PENETRATION TESTING & VULNERABILITY ASSESSMENT

Teacher

Sangram Routray

Category

Core Courses

Course Attendees

Still no participant

Course Reviews

Still no reviews

Course Name :

PENETRATION TESTING & VULNERABILITY ASSESSMENT

 

Code(Credit) :CUTM1631(4-0-2)

Course Objectives

  • Explain the basic principles and techniques of how attackers can enter computer systems.
  • Put acquired knowledge into practice by performing ethical penetration tests and hiding the intrusion.
  • Perform analyses of data breaches and audits of information technology security.
  • Evaluate the strengths and weaknesses of various information technology solutions regarding data security.
  • Independently present and perform demonstrations of pen tests for educational purposes.
  • evaluate the societal role of hacking from a social, ethical and economic standpoint

Course Outcomes

  • SNO DESCRIPTION PO MAPPING
    CO1 Understand the penetration testings PO1, PO2, PO5, PO6, PO11, PO12
    CO2 Understand to vulnerability assessment PO1, PO2, PO4, PO5, PO11
    CO3 Can evaluates if the system is susceptible to any known

    vulnerabilities, assigns severity levels to those vulnerabilities,

    and recommends remediation or mitigation, if and whenever needed

    PO1,PO2, PO5, PO6, PO7

Course Syllabus

MSCS2104-PENETRATION TESTING & VULNERABILITY ASSESSMENT

 

MODULE (I):                                                                                                                       

OWASP: Introduction to web applications security, threats and OWASP principles, introduction to secure design, web server: introduction a secure setup of apache, firewalling a server Browser: general concepts, functionalities, browsers war, configuration (HTTP-cookies, contents, scripting etc. attack to browsers, and users tracking/profiling (third party cookies, super cookies, XSS, CSFR, Command Injection), browser security (add-ons, plugins, same-origin policy etc.) & secure browsing.

 

OWASP Privacy preserving: attacks to privacy, (spyware & backdoors, browser, email etc.) Tracking techniques: (HTTP cookies, third party cookies, browser fingerprinting, CSP) Advanced browser configuration, anonymity and onion routing (Tor). Internet E-mail: Architecture and infrastructure, functions, agents and standards, MIME & PGP, phishing, spamming & spoofing, DKIM, SPF, introduction to email forensics.

 

MODULE (III):                                                                                                                    

Introduction to EthicalHacking Terminology-Fivestages ofhacking-VulnerabilityResearch-Legalimplication of hackingImpact of hacking. Foot printing & Social engineering.

Information gathering methodologies- Competitive Intelligence- DNS Enumerations- Social Engineering attacks. Scanning & Enumeration Port Scanning-Network Scanning- Vulnerability Scanning- NMAP scanning tool- OS Finger  printing Enumeration. System Hacking Password.

 

MODULE (IV):                                                                                                                    

 

Sniffers & SQL Injection Active and passive sniffing- ARP Poisoning- Session Hijacking- DNS Spoofing- Conduct SQL Injection attack – Counter measures. Cracking techniques- Key loggers- Escalating privileges- Hiding Files-Steganography technologies- Countermeasures.

TEXT BOOK:

 

  • Kimberly Graves, “CEH: Official Certified Ethical Hacker Review Guide”, Wiley Publishing Inc., 2007.ISBN: 978-0-7821-4437-6.

REFERENCE BOOK:

  • Shakeel Ