How to Learn Linux Before Starting Penetration Testing
Short answer: Before penetration testing, learn Linux in this order: the command line and file system, then permissions, then networking, then shell scripting, and only then pick up a pentest distribution like Kali Linux. Trying to start with Kali before you understand Linux is the most common beginner mistake, because the distro gives you tools, not the fundamentals to use them.
TL;DR: Build Linux fundamentals in five ordered steps — command line, permissions, networking, scripting, then Kali — so every tool you pick up later makes sense rather than being a black box you copy-paste.
Key Takeaways - Learn the fundamentals first: command line, permissions, networking, and basic scripting beat jumping straight into tools. - Kali Linux is a Debian-based distribution maintained by OffSec that bundles pentest tooling; it is a toolbox, not a tutorial. - You do not need to master every tool. You need to understand the system well enough to drive any tool. - Practice only on systems you own or are authorized to test, using legal lab platforms.
Why Linux comes before the tools
Penetration testing tools assume you already understand the system they run on. If you do not know how permissions work, a privilege-escalation finding means nothing to you. If you cannot read ip or ss output, enumeration stalls. Kali Linux ships with hundreds of tools, but a tool you do not understand is a tool you cannot use. Build the foundation first, and every tool becomes easier.
The roadmap
| Step | Focus | Why it comes here |
|---|---|---|
| 1 | Command line and file system | Everything else happens at the terminal |
| 2 | Permissions | The basis of access control and privilege escalation |
| 3 | Networking | Enumeration and exploitation are network activities |
| 4 | Shell scripting | Automate repetitive tasks and read others' tools |
| 5 | Kali Linux and tools | Apply the fundamentals with purpose-built tooling |
Step 1: Command line and file system
Live in the terminal until it feels natural. Navigate, read and search files, and understand the directory layout. The Linux commands every cybersecurity beginner should know is the right starting list. The foundational commands — ls, cd, cat, grep, find, chmod, and man — are all documented in the GNU Coreutils documentation. You can practice all of them in any Linux VM without installing anything extra; every command ships with the base system.
Step 2: Permissions
Access control is a file-level concept in Linux, and misconfigurations are a classic attack path. Work through Linux file permissions explained for security professionals until octal modes and the special bits are obvious to you. The primary tool here is chmod; its full specification is the chmod man page, which covers symbolic and numeric modes. Understanding how to read and set permissions directly is what makes privilege-escalation findings readable, not just reproducible.
Step 3: Networking
Enumeration is a networking exercise. Learn the TCP/IP model and the modern tools in Linux networking fundamentals for ethical hackers. The model itself is specified in RFC 1122, which defines the four-layer TCP/IP stack that every packet on the internet follows. Understanding addressing, ports, and routing at this level means you can reason about what a tool is doing, not just run it and read output.
Step 4: Shell scripting
You do not need to be a developer. You need enough Bash to automate repetitive steps and understand the scripts that tools and exploits are built from. A loop like this, which checks which hosts on a subnet respond to ping, is the kind of small automation you will write constantly:
for i in $(seq 1 254); do
ping -c1 -W1 192.168.1.$i &>/dev/null && echo "192.168.1.$i is up"
done
Step 5: Kali Linux and the tooling
Only now does a pentest distribution pay off. Kali Linux is an open-source, Debian-based distribution maintained by OffSec that bundles tools such as Nmap, Metasploit, Wireshark, Burp Suite, Aircrack-ng, and John the Ripper. With the fundamentals in place, you can actually drive these tools instead of copying commands you do not understand.
Practice legally
As you build skills, only ever practice on systems you own or are explicitly authorized to test. The roundup of ethical hacking labs for beginners lists legal, purpose-built platforms. When you are ready to validate everything under exam conditions, the CEH practical exam preparation guide shows what that looks like.
Frequently asked questions
How much Linux do I need before penetration testing?
Enough to be comfortable at the command line, understand permissions, read basic networking output, and write simple shell scripts. You do not need to be a Linux administrator, but these fundamentals should feel routine before you rely on pentest tools.
Should I start with Kali Linux as a beginner?
Not as your very first step. Kali is a toolbox that assumes you already understand Linux. Learn the command line, permissions, and networking first, then use Kali to apply those fundamentals with purpose-built tools.
What is Kali Linux?
Kali Linux is an open-source, Debian-based Linux distribution maintained by OffSec for penetration testing and security auditing. It bundles widely used tools such as Nmap, Metasploit, Wireshark, Burp Suite, Aircrack-ng, and John the Ripper.
Do I need to learn programming to do penetration testing?
You need enough scripting, typically Bash and some Python, to automate tasks and read others' tools. You do not need to be a full software engineer to start, though deeper programming helps as you advance.
ThreatBlock's Linux Essentials course takes you from your first terminal command to confident Kali use, in the order that actually works.
About the author: Samaksh is Lead Instructor at ThreatBlock and holds the OSCP, CRTP, CRTO, and CEH certifications, with hands-on experience in penetration testing and red teaming. Read more on the author page · Editorial policy.