# Pentesting with Kali by David Santo Orcero

Author: Ricardo Prieto

Published: 2024-03-12

Language: English (en)

[https://www.philocyber.com/en/blogs/kali-linux-intro-book-review](https://www.philocyber.com/en/blogs/kali-linux-intro-book-review)

A beginner review for a beginner oriented penetration testing book.

**Article brief**

Three hundred pages is all David Santo Orcero takes to walk a newcomer from zero to a working understanding of pentest phases, Metasploit basics, and the legal realities of carrying Kali Linux. This review highlights what the book does best—concise phase explanations and a surprisingly personal take on productivity—while pointing out where supplementary video material could fill the gaps left by pages of screenshots.

***

"Pentesting with Kali" by Spanish author David Santo Orcero was my very first cybersecurity book. This review — originally written in 2019 and now revised — reflects on what the book does well and where it could improve.

You can find the book at [pentestingconkali.com](http://www.pentestingconkali.com/) and learn more about the author at [peritoeninformatica.pro](http://www.peritoeninformatica.pro/).

![Cover of Pentesting con Kali by David Santo Orcero](https://www.philocyber.com/blogs/pentestingconkali.jpg)

Pentesting con Kali — a beginner-oriented penetration testing guide

**Initial Impressions**

Upon first glance, one might expect a dense, deep hard to digest book. Yet, "Pentesting con Kali" manages to convey a lot of information in just 300 pages—a surprise to those expecting a heavier volume (of course, focus on beginner).

**Book Overview**

The book spans 11 chapters, covering penetration testing phases, Kali distributions, web audits, an introduction to Metasploit, and more. It touches on a pentester's value, legal warnings, monetizing skills, and offers a deeply personal take on productivity and efficiency.

**Content Depth and Utilization**

While the book provides a broad overview, it notably includes up to four pages of screenshots for certain tools, which, given the book's brevity, suggests an opportunity for deeper online supplementary resources.

**Enhancing the Learning Experience**

A potential improvement could involve the author's website offering tutorial videos, maximizing the book's limited physical space to expand on tools or processes.

**Personal Highlights and Insights**

- **Phases of a Penetration Test**: The book excels in concisely explaining the different phases of a pentest, offering clarity and insight in just a few pages.
- **Legal Warnings**: Chapter 9 dives into the ethical use of pentesting tools, illustrating how mere possession of Kali Linux can present risks, and offers practical advice for mitigating potential legal issues.
- **Life Beyond Pentesting**: Perhaps the most intriguing aspect is the author's personal approach to life and productivity, sharing methods for a balanced and efficient lifestyle.

**Final Thoughts**

"Pentesting con Kali" is a must-read for newcomers to cybersecurity, offering a concise yet comprehensive guide to the essentials of pentesting with Kali Linux. While seasoned professionals might find the content a review, the book's structure and additional resources encourage further exploration and learning.

**Acknowledgments**

A heartfelt thank you to my first cybersecurity teacher, **Matías Sliafertas** from the Universidad Técnica Nacional (UTN), for his support, encouragement, and constructive feedback. His guidance and passion for teaching was an invaluable starting point for learning information security.

## Test Your Technical Knowledge