By Jackson Godwin | TechTrain Academy | Cybersecurity Governance & VAPT Specialist Category: Practical Penetration Testing
Every ethical hacker's journey starts in the same place — a black screen, a blinking cursor, and Kali Linux.
Kali Linux is the world's most popular operating system for ethical hacking and penetration testing. It comes pre-loaded with over 600 security tools — from network scanners to password crackers to web application testers — all organized and ready to use. It is the Swiss Army knife of cybersecurity, and learning it is the first step in becoming a professional ethical hacker.
In this guide — the first in TechTrain Academy's Practical Penetration Testing series — I will show you exactly how to set up Kali Linux safely on your Nigerian laptop or desktop, walk you through the most important tools it contains, and teach you the essential Linux commands every ethical hacker must know.
No prior experience required. If you can use a computer, you can follow this guide.
| ⚠️ IMPORTANT LEGAL DISCLAIMER: Everything in this guide is for educational purposes only. Penetration testing and ethical hacking must ONLY be performed on systems you own or have explicit written permission to test. Using these tools against systems without permission is illegal under Nigerian law and internationally. TechTrain Academy teaches ethical hacking for defensive purposes — to help professionals protect organisations, not attack them. |
What is Kali Linux?
Kali Linux is a Debian-based Linux operating system specifically designed for digital forensics and penetration testing. It was developed and is maintained by Offensive Security — the same organisation behind the OSCP certification.
Unlike Windows or regular Ubuntu, Kali Linux comes pre-installed with hundreds of cybersecurity tools — organised by category so you can quickly find the right tool for any task. It is used by:
- Professional penetration testers conducting VAPT assessments
- Security researchers are discovering new vulnerabilities
- Cybersecurity students learning ethical hacking skills
- Digital forensics investigators analysing cyber incidents
- CTF (Capture The Flag) participants competing in hacking challenges
| Why Kali Linux? You could technically install security tools individually on Windows or regular Linux. But Kali Linux saves you enormous time by providing a pre-configured, purpose-built environment with all the tools organized and ready to use. For Nigerian students and professionals starting their ethical hacking journey, Kali Linux is the industry standard starting point — and the environment used in almost every professional penetration testing engagement globally. |
How to Set Up Kali Linux — 3 Options
There are three ways to run Kali Linux. Choose the option that best fits your computer and comfort level:
| OPTION | DESCRIPTION | BEST FOR |
| Virtual Machine (Recommended) | Run Kali Linux inside your current Windows or Mac using VirtualBox or VMware. Safest option — does not affect your main system. | Beginners — safe, easy to set up, easy to remove |
| Dual Boot | Install Kali Linux alongside Windows on your hard drive. Choose which OS to boot at startup. | Intermediate users wanting better performance |
| Bootable USB | Run Kali Linux from a USB drive without installing. Changes are not saved between sessions. | Quick testing without permanent installation |
Step-by-Step: Setting Up Kali Linux on VirtualBox (Recommended for Beginners)
Follow these steps exactly. This process typically takes 30–45 minutes on a Nigerian internet connection:
| STEP 1 — Check Your Computer Specifications |
| Before downloading Kali Linux, ensure your computer meets the minimum requirements. Kali Linux needs: at least 4GB RAM (8GB recommended), 20GB free disk space (50GB recommended), a 64-bit processor, and internet connection for downloads. |
| STEP 2 — Download and Install VirtualBox |
| VirtualBox is free software that allows you to run Kali Linux inside your current operating system. Go to virtualbox.org and download the version for your operating system (Windows, Mac, or Linux). Install it like any normal software — accept all default settings during installation. Command: Download from: virtualbox.org/wiki/Downloads |
| STEP 3 — Download the Kali Linux Virtual Machine Image |
| Instead of installing Kali Linux from scratch, download the pre-built VirtualBox image from the official Kali website. This saves hours of setup time. The file is approximately 3GB so you will need a stable internet connection. Make sure to download from the OFFICIAL Kali website only — never from unofficial sources. Command: Download from: kali.org/get-kali/#kali-virtual-machines |
| STEP 4 — Import the Kali Linux Image into VirtualBox |
| Open VirtualBox. Click File then Import Appliance. Browse to the downloaded Kali Linux .ova file and select it. Click Next and then Import. Wait for the import to complete — this may take 5–15 minutes depending on your computer speed. Command: File → Import Appliance → Select .ova file → Import |
| STEP 5 — Configure VirtualBox Settings |
| Before starting Kali Linux, right-click on it in VirtualBox and select Settings. Under System, set the RAM to at least 2048MB (2GB) — more if your computer has it. Under Display, increase the video memory to 128MB. Under Network, ensure Adapter 1 is set to NAT. Click OK to save. Command: Settings → System → Base Memory: 2048MB minimum |
| STEP 6 — Start Kali Linux and Log In |
