Penetration Testing Using The “Kill Chain” Methodology (W28) - Pentestmag

Penetration Testing Using The “Kill Chain” Methodology (W28)

(1 customer review)


Out of stock



Penetration Testing using The "Kill Chain" Methodology is an online course in which you will learn how to perform Penetration Test step by step using the "Kill Chain" Methodology. This course is intended for technical astute audience and this is a 98% hands on course.

The course is available only for premium subscribers.


Information Gathering - Passive Reconnaissance

  • Netcraft.comgraph
  • Whois Lookup
  • Linux Dig Command
  • Linux Traceroute and Mtr
  • Social Engineering ToolKit
  • And More ...

Sniffers - Passive sniffing

  • Wireshark
  • Etherape
  • Advanced MitM Framework

Vulnerability Analysis

  • OpenVas
  • Nikto
  • W3af

Scanners   Active scanning

  • Nmap and Zenmap
  • And More ...

Vulnerability Exploits

  • Veil-Evasion
  • The Metasploit Framework
  • And More ...

Test analysis

  • Client-side Exploitation
  • Exploiting targets with Armitage

What will you learn in this course:

This course is intended for a technically astute  audience. The participant should have some general knowledge of the systems that we'll be testing. After covering some tools and techniques, you will have a good fundamental understanding of penetration testing and assessments.

What will you need (course requirements – software):

Pen-testing OS:

  • “K” Linux - Free Download

Virtual Machine Applications:

  • VMWare Player - Free
  • VirtualBox - Free Download for Linux, Windows, and OSx
  • Parallels - Costs Money; For OS X

Other miscellaneous tools:

  • TeamViewer - Free; For remote live demos; Not required
  • Your Brain - Free

Virtual Machine Images: LAMPSecurity  Is designed to be a series of vulnerable virtual machine images along with complementary documentation designed to teach Linux, Apache, Php, Mysql security.

What skills you should have before you join:

We will use some of the most “popular” tools used in pen-testing. Some experience in IT Security, solid basic knowledge of TCP/IP networks. Comfortable at the command line under Linux and Windows.


Module 1 Test Preparation Phase

Topic 1: Topic 2: Linux commands Topic 3: Social Engineering ToolKit


  1. a) Use Linux commands to do passive Reconnaissance
  2. b) Use Wireshark for passive sniffing the LAN
  3. c) Use SET to set up fake clone website to steal user credentials.
  4. d) Use SET to craft fake email and a malicious pdf document.

Module 2 – Vulnerability Analysis

Topic 1: OpenVas Topic 2: Nikto Topic 3: W3af Topic 4: Exploit­


  1. a) Use tools learned in topic 1 thru 4 to perform a vulnerability assessment against LAMPSecurity.
  2. b) Discuss vulnerabilities and remediation.

Module 3 – Scanners - Active scanning

Topic 1: Nmap Topic 2: Zenmap Topic 3: Advanced MitM Framework


  1. a) Perform active scans against LAMPSecurity (target) in your pen-tesing lab environment.
  2. b) Perform an man-in-the-middle attack against chosen target.

Module 4 – Vulnerability Exploits And Test Analysis

Topic 1: Veil-­Evasion Topic 2: The Metasploit Framework Topic 3: And More ...


  1. a) Craft malicious payload to bypass anti-virus.
  2. b) Set up local web server to host the malicious payload.
  3. c) Set up command and control server (C2 Server) with Metasploit Framework.

Test analysis:

  1. a) Client ­side Exploitation
  2. b) Exploiting targets with Armitage

Final Exam:  Good Luck ;)

Your instructor: Rupert Edwards

I’m a Linux professional possessing LPIC-3 Linux Professional Institute certification and CompTIA Cloud Essentials. I also have over 15 years of computer security experience, over 15 years of systems engineering as a security expert, 15 years as a lecturer and trainer, and 35 years of industry experience. Programming: PHP, Perl, Python, Ruby, Shell, and Penetration tester extraordinaire.

You can find me on G+  You can read an interview with our instructor here:

Questions? Reach out to us at [email protected]

1 review for Penetration Testing Using The “Kill Chain” Methodology (W28)

  1. Pentest TEAM

    great course

Add a review

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

© HAKIN9 MEDIA SP. Z O.O. SP. K. 2023