuntu 8.10

Troubleshooting Kali Linux

Getting Comfortable with Kali Linux 2019

What's new in Kali Linux 2019?

Understanding Kali Linux

Section 2: Reconnaissance

Passive Information Gathering

Reconnaissance and footprinting

Understanding passive information gathering

Understanding OSINT

Using the top OSINT tools

Identifying target technology and security controls

Finding data leaks in cloud resources

Understanding Google hacking and search operators

Leveraging whois and copying websites with HTTrack

Finding subdomains using Sublist3r

Active Information Gathering

Understanding active information gathering

SMB, LDAP enumeration, and null sessions

User enumeration through noisy authentication controls

Web footprints and enumeration with EyeWitness

Metasploit auxiliary modules

Section 3: Vulnerability Assessment and Penetration Testing with Kali Linux 2019

Working with Vulnerability Scanners

Using web application scanners

Nessus and its policies

Scanning with Nessus

Exporting Nessus results

Analyzing Nessus results

Understanding Network Penetration Testing

Introduction to network penetration testing

Understanding the MAC address

Connecting a wireless adapter to Kali Linux

Managing and monitoring wireless modes

Network Penetration Testing - Pre-Connection Attacks

Getting started with packet sniffing using airodump-ng

Targeted packet sniffing using airodump-ng

Deauthenticating clients on a wireless network

Creating a rogue AP/evil twin

Performing a password spraying attack

Setting up watering hole attacks

Exploiting weak encryption to steal credentials

Network Penetration Testing - Gaining Access

Securing your network from the aforementioned attacks

Gaining access

WEP cracking

WPA cracking

Configuring wireless security settings to secure your network

Exploiting vulnerable perimeter systems with Metasploit

Penetration testing Citrix and RDP-based remote access systems

Plugging PWN boxes and other tools directly into a network

Network Penetration Testing - Post-Connection Attacks

Exploiting LLMNR and NetBIOS-NS

Gathering information

MITM attacks

Session hijacking

DHCP attacks

WPAD protocol attacks

Wireshark

Escalating privileges

Lateral movement tactics

PowerShell tradecraft

Launching a VLAN hopping attack

Network Penetration Testing - Detection and Security

Using Wireshark to understand ARP

Detecting ARP poisoning attacks

Detecting suspicious activity

MITM remediation techniques

Client-Side Attacks - Social Engineering

Basics of social engineering

Types of social engineering

Defending against social engineering

Recon for social engineering (doxing)

Planning for each type of social engineering attack

Social engineering tools

Performing Website Penetration Testing

File upload and file inclusion vulnerabilities

Information gathering

Cryptography

Exploiting file upload vulnerabilities

Exploiting code execution vulnerabilities

Exploiting LFI vulnerabilities

Preventing vulnerabilities

Website Penetration Testing - Gaining Access

Exploring the dangers of SQL injection

SQL injection vulnerabilities and exploitation

Cross-Site Scripting vulnerabilities

Discovering vulnerabilities automatically

Best Practices

Guidelines for penetration testers

Web application security blueprints and checklists