Penetration Testing with Kali Linux: Practical Ethical Hacking Workshop

Course overview

Penetration Testing with Kali Linux is a practical cybersecurity workshop designed to equip participants with the knowledge and skills required to identify, assess, and report security vulnerabilities in authorized systems, networks, web applications, and other digital environments. The workshop introduces participants to the penetration testing lifecycle and demonstrates how Kali Linux and industry-standard security tools can be used for reconnaissance, vulnerability assessment, security testing, exploitation validation, and reporting.

Through guided demonstrations, practical laboratory exercises, and controlled security-testing scenarios, participants learn how ethical hackers approach real-world cybersecurity assessments. The course emphasizes responsible penetration testing, authorization, evidence collection, risk assessment, remediation, and professional reporting, making it suitable for cybersecurity professionals, IT teams, system administrators, developers, auditors, and aspiring ethical hackers.

Course objectives

• Explain the principles, scope, ethics and methodology of penetration testing.
• Set up and navigate a Kali Linux penetration testing environment.
• Conduct network discovery and service enumeration.
• Perform controlled exploitation in laboratory environments.
• Apply ethical and legal principles when conducting security assessments.
• Analyze network traffic and identify potential security weaknesses.

Who should attend

Course content

• Module 1: Introduction to Penetration Testing What is penetration testing? Ethical hacking vs penetration testing Vulnerability assessment vs penetration testing Security assessment methodologies Types of penetration tests Black-box, white-box and grey-bo
• Module 2: Kali Linux for Cybersecurity Introduction to Kali Linux Kali Linux installation options Virtual machines and laboratory environments Kali Linux desktop and terminal Linux commands for security testing File and directory management Users and perm
• Module 3: Information Gathering & Reconnaissance Passive and active reconnaissance Understanding the target environment Domain and DNS information Host discovery Network mapping Identifying technologies and services OSINT concepts Reconnaissance tools ava
• Module 4: Network Scanning & Enumeration Network discovery Port scanning concepts TCP and UDP scanning Service identification Operating system detection Network enumeration Understanding open, closed and filtered ports Nmap fundamentals Interpreting scan
• Module 5: Vulnerability Assessment Understanding vulnerabilities Common vulnerability categories Vulnerability scanning CVE and CVSS concepts Identifying outdated services Misconfiguration discovery Vulnerability validation False positives and false negat
• Module 7: Password and Authentication Security Testing Authentication fundamentals – understanding how systems verify user identity. Password security principles – password length, complexity, reuse and common password weaknesses. Password policy asse
• Module 8: Web Application Penetration Testing Introduction to web application security – understanding the attack surface of modern web applications. HTTP and HTTPS fundamentals – understanding requests, responses, headers, cookies and sessions. Web a
• Module 9: Exploitation and Security Validation Understanding exploitation – explaining how vulnerabilities can potentially be used to compromise systems. Exploit vs vulnerability – distinguishing between a security weakness and the technique or code u
• Module 10: Wireless Network Security Testing Introduction to wireless security – understanding wireless networks and common security considerations. Wireless reconnaissance – identifying authorized wireless networks, channels and security configuratio
• Module 11: Privilege Escalation and Post-Exploitation Concepts Understanding privilege levels – examining the difference between standard and privileged accounts. Privilege escalation concepts – understanding how security weaknesses can result in unau
• Module 12: Penetration Testing Reporting and Remediation Purpose of penetration testing reports – communicating technical findings to management, IT teams and other stakeholders. Executive summary – presenting the overall assessment in language approp

Schedule & fees