| Double-click on Kali Linux in VirtualBox to start it. Wait for it to boot — this takes 1–3 minutes on first start. The default login credentials for the pre-built image are: Username: kali | Password: kali. You will see the Kali Linux desktop when login is successful. Command: Username: kali | Password: kali |
| STEP 7 — Update Kali Linux |
| After your first login, immediately update Kali Linux to ensure you have the latest tools and security patches. Open the Terminal (black screen icon in the taskbar) and run the update commands. This may take 10–30 minutes depending on your internet speed. Command: sudo apt update && sudo apt upgrade -y |
Essential Linux Commands Every Ethical Hacker Must Know
Before you can use Kali Linux's hacking tools, you must be comfortable with the Linux command line. Here are the most important commands:
Navigation Commands
| $ Navigate the file system |
| pwd # Show current directory ls # List files in current directory ls -la # List all files with details cd /home # Change to /home directory cd .. # Go up one directory level |
File and Directory Commands
| $ Work with files and directories |
| mkdir myfolder # Create a new directory touch myfile.txt # Create a new empty file cp file.txt backup/ # Copy a file to backup folder mv file.txt docs/ # Move a file to docs folder rm file.txt # Delete a file cat file.txt # Display file contents nano file.txt # Edit a file in nano editor |
Network Commands — Essential for Penetration Testing
| $ Network information and connectivity |
| ifconfig # Show network interface information ip addr # Modern alternative to ifconfig ping example.com # Test network connectivity netstat -tulnp # Show open network ports curl ifconfig.me # Show your public IP address route -n # Show routing table |
System Commands
| $ System information and management |
| whoami # Show current username id # Show user ID and group info uname -a # Show system information ps aux # Show running processes top # Real-time process monitor sudo su # Switch to root user history # Show command history |
Package Management — Installing Tools
| $ Install and manage software packages |
| sudo apt update # Update package list sudo apt upgrade # Upgrade installed packages sudo apt install nmap # Install a specific tool (e.g. nmap) sudo apt remove nmap # Remove a tool apt search nmap # Search for a package |
The Most Important Kali Linux Tools — Your Starter Arsenal
Kali Linux comes with over 600 tools. Here are the most important ones for beginners to learn first:
Reconnaissance Tools
| nmap | Network scanner — discover hosts, open ports, services and OS | Reconnaissance |
| whois | Domain registration information lookup | Reconnaissance |
| theHarvester | Gather emails, subdomains and names from public sources | Reconnaissance |
| maltego | Visual intelligence gathering and link analysis | Reconnaissance |
Scanning and Enumeration Tools
| nikto | Web server vulnerability scanner | Scanning |
| gobuster | Directory and file brute-forcing for web applications | Scanning |
| enum4linux | Enumerate information from Windows and Samba systems | Enumeration |
Exploitation Tools
| metasploit | World's most popular exploitation framework | Exploitation |
| sqlmap | Automatic SQL injection detection and exploitation | Exploitation |
| hydra | Network login brute-forcing tool | Exploitation |
Web Application Testing Tools
| burpsuite | Web application security testing proxy and scanner | Web Testing |
| zaproxy | Free open-source web application scanner by OWASP | Web Testing |
Password Cracking Tools
| john | John the Ripper — offline password hash cracker | Password Cracking |
| hashcat | GPU-accelerated password hash cracker | Password Cracking |
| crunch | Custom wordlist generator for password attacks | Password Cracking |
Network Analysis Tools
| wireshark | Graphical network protocol analyzer and packet capture | Network Analysis |
| tcpdump | Command-line packet capture and analysis tool | Network Analysis |
| aircrack-ng | WiFi network security assessment suite | Wireless Testing |
Your First Kali Linux Practical Exercise
Now that Kali Linux is set up and you know the basic commands, let us run your very first practical exercise. This exercise is completely safe — we will only scan your own local network:
| ⚠️ Safety Note Only scan networks you own or have permission to test. For this exercise, we will scan your local home network — which you own and control. Never scan corporate networks, your ISP, or any network without explicit written permission. |
Exercise: Discover Devices on Your Local Network
Open the Terminal in Kali Linux and follow these steps:
| $ Step 1: Find your network range |
| ifconfig # Look for your IP address e.g. 192.168.1.100 # Your network range is 192.168.1.0/24 |
| $ Step 2: Scan your local network with Nmap |
| sudo nmap -sn 192.168.1.0/24 # Replace 192.168.1.0/24 with your actual network range # This will discover all devices connected to your network |
| $ Step 3: Get more information about a specific device |
| sudo nmap -sV 192.168.1.1 # Replace 192.168.1.1 with your router's IP address # This shows what services are running on the device |
Congratulations — you just ran your first penetration testing tool! What you see in the output is a list of devices connected to your network and the services running on them. This is exactly what a professional penetration tester does at the start of every engagement.
Setting Up Your Practice Lab
To practice ethical hacking safely, you need targets to test against. Here are the safest ways to build your practice environment:
- Metasploitable 2 — A deliberately vulnerable Linux virtual machine designed for practice. Download from SourceForge and run it in VirtualBox alongside Kali Linux. Never expose it to the internet.
- DVWA (Damn Vulnerable Web Application) — A deliberately vulnerable web application for practicing web penetration testing. Install it locally using XAMPP or Docker.
- TryHackMe (tryhackme.com) — Online platform with pre-built vulnerable machines in a safe, legal environment. Excellent for Nigerian students with limited hardware.
- Hack The Box (hackthebox.com) — More advanced online hacking challenges. Work through TryHackMe first before moving here.
- VulnHub (vulnhub.com) — Free downloadable vulnerable virtual machines for offline practice.
What Comes Next — The Learning Path
Now that you have Kali Linux set up and understand the basics, here is your learning path for the next steps in this series:
| PART | TOPIC | WHAT YOU WILL LEARN |
| Part 1 | Kali Linux Setup (This Guide) | Setup, commands, tools overview, first scan |
| Part 2 | Nmap — Network Scanning | Host discovery, port scanning, service detection, OS fingerprinting |
| Part 3 | Reconnaissance & OSINT | Passive information gathering, Maltego, theHarvester, Shodan |
| Part 4 | Burp Suite — Web App Testing | Intercepting traffic, finding vulnerabilities, OWASP Top 10 |
| Part 5 | Metasploit Framework | Exploitation, payloads, sessions, post-exploitation |
| Part 6 | Password Attacks | Wordlists, John the Ripper, Hashcat, credential stuffing |
| Part 7 | Wireless Security Testing | WiFi scanning, WPA2 cracking, rogue access points |
| Part 8 | Web Application VAPT | Full web app assessment methodology, reporting |
| Part 9 | Network Penetration Testing | Full network pentest methodology, pivoting, lateral movement |
| Part 10 | Writing Professional Pentest Reports | Documentation, severity ratings, recommendations, client presentation |
| Jackson Godwin's Advice for Nigerian Beginners When I started learning ethical hacking, the biggest mistake I made was jumping straight to advanced exploitation techniques without mastering the fundamentals. Do not make the same mistake. Spend at least two weeks with Kali Linux before moving to the next topic. Get completely comfortable with the Linux command line. Understand what each basic tool does before trying to use it. Practice your first Nmap scan until you understand every line of the output. The professionals who become truly excellent ethical hackers are not the ones who rushed through the basics — they are the ones who built a rock-solid foundation first. Take your time. The tools will still be there when you are ready. |
Conclusion
You have taken the first step. Kali Linux is installed, you understand the basic commands, you know the most important tools, and you have run your first network scan. The foundation is in place.
From here, every blog post in this series will build on what you learned today — taking you deeper into specific tools, techniques, and real-world penetration testing methodology. By the time you complete all 10 parts, you will have the practical skills to conduct professional penetration testing engagements.
Bookmark this page. Share it with fellow Nigerian cybersecurity students. And come back next week for Part 2 — where we go deep into Nmap and everything it can reveal about a target network.
The journey has begun. Welcome to ethical hacking.
| Ready to Learn Ethical Hacking the Right Way? TechTrain Academy offers practical, hands-on ethical hacking and penetration testing training — from Kali Linux basics to advanced VAPT techniques. Learn in a safe, legal lab environment with guidance from certified cybersecurity professionals. Enroll in Our Ethical Hacking Course | Email: info@jacksontechnology.com| Visit TechTrain Academy |
| About the Author Jackson Godwin is a Cybersecurity Governance & VAPT Specialist and founder of TechTrain Academy. With over 40 web and mobile application security assessments conducted across Nigerian financial institutions, government agencies, and enterprises, Jackson brings extensive real-world penetration testing experience to this series. He has trained over 200 cybersecurity professionals across Nigeria, Ghana, and Gambia. |
TAGS: Kali Linux beginner Nigeria, how to install Kali Linux Nigeria, Kali Linux ethical hacking Nigeria, learn Kali Linux Nigeria, penetration testing beginners Nigeria, ethical hacking tools Nigeria, TechTrain Academy, Jackson Godwin VAPT