Penetration Testing with Kali Linux PEN-200 OSCP

Module 1: Introduction to Penetration Testing

• Course objectives and OSCP exam overview

• Understanding the hacker mindset

• Introduction to Kali Linux and lab setup

• Penetration testing process (pre-engagement, engagement, post-engagement)

Module 2: Information Gathering

• Passive reconnaissance (WHOIS, DNS, OSINT tools)

• Active reconnaissance (Nmap, service enumeration)

• Scanning networks and identifying hosts

• Banner grabbing and target profiling

Module 3: Vulnerability Scanning and Analysis

• Identifying and analyzing vulnerabilities

• Using tools like Nikto, OpenVAS, and NSE

• Manual verification of vulnerabilities

• Mapping services to attack vectors

Module 4: Gaining Access – Exploitation

• Exploiting known vulnerabilities (Metasploit & manual methods)

• Brute-force and password attacks

• Working with public exploits (Exploit-DB)

• Exploiting services (FTP, SMB, RDP, SSH)

Module 5: Web Application Attacks

• Manual web app testing techniques

• SQL Injection, Command Injection, XSS, LFI/RFI

• Bypassing authentication and exploiting CMSs

• Web shell deployment

Module 6: Windows Privilege Escalation

• Identifying privilege escalation vectors

• Exploiting weak services and misconfigurations

• Bypassing UAC

• Using tools like PowerUp and WinPEAS

Module 7: Linux Privilege Escalation

• Kernel exploits and misconfigurations

• Sudo misuses and weak permissions

• Exploiting cron jobs and PATH hijacking

• Using tools like LinPEAS and Linux Exploit Suggester

Module 8: Active Directory Attacks

• Domain enumeration and recon

• Attacking SMB shares and Kerberos

• Exploiting common AD vulnerabilities

• Lateral movement and token impersonation

Module 9: Client-Side Attacks and Bypasses

• Social engineering concepts

• File format exploits

• Antivirus evasion basics

• Payload creation and delivery

Module 10: Post-Exploitation and Reporting

• Maintaining access (persistence)

• Data exfiltration and lateral movement

• Clearing logs and covering tracks

• Writing professional penetration testing reports

Module 11: OSCP Exam Prep

• Exam strategy and time management

• Practice lab reviews and walkthroughs

• Report writing guidelines

• Simulated exam challenges

By the end of this 100-hour course, learners will be able to:

• Understand the Penetration Testing Process: Apply a structured methodology for planning, executing, and reporting on ethical hacking engagements.
• Effectively Use Kali Linux: Navigate and utilize Kali Linux tools to conduct reconnaissance, exploitation, and post-exploitation tasks.
• Perform Comprehensive Reconnaissance: Gather actionable intelligence about systems and networks using both passive and active information-gathering techniques.
• Identify and Exploit Vulnerabilities: Analyze network services and applications to uncover and exploit security flaws using manual and automated tools.
• Conduct Web Application Attacks: Perform hands-on attacks such as SQL Injection, XSS, and LFI to identify and exploit vulnerabilities in web environments.
• Escalate Privileges on Compromised Systems: Gain deeper system access by exploiting misconfigurations and known weaknesses in both Windows and Linux environments.
• Execute Attacks on Active Directory Environments: Enumerate domains, perform credential attacks, and exploit weaknesses in Windows domain infrastructure.
• Bypass Security Controls: Evade basic antivirus protections and deliver custom payloads using client-side attacks and encoding techniques.
• Document and Report Findings Professionally: Produce clear, structured, and impactful penetration testing reports for clients or stakeholders, with actionable remediation advice.
• Demonstrate Readiness for OSCP Certification: Solve real-world hacking scenarios under time constraints and pressure, preparing for the rigorous OSCP exam.

This course is ideal for:

• Aspiring Ethical Hackers looking to start a career in penetration testing and red teaming.
• Cybersecurity Enthusiasts who want to gain hands-on experience with real-world attack scenarios and CTF environments.
• IT Professionals including network administrators, system administrators, and security analysts seeking to enhance their offensive security skills.
• Computer Science and IT Students aiming to specialize in cybersecurity or ethical hacking.
• Bug Bounty Hunters interested in improving their vulnerability discovery and exploitation techniques.
• Security Engineers and Architects who want to better understand attacker methodologies to build more secure systems.
• Professionals preparing for certifications like CEH, OSCP, PenTest+, or other offensive security credentials.