Pentesting with Kali by David Santo Orcero

"Pentesting with Kali" by Spanish author David Santo Orcero was my very first cybersecurity book. This review — originally written in 2019 and now revised — reflects on what the book does well and where it could improve.

You can find the book at pentestingconkali.com and learn more about the author at peritoeninformatica.pro.

Click to enlarge

Pentesting con Kali — a beginner-oriented penetration testing guide

Initial Impressions

Upon first glance, one might expect a dense, deep hard to digest book. Yet, "Pentesting con Kali" manages to convey a lot of information in just 300 pages—a surprise to those expecting a heavier volume (of course, focus on beginner).

Book Overview

The book spans 11 chapters, covering penetration testing phases, Kali distributions, web audits, an introduction to Metasploit, and more. It touches on a pentester's value, legal warnings, monetizing skills, and offers a deeply personal take on productivity and efficiency.

Content Depth and Utilization

While the book provides a broad overview, it notably includes up to four pages of screenshots for certain tools, which, given the book's brevity, suggests an opportunity for deeper online supplementary resources.

Enhancing the Learning Experience

A potential improvement could involve the author's website offering tutorial videos, maximizing the book's limited physical space to expand on tools or processes.

Personal Highlights and Insights

• Phases of a Penetration Test: The book excels in concisely explaining the different phases of a pentest, offering clarity and insight in just a few pages.
• Legal Warnings: Chapter 9 dives into the ethical use of pentesting tools, illustrating how mere possession of Kali Linux can present risks, and offers practical advice for mitigating potential legal issues.
• Life Beyond Pentesting: Perhaps the most intriguing aspect is the author's personal approach to life and productivity, sharing methods for a balanced and efficient lifestyle.

Final Thoughts

"Pentesting con Kali" is a must-read for newcomers to cybersecurity, offering a concise yet comprehensive guide to the essentials of pentesting with Kali Linux. While seasoned professionals might find the content a review, the book's structure and additional resources encourage further exploration and learning.

Acknowledgments

A heartfelt thank you to my first cybersecurity teacher, Matías Sliafertas from the Universidad Técnica Nacional (UTN), for his support, encouragement, and constructive feedback. His guidance and passion for teaching was an invaluable starting point for learning information security.

Test Your Technical Knowledge