Task: Penetration Testing Exercise
- Various.
- Your primary toolset will be various “attack” software packages, provided on a Kali Linux Virtual Machine in your team’s DMZ.
- There might be other freely-available Internet-based tools that could be helpful.
Requirements
- Before you receive this task’s requirements and hints,
your instructor will ask you to agree to a non-disclosure agreement, or (NDA).
- After every student has agreed to the terms of the NDA,
your instructor will reveal the penetration testing engagement scenario’s (PTES) requirements and hints.
- (The purpose of the NDA is to deter everyone from revealing details about the PTES to future students,
and thus discourage “spoilers” and avenues for cheating.)
- For this assignment, only one team member needs to submit the report document on behalf of the entire team.
- For this assignment, you are also welcome to collaborate with every student in the entire class, not just with your team partner(s).
- When the requirements are revealed, you will notice multiple objectives in the penetration testing exercise.
Your team only needs to accomplish one of the objectives to complete this task.
(After that, you are welcome to work on one of the other objectives as an individual above-and-beyond task.)
Deliverable
Upload an illustrated tutorial, in which you explain what your team did and how you accomplished it.
- Your document should be clear enough that one of your peers would be able to follow your instructions and accomplish the same tasks.
- Identify any difficult or challenging parts of the project, and clearly explain how you diagnosed and overcame your obstacles.
- Include a few cropped screen captures where appropriate. Also upload your updated and annotated network diagram.
Scoring Rubric
- If your tutorial satisfies every requirement outlined above, you will earn a passing score (one point).
- If your tutorial does not satisfy any one of the above requirements, you will earn no points. Your team must then address any deficiencies and re-upload corrected documents until you earn the passing score.
Hints
- Before you receive this task’s requirements and hints,
your instructor will ask you to agree to a non-disclosure agreement, or (NDA).
- After every student has agreed to the terms of the NDA,
your instructor will reveal the PTES requirements and hints.
- (The purpose of the NDA is to deter everyone from revealing details about the PTES to future students,
and thus discourage “spoilers” and avenues for cheating.)