Reference no: EM133110528 , Length: word count:4000

MOD004891 Penetration Testing Report

Pen Test Report

Students are required to write a 4,000 words report related to penetration testing in which they will design their own penetration tests and document the results and solutions by following best practices. Students are allowed to use any real case scenario or arbitrarily work with virtual machines with vulnerabilities (like Metasploitable2) for the development of their penetration tests. The assignment will consist of three sections:

Section 1: Penetration Test Design
Using the penetration testing methodology reviewed in class, you must describe how each stage will be carry out as well as the tools that will be used in each stage. Your design must be backed up by best practices and must include appropriate references. This section must include ALL stages of the ethical hacker methodology.

Section 2: Description the Execution of the penetration tests. For this, you will discuss how each stage was carried out in detailed.

Section 3: Solutions

Each vulnerability found must be properly documented and a possible solution/correction must be included. References to best practices are needed in this section. You can use the following template as a guide:

Documentation and Presentation - Please note that 20% of the mark will be given to the quality of your report and presentation. You must take care of the grammar, spelling, and follow a proper academic style when writing your report. You must produce a power point presentation and present with the agreed schedule before 04/04/2022 and add the slides at the end of your report.

Outline

List main presentation topics

Scope of testing

List the tools you have used

Discuss here the stages

Testing

Network vulnerability and exploitation
Web application vulnerability and exploitation
Application vulnerability and exploitation
Infrastructure
Social Engineering

You can follow these areas or use your own

Test Resul

High priority Risk
Medium Priority Risk
Low Risk

Recommendations
List recommendation /controls to improve security
To address the issues relating to test result

Discussion
What needs to be done for improving existing pen testing
In terms of test design and method
What tools you would recommended and why
What controls you always recommended and why

Conclusion

References
Provide your references in Harvard style.

Attachment:- Presentation_Template.rar