Kali Linux Revealed (PEN-103)

Security teams that run penetration tests without a shared, disciplined approach to tooling and scope create real organizational risk: inconsistent Kali builds, unvetted third-party packages, and testers who drift outside their rules of engagement. Kali Linux Revealed (PEN-103) gives IT Directors and Team Leads a way to standardize how their security staff install, configure, and use Kali, and how they stay inside legal boundaries while doing it.

Role fit: Best for pentesters, network security analysts, and system administrators who already have a working Linux foundation. The course builds directly on Network Penetration Testing Essentials (PEN-100), so assign PEN-100 first to anyone new to Kali or virtualization.

Time investment: About 6 hours across seven skills. Topics include installation in VMware, network discovery with Nmap and Zenmap, the Metasploit Framework, package updates and upgrades with apt, live-boot usage, and the legal side of pen testing. Most practitioners can finish within a week or two alongside normal duties.

Risk and compliance framing: A full skill covers legal exposure. It explains rules of engagement, signed authorizations, excluded IP addresses within an in-scope range, man-in-the-middle considerations, and how to handle PII found during testing. It also stresses logging and reporting everything. This matters to any organization that commissions internal or third-party testing.

Change management: Challenge exercises ask security staff to define scope for a realistic engagement, which gives Team Leads a common baseline to review. Bundle PEN-100 and PEN-103 into a Playlist for a clear progression from foundational penetration testing concepts into Kali Linux administration and penetration-testing workflows. Use Team Reporting to track completion across your security staff.

IT teams use this training to run penetration testing workflows that are useful, repeatable, and defensible. The course focuses on Kali Linux as the operating environment for authorized security work, with coverage of command-line Nmap scanning, wireless testing, password attacks, Metasploit, and live OS workflows. It keeps the legal line clear: penetration testing starts with defined scope, rules of engagement, and signed authorization.

• Fewer out-of-scope incidents: Practitioners learn to anchor every engagement in a defined scope, rules of engagement, and signed authorization. They also learn to log and report findings so the organization stays clear of legal and contractual violations.
• Quieter, more accurate network discovery: Teams use command-line Nmap for network discovery, along with wireless scanning and vulnerability assessment. They also learn why slower scans are less likely to trigger IDS/IPS alerts. This supports both pen testing and forensic investigation.
• Defenders who understand attacker tooling: Hands-on work with Metasploit modules and search, plus options for when Metasploit isn't available, helps your team see how exploits work so they can block them.
• Consistent, maintainable Kali builds: Team members install Kali in VMware, run it as a live OS for examining a target system's drive, and inspect Debian packages before installing them. Inspecting packages first helps confirm that third-party tools help rather than harm the system.

Knowledge

• How a penetration test scope is defined, including testing plan design, pre-release and deployment testing, and red team application security exercises
• Why rules of engagement, signed memorandums, and a clearly defined target list must be in place before any Kali tool touches a system
• How Metasploit modules are organized and searched, and what options exist when a full Kali framework is not available
• How Debian packages are structured, including how to inspect a third-party package to see what it installs and where
• The difference between a traditional hard-drive Kali install and a live OS that runs in RAM to examine a system's contents
• Why slow Nmap scans are less likely than fast scans to trigger IDS or IPS detection

Ability

• Download, install, and configure Kali Linux in a VMware virtual machine
• Discover and monitor networks with command-line Nmap scans
• Search for and select Metasploit exploit modules during an engagement
• Install, manage, and evaluate Debian packages, including third-party packages, on a Kali system
• Boot Kali as a live OS from removable media to inspect a target without writing to its drive
• Keep reconnaissance and testing activities inside approved scope, handle any PII found, and log and report findings for compliance