Complete an appropriate pen-test process

Reference no: EM133263358

Practical Pen Testing - Security Audit

Learning Outcome 1: Use appropriate tools to discover the structure of a network, the services running on it, and identify and classify potential security flaws

Learning Outcome 2: Demonstrate understanding of the core theoretical concepts that lead to insecurity in computer systems, and how there can be used to exploit and mitigate threats identified in a computer system or network

Learning Outcome 3: Discuss common penetration testing methodologies, vulnerability risk rating systems and how they relate to the security audit process

Task

In this coursework you are required to perform a security audit of a set of hosts.

It is a portfolio style activity, where you will submit the flags found in three, of the weekly lab tasks, and write a brief report on your findings. You have free choice over two of the machines, but your report must include a writeup on one of the buffer overflow based boxes.
The individual machines will be provided as Challenge tasks during the lab sessions, in the second half of the module.

The tasks that can be submitted as part of the coursework will be identified as Coursework Tasks in the weekly documentation.

Each of the challenge and will consist of Boot To Root Style challenges, where you will be need to use appropriate tools and techniques to identify, and exploit potential vulnerabilities.
You will need to complete an appropriate pen-test process for each of them. This may include:
Reconnaissance
Initial Exploitation
Post Exploitation identification of vulnerabilities Post Exploitation

The machines will consist of

1) Machine 1. A more machine demonstrating concepts from the module. Marks will be allocated for following appropriate stages of the pen test process. 2) Machines 2, and 3: Two targets where you will have to identify and exploit a real-world vulnerability. - For Machine 2, this may include exploiting a well-known or documented issue. - For Machine 3, this may include developing a custom exploit for a published issue

Attachment:- Security Audit.rar

Reference no: EM133263358

Questions Cloud

Video game console industry : At the time of searching for some file in the searching tab, I cannot get any results, im trying to see documents of " Video Game Console Industry in 2015"

What traits does suetonius emphasize about augustus : What character traits does Suetonius emphasize about Augustus? Today, what characteristics do we emphasize in our own leaders?

What are the hypotheses : What are the hypotheses? Is the sample evidence statistically significant? If so, at what significance levels can you reject the null hypothesis?

How appearance would influence related religious experience : Explain what the exterior and interior of the temple would look like, and how its appearance would influence the related religious experience.

Complete an appropriate pen-test process : Each of the challenge and will consist of Boot To Root Style challenges, where you will be need to use appropriate tools and techniques to identify

Describe the renaissance ideal of the universal man : Describe the Renaissance ideal of the "universal man." Who was Isabelle d'Este? How did she represent the ideal Renaissance woman?

Performance of labors varies depending on the workload : A human resource manager observed that the performance of his labors varies depending on the workload, the complexity of tasks, the lack of supervision

Describe the labyrinth : Describe the Labyrinth? During what era of Ancient Egypt's history was it built. What may the Labyrinth have been used for?

Women access to leadership positions : What are the most important lessons of the case for business leaders looking to increase women's access to leadership positions?

User Account

All Pages