Penetration Testing With Kali

Penetration Testing With Kali

National Initiative for Cybersecurity Careers and Studies

Education & Training

Toggle submenu

Workforce Development

Toggle submenu

Cybersecurity & Career Resources

Toggle submenu

Breadcrumb

Education & Training

NICCS Education & Training Catalog

Offensive Security

Penetration Testing with Kali Linux

Penetration Testing with Kali Linux

Online, Instructor-Led
Online, Self-Paced
Classroom

Your Location
Providers
Courses
Course and Provider Quantity

Last Published Date: August 16, 2022
Official website of the Cybersecurity and Infrastructure Security Agency

A .gov website belongs to an official government organization in the United States.

A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Penetration Testing with Kali Linux (PEN-200) is the foundational course at Offensive Security. Those new to OffSec or penetration testing should start here.
This online ethical hacking course is self-paced. It introduces penetration testing tools and techniques via hands-on experience. PEN-200 trains not only the skills, but also the mindset required to be a successful penetration tester.
Students who complete the course and pass the exam earn the coveted Offensive Security Certified Professional (OSCP) certification.
Using information gathering techniques to identify and enumerate targets running various operating systems and services
Writing basic scripts and tools to aid in the penetration testing process
Analyzing, correcting, modifying, cross-compiling, and porting public exploit code
Conducting remote, local privilege escalation, and client-side attacks
Identifying and exploiting XSS, SQL injection, and file inclusion vulnerabilities in web applications
Leveraging tunneling techniques to pivot between networks
Creative problem solving and lateral thinking skills
The materials within this course focus on the Knowledge Skills and Abilities (KSAs) identified within the Specialty Areas listed below. Click to view Specialty Area details within the interactive National Cybersecurity Workforce Framework.
If you would like to provide feedback for this course, please e-mail the NICCS SO at NICCS@hq.dhs.gov (link sends email) .
Solid understanding of TCP/IP networking
Reasonable Windows and Linux administration experience
Familiarity with basic Bash and/or Python scripting
3950 South Las Vegas Boulevard
Mandalay Bay
Las Vegas , NV 89119
Offensive Security
230 Park Avenue
3rd Floor
New York , NY 10169
National Initiative for Cybersecurity Careers and Studies
A Cybersecurity & Infrastructure Security Agency program
©2013-2022
You have been selected to participate in a brief survey about your experience today with National Initiative for Cybersecurity Careers and Studies.
Would you like to participate in our survey?
If you accept you will be leaving the National Initiative for Cybersecurity Careers and Studies website and going to a third party site.
That site may have different privacy, security and accessibility policies than the National Initiative for Cybersecurity Careers and Studies site.
National Initiative for Cybersecurity Careers and Studies does not endorse any commercial products, services, programs or content on the third party website.
Thank you for visiting our site. We hope your visit was informative and enjoyable.

Was this page helpful?
Yes
No

Performance & security by Cloudflare

You cannot access www.systranbox.com. Refresh the page or contact the site owner to request access.
Copy and paste the Ray ID when you contact the site owner.

Ray ID:

746d08ed2cf27762

746d08ed2cf27762 Copy

For help visit Troubleshooting guide

Was this page helpful?
Yes
No

Performance & security by Cloudflare

You cannot access www.systranbox.com. Refresh the page or contact the site owner to request access.
Copy and paste the Ray ID when you contact the site owner.

Ray ID:

746d0947eebe7762

746d0947eebe7762 Copy

For help visit Troubleshooting guide

Come write articles for us and get featured
Learn and code with the best industry experts
Get access to ad-free content, doubt assistance and more!
Come and find your dream job with us
Kali Linux – Web Penetration Testing Tools
Gobuster - Penetration Testing Tools in Kali Tools
Hacking Tools for Penetration Testing - Fsociety in Kali Linux
Yuki Chan - Automated Penetration Testing and Auditing Tool in Kali Linux
Unicornscan - Penetration Testing Tool in Kali Linux
XERXES – Penetration Testing Tool using Kali Linux
Skipfish - Penetration Testing tool in Kali Linux
linkedin2username - Penetration Testing Tools
Netnoob - Network tools, information gathering tools and scanning tools
D-TECT - Web Applications Penetration Testing Tool
Uniscan – Web Application Penetration Testing Tool
TIDoS-Framework - Offensive Web Application Penetration Testing Framework
Kali Linux - Information Gathering Tools
Kali Linux - Vulnerability Analysis Tools
KitHack - Hacking tools pack in Kali Linux
XCTR-Hacking-Tools - Information Gathering in Kali Linux
Top 10 Kali Linux Tools For Hacking
Kali-Whoami - Stay anonymous on Kali Linux
Nettacker - Automated Penetration Testing Framework
Nmap Scans for Cyber Security and Penetration Testing
Lockdoor Framework - Penetration Testing Framework With Cyber Security Resources
Data Structures & Algorithms- Self Paced Course
Complete Interview Preparation- Self Paced Course
Practice Problems, POTD Streak, Weekly Contests & More!
Improve your Coding Skills with Practice Try It!

A-143, 9th Floor, Sovereign Corporate Tower, Sector-136, Noida, Uttar Pradesh - 201305
We use cookies to ensure you have the best browsing experience on our website. By using our site, you
acknowledge that you have read and understood our
Cookie Policy &
Privacy Policy

Got It !
By 2016, there were around 3424971237+ internet users over the world. Being a hub of many users, there comes a responsibility of taking care of the security of these many users. Most of the Internet is the collection of websites or web applications. So in order to prevent these web applications, there is a need of testing them again payloads and malware and for that purpose, we have a lot of tools in Kali Linux.
Kali Linux comes packed with 300+ tools out of which many are used for Web Penetration Testing. Though there are many tools in Kali Linux for Web Penetration Testing here is the list of most used tools.
Burp Suite is one of the most popular web application security testing software. It is used as a proxy, so all the requests from the browser with the proxy pass through it. And as the request passes through the burp suite, it allows us to make changes to those requests as per our need which is good for testing vulnerabilities like XSS or SQLi or even any vulnerability related to the web. Kali Linux comes with burp suite community edition which is free but there is a paid edition of this tool known as burp suite professional which has a lot many functions as compared to burp suite community edition.
Nikto is an Open Source software written in Perl language that is used to scan a web-server for the vulnerability that can be exploited and can compromise the server. It can also check for outdated version details of 1200 servers and can detect problems with specific version details of over 200 servers. It comes packed with many features, a few of them are listed below.
To use nikto, download nikto and enter the following command.
Maltego is a platform developed to convey and put forward a clear picture of the environment that an organization owns and operates. Maltego offers a unique perspective to both network and resource-based entities which is the aggregation of information delivered all over the internet – whether it’s the current configuration of a router poised on the edge of our network or any other information, Maltego can locate, aggregate and visualize this information. It offers the user with unprecedented information which is leverage and power.
To use Maltego, Go to applications menu and then select “ maltego ” tool to execute it.
SQLMap is an open-source tool that is used to automate the process of manual SQL injection over a parameter on a website. It detects and exploits the SQL injection parameters itself all we have to do is to provide it with an appropriate request or URL. It supports 34 databases including MySQL, Oracle, PostgreSQL, etc.
Whatweb is an acronym of “ what is that website “.It is used to get the technologies which a website is using, these technologies might me content management system(CMS), Javascript Libraries, etc. It is used for many purposes, a few of them are listed below.
To run whatweb, execute the following command and replace google.com with the domain name of your choice.
whois is a database record of all the registered domain over the internet. It is used for many purposes, a few of them are listed below.
To use whois lookup, enter the following command in the terminal.
Replace geeksforgeeks.org with the name of the website you want to lookup.
Writing code in comment?
Please use ide.geeksforgeeks.org ,
generate link and share the link here.

Benassi Benny Nasty
Girl Masturbate Vibrator
Sissy Ass

Penetration Testing With Kali

Report Page