Kali Linux

  1. The Penetration Testing Methodology
    1. Overview of Penetration Testing
      1. Definition and Goals
        1. Types of Penetration Tests
          1. Black Box Testing
            1. White Box Testing
              1. Gray Box Testing
              2. Testing Approaches
                1. External Testing
                  1. Internal Testing
                    1. Wireless Testing
                      1. Web Application Testing
                        1. Social Engineering Testing
                      2. Industry Standards and Frameworks
                        1. OWASP Testing Guide
                          1. NIST SP 800-115
                            1. OSSTMM
                              1. PTES (Penetration Testing Execution Standard)
                                1. ISSAF
                                2. Phases of a Penetration Test
                                  1. Pre-engagement Interactions
                                    1. Scoping and Rules of Engagement
                                      1. Defining Scope
                                        1. Time Constraints
                                          1. Technical Constraints
                                          2. Communication Protocols
                                            1. Emergency Contacts
                                              1. Reporting Schedule
                                                1. Escalation Procedures
                                              2. Intelligence Gathering
                                                1. Passive Reconnaissance
                                                  1. OSINT Collection
                                                    1. Social Media Intelligence
                                                      1. DNS Information Gathering
                                                        1. WHOIS Lookups
                                                          1. Search Engine Reconnaissance
                                                          2. Active Reconnaissance
                                                            1. Network Scanning
                                                              1. Service Enumeration
                                                                1. Social Engineering
                                                              2. Threat Modeling
                                                                1. Asset Identification
                                                                  1. Threat Identification
                                                                    1. Vulnerability Assessment
                                                                      1. Risk Analysis
                                                                      2. Vulnerability Analysis
                                                                        1. Automated Scanning
                                                                          1. Network Vulnerability Scanning
                                                                            1. Web Application Scanning
                                                                              1. Database Scanning
                                                                              2. Manual Testing
                                                                                1. Configuration Review
                                                                                  1. Code Review
                                                                                    1. Architecture Analysis
                                                                                  2. Exploitation
                                                                                    1. Exploit Selection
                                                                                      1. Exploit Customization
                                                                                        1. Exploit Execution
                                                                                          1. Payload Delivery
                                                                                            1. Access Verification
                                                                                            2. Post-Exploitation
                                                                                              1. Privilege Escalation
                                                                                                1. Local Privilege Escalation
                                                                                                  1. Domain Privilege Escalation
                                                                                                  2. Persistence Mechanisms
                                                                                                    1. Backdoors
                                                                                                      1. Scheduled Tasks
                                                                                                        1. Registry Modifications
                                                                                                        2. Data Collection
                                                                                                          1. Sensitive Data Identification
                                                                                                            1. Data Extraction
                                                                                                              1. Screenshot Collection
                                                                                                              2. Lateral Movement
                                                                                                                1. Network Pivoting
                                                                                                                  1. Credential Harvesting
                                                                                                                    1. Additional System Compromise
                                                                                                                  2. Covering Tracks
                                                                                                                    1. Log Manipulation
                                                                                                                      1. Event Log Clearing
                                                                                                                        1. Log Modification
                                                                                                                        2. Artifact Removal
                                                                                                                          1. File Deletion
                                                                                                                            1. Registry Cleanup
                                                                                                                              1. Network Trace Removal
                                                                                                                            2. Reporting and Communication
                                                                                                                              1. Executive Summary
                                                                                                                                1. Technical Findings
                                                                                                                                  1. Risk Assessment
                                                                                                                                    1. Remediation Recommendations
                                                                                                                                      1. Appendices and Evidence

                                                                                                                                  Previous

                                                                                                                                  3. Linux Fundamentals for Kali Users

                                                                                                                                  Go to top

                                                                                                                                  Next

                                                                                                                                  5. The Kali Linux Toolkit: Information Gathering