
Master Linux fundamentals and bash scripting to boost productivity in pentesting and bug bounties. Build custom scripts for subdomain enumeration, fuzzing, and automating vulnerability hunts in a lab setup.
Launch a Parrot OS virtual machine, open the terminal, and learn essential commands like ls, who am I, and hostname to see the user and machine information.
Learn how to install VirtualBox, set up a virtual machine, and configure basic settings (RAM, dynamically allocated storage, and an ISO) to run Windows 7 64-bit for pen testing practice.
Install and configure VMware Workstation Player on Windows or Linux, create a virtual machine, and explore basic settings to run Linux operating systems like Ubuntu or Kali Linux.
Download the 64-bit kali linux iso from kali.org, create a vmware workstation 16 player machine, attach the iso, and perform a graphical install with hostname hacktify, a user, partitioning, grub.
Install Kali Linux in VirtualBox on a Windows host by downloading the Kali ISO, configuring a Debian 64-bit VM, and booting to install.
download and unzip a ready-made kali linux vmware setup from kali.org, import the virtual machine, adjust memory to 4 gb, boot, and log in with username kali and password kali.
Install Kali Linux as a virtual machine in VirtualBox by importing the OVA file, then adjust memory and network settings and log in with Kali Kali.
Understand the Windows boot process from bios to the login screen. Examine the bootloader, boot files, kernel, services, and the SAM and LSA security checks.
Follow the Linux boot process from BIOS to run levels, detailing how BIOS loads the MBR, GRUB selects a kernel, the kernel starts init, and run levels launch startup scripts.
Discover how to reset the root password on Kali Linux using grub, from the boot menu to password management, for secure access recovery.
Learn to secure grub by generating a pbkdf2 hash with grub-mkpassword, then configure /etc/grub.d/40_custom with a root password and hash, refresh grub config, and reboot to prompt grub authentication.
Explore how package managers verify integrity with checksums and certificates, learn to install, upgrade, and remove packages with yum, apt, dpkg, brew, rpm, and Chocolatey on Red Hat, macOS, Windows.
Learn how yum, a rpm-based package manager, installs and removes packages on Red Hat based systems like CentOS, Red Hat, and Fedora, resolving dependencies automatically when using sudo.
Learn how to use homebrew, the brew package manager for macOS or Linux, to install, update, and verify packages like wget with automatic dependencies.
Learn how dpkg, a Debian-based package manager, handles manual installation and dependency resolution. Use apt-get install to automatically install dependencies for curl.
This lesson explains rpm, the Red Hat package manager, and how .rpm files require dependencies like glibc and libnettle, contrasting manual installs with automatic dependency resolution by package managers.
Discover how Chocolatey, a Windows package manager, simplifies installing, removing, upgrading, and updating software with a large repository of over 4,000 packages, including VLC and Python, via simple commands.
Master apt, the advanced package tool on Kali Linux, a command line package manager for installing, removing, updating, and upgrading software. Read the manual with man to understand commands.
Learn to search for packages by description when you don't know the name, using apt search and apt show to inspect details for a GUI FTP client.
Learn to install and remove packages on linux using apt, including apt install and apt remove. Verify tools with apt show and practice using filezilla for ftp transfers.
Update packages by running apt update to refresh repositories, check for newer versions, and upgrade 332 packages to the latest versions, addressing bugs and security fixes.
Learn how to upgrade all installed packages to their latest versions using apt update and upgrade, confirm prompts, and anticipate a 10 to 15 minute update process.
Add and manage custom repositories in Kali Linux by editing /etc/apt/sources.list and sources.list.d, updating apt, and installing tools such as Google Chrome, ProtonVPN, and Signal.
Explore how the Synaptic graphical package manager, based on GTK Plus and apt, lets you install and remove software via a simple GUI, illustrated with Cherry Tree.
Clone and install tools not in official repos using git clone from GitHub on kali linux. Demonstrate with sublistr, a python tool for subdomain enumeration, to show practical usage.
Explore essential Linux system information commands used in pentesting, including uname, uname -a, and cat /proc/version. Determine uptime, hostname, IP address with hostname -i, last reboot, date, cal, and w.
Learn essential linux hardware information commands, including dmesg, /proc/cpuinfo, free -h, lspci, lsusb, dmidecode, and df, to inspect kernel messages, cpu and memory details, peripherals, bios data, and disk usage.
Learn to monitor Linux performance using top and htop to view processes, memory, and CPU usage. Explore mpstat, vmstat, iostat, and syslog, including tailing logs for real-time insights.
Learn linux performance monitoring with lsof to list open files, free for memory, du and df for disk usage, and watch or top for real-time updates.
Learn to view user info and manage accounts in Linux using id, last, who, and w, and create, modify, and delete users and groups with groupadd, useradd, and userdel.
Welcome to Linux for Pentesting & Bug Bounties Course. This course covers fundamentals of Linux and Bash scripting to write your own tools which can be useful for penetration testing and bug bounties. There is no prerequisite of prior linux knowledge and you will be able to install linux, understand fundamentals, write bash scripts for web attacks and mass automation.
This course helps any beginner to intermediate to understand linux fundamentals to make you comfortable with using linux and writing bash scripts tools.
This course will start from basic fundamentals of linux like - commands, directory structure, network management, archive management, linux file permissions, performance monitoring, userinfo management, input/output redirection, linux ip tables, virtual hosting and much more.
In addition to fundamentals of linux, you will also learn how to write your own tools in bash for Subdomain Enumeration - Active & Passive, Directory Fuzzers, CORS Automation, XSS Automation, Open Redirect Automation, Wayback using Bash etc.
This course is highly practical which helps you learn on exact environment when you start your penetrating testing or bug hunting journey.
This course also includes important interview questions and answers related to linux which will be helpful in any job interviews.
Here's a more detailed breakdown of the course content:
In all the sections we will start the fundamentals of Linux and Writing Bash Scripts to make our own useful tools.
In Introduction to Linux, we will cover What is Linux, Difference between Windows and Linux, Different Flavours of Linux and Tour to Penetration Testing OS like Kali Linux and Parrot OS.
We will see all the types of XSS attacks on live websites which will give you a better understanding of the live environment when you will start your bug hunting journey.
We will also cover Lab Setup for Installation of Linux in Virtual Box and VMware, We will also cover how to setup readymade virtual machine ova files as well which will save your time of installation.
Boot Process - Windows & Linux Boot Process,
Password Management - Breaking root password, Setting password for GRUB
Package Managers - yum, apt, brew, dpkg, rpm, chocolaty, searching for package, installing packages, removing packages, adding repositories, GUI Package managers, how to use git.
Linux Fundamentals - Linux System Information Commands, Linux Hardware Information Commands, Performance Monitoring Commands, User info and Management Commands, File, Directory and Deletion Commands, Directory Management Commands, Rename,Move and Case Sensitive Commands, Symbolic Links Commands, File Reading Commands, Process and Kill Commands, Background and Foreground Commands, Linux Permissions Fundamentals, Linux Network Management, Linux DHCP Server, What is DNS?, Linux Archive Management Commands, Linux Search and Pattern Commands, Linux SSH Management, Linux SAMBA Management, Linux File System Architecture, Linux IP tables, Web Servers, Virtual Hosts, Bash Scripting Basics, User Inputs, Bash Loops, Customising shell, Using Linux for recon,
Shell Scripting - We will create scripts/tools for Subdomain Brute force, CORS Automation, URLS to Domain, Waybackurls using Bash, HTTPX/ HTTProbe Tool using Bash, Open Redirect/SSRF and much more.
You will also get additional BONUS sessions, in which I m going to share my personal bash scripts for hunting bugs. I have also added Interview Questions and answers for linux which will be helpful for those are preparing for Job Interviews and Internships.
With this course, you get 24/7 support, so if you have any questions you can post them in the Q&A section and we'll respond to you as soon as possible.
Notes:
This course is created for educational purposes only.
Testing any website which doesn’t have a Responsible Disclosure Policy is unethical and against the law, the author doesn’t hold any responsibility.