Penetration Testing a Linux Machine (Beginners Level) | By PITPQ8
This is a Guest Session which is conducted and recorded by PITPQ8 (Pakistani IT professionals in Kuwait). PITPQ8 has the mission to bring Pakistani IT professionals residing in Kuwait on a platform where they can share skills, experiences, exchange technological ideas, cooperate with each other and network with like-minded IT professionals in Kuwait. For more details please visit https://www.pitpq8.com/.
Video Description :
===============
This is our First session of “Penetration Testing a Linux Machine” and is for educational purposes only. It is designed over VMware and Oracle platform and the level is beginner .
You can download Kali Linux machine from according to your host OS from here.
https://www.kali.org/downloads/
For session-1 we have selected metasploitable-2 vulnerable machine which can be downloaded from https://www.vulnhub.com/entry/metaspl... .
The purpose of selecting this machine is to demonstrate basic steps and techniques which a pentest engineer should know and practice, since this machine is configured with lots of security flaw it provides a perfect ground for beginners.
Penetrating Methodologies
======================
Netdiscover (Finding Target IP)
Scanning (Nmap Enumeration, FTP, SMTP, SMB, etc.)
Searchexploit (For searching available exploits)
Exploiting VSFTPD, SMTP
Brute Forcing SSH
Privilege Escalation using SBID
Collecting and recording evidences
Removing Tracks , deleting logs (shred)
Presenter :
========
Mr. Najam ul Hassan* is a seasoned Cyber Security professional with 12+ years of experience in Network & Information Security having extensive knowledge and hands-on experience, on Implementing and Securing Networks. He has done many Penetration Testing projects for Government Organizations and private as well. Holds prestigious Cyber Security and IT certifications including CISSP, CISM, CHE v10, CPTE (Certified Pentest Eng. by Mile2), CCNP-Sec.
LinkedIn Profile :
=============
/ najam-hasan-54871911
#PenetrationTesting #GISPP #EthicalHacking #GISPPTraining