The penetration testing process and techniques :Proposal and Report Writing

Synopsis

This assignment aims to evaluate students’ in terms of two skill sets:  the penetration testing process and techniques. It describes phases of penetration-testing namely planning, scoping and recon, and then dives deep into scanning, target exploitation, password attacks, and web apps penetration testing

Learning Outcomes of the Assignment

CLO2. Demonstrate the ability to perform the penetration testing and vulnerability assessment using a range of techniques (C3, PLO2)

CLO3. Propose the proper tool, model or approaches for penetration testing development. (A5, PLO4)

Main Case Study:

You are hired as a Pen-Tester for a company. You are required to choose ONE (1) of the following type of penetration testing below as your penetration testing task. 

Wireless Penetration Testing

Task 1: Project Proposal (LO4) 

This section is group component and students are required to do initial study on approaches of conducting the penetration testing. The assignment consists of TWO (2) members for each group. Students are required to prepare a proposal by fulfilling the components in the project requirements stated below. This section weights 20% of total assignment in-course mark. 

Project Requirements:

1. Clearly explain the selected type of pen testing, current target for penetration testing, and importance of the pen testing.
2. Each student proposes ONE (1) method for vulnerability assessment such as network scanning, database assessment, etc.
3. Each student proposes ONE (1) attack method with any suitable exploit to complete the penetration testing process. 
4. Each student proposes suitable ONE (1) tool for vulnerability assessment and suitable ONE (1) tool for attack method.

Project Marking Scheme:

This section carries 20% of total in-course mark for this module as follows:

Task 1

• Introduction
• Vulnerability Assessment Methods 
• Exploit & Attack Method 
• Tools for Vulnerability and Attack
• Documentation Format
• Presentation

Task 2: Penetration Testing and Reports (LO2)

This section is an individual task focuses on simulating penetration testing and vulnerability scanning and reporting which carries 30% of total assignment in-course mark. A penetration test, colloquially known as a pen test, or ethical hacking, is an authorized simulated cyber-attack on a computer system, performed to evaluate the security of the system. 

Vulnerability scanning is a computer program designed to assess computers, networks, or applications for known weaknesses. In plain words, these scanners are used to discover the weaknesses of a given system. In this assignment, you are required to conduct a vulnerability assessment on the target machine.

You then required to conduct necessary steps for penetration process as a pen-tester (Select ONE (1) penetration testing proposed in Part 1). You must capture all steps and use standard procedure to complete the whole penetration testing operation.  You are required to prepare a technical report for this task. The report must fulfill the requirements listed below:

Project Requirements:

1. Clearly explain the date, time, scope, and pen tester name for each penetration testing process.
2. Conduct vulnerability scanning on target. Print screen all steps with detail explanation. Analyse and discussed the details of all the findings.
3. Conduct required steps for attack of this penetration testing. Print screen all steps with detail explanation. Analyse and discussed the details of the findings and affect.
4. Identify risks of vulnerabilities detected and the possible impact on business. Provide advice and solutions

Project Marking Scheme:

This section carries 30% of total in-course mark for this module as follows:

• Introduction
• Vulnerability Scanning  
• Penetration Testing  
• Countermeasures Proposed
• Documentation
• Presentation (Demo)