CNS 388 Security Testing and Assessment

Assignment Help Computer Network Security

Reference no: EM132470854

CNS 388: Security Testing and Assessment - DePaul University

The objective of the final lab is to use the skills, techniques, and tools you have learned in this course to obtain a set of flags (hints) and compromise all the systems of our mock company by performing a penetration test. You will need to use everything from nmap scans and DNS zone transfers to Metasploit and some ingenuity to accomplish this goal.

Scope
Our mock company's name is DePaulSecLabs, Inc. with the domain name cns388corp.depaulseclabs.com. The starting network range for our company is 10.12.student#.0/24. Do not scan any internet systems (aka not in the 10.0.0.0/8 range)as they are not part of this exercise and are most likely out-of-scope infrastructure. You do not need to do any recon on this on the public internet, it IS NOT a real company.

Company name- DePaulSecLabs, Inc.

Starting IP range - 10.12.student#.0/24 (all live systems reside in this range)

Out of Scope - 10.12.student#.254 (do not attack this IP, it is network infrastructure)

Domain name - cns388corp.depaulseclabs.com

Procedures
Throughout this lab, and as you complete tasks, you will obtain flag files (most of which can be cat'd out to a terminal screen, some will need to be downloaded). The flags will be in the following format: CNS-1234-AAAA.

Your first hint is here:

You know the IP range of our company, now scan it with nmap to map the environment (remember, it is everything in 10.12.student#.0/24). How many systems are live, what ports and services are open? If you find a web server, examine it to get the first hint...

As you compromise the systems, you will notice that you may have some powerful access to these systems. With power comes responsibility. Just like a real customer environment, be careful what modifications you make to the systems. You don't want to lock yourself (or your customers) out of their own boxes. Since I'm tracking what you do and when, both on the Kali box as well as the systems you're compromising, you should probably be honest if you make a mistake.

Attachment:- Security Testing and Assessment.rar

Reference no: EM132470854

Questions Cloud

Examples of mary requirements that are outside the scope : You are a support worker who has been assigned to work with Mary, a 73-year old lady who is a new client in your organisation. As you approach her

Illinois healing art malpractice statute : It specifically states the requirements of a health care professional to be an expert witness &.or opinion on the Standard of Care. Indicate what these are.

Role boundaries affect your personal development : How do the responsibilities and limitations you have to work within your work role boundaries affect your personal development?

What health assessment information is required : What health assessment information is required for a diagnosis of this patient?

CNS 388 Security Testing and Assessment : CNS 388 Security Testing and Assessment Help and Solution, DePaul University - Homework Help - compromise all the systems of our mock company by performing

Difference between weak and strong paternalism : Explain the difference between weak and strong paternalism. Give examples

How your nurse leader preceptor influences work environment : Describe how your nurse leader preceptor influences the work environment. Consider how influence protects and values others in the work environment.

How does the theory help to meet clas standards : How does the theory help to meet CLAS standards to advance health equity?

Importance of trust in a nurse-patient counseling : How can this relationship motivate a patient toward health promotion? What are some strategies to faster trust in a counseling relationship?

User Account

All Pages