Conduct Penetration Testing Exercises using Kali Linux and Metasploit Framework

Learning Objectives

At the end of this topic, you will be able to:

1. Define penetration testing scope, rules of engagement, and authorisation requirements.
2. Explain penetration testing methodologies and phases (PTES, OWASP, MITRE ATT&CK).
3. Describe the Kali Linux environment and its key tool categories.
4. Explain the Metasploit Framework’s architecture, modules, and workflow.
5. Describe post-exploitation, privilege escalation, and evidence-handling principles.
6. Structure penetration testing findings into a professional report with remediation recommendations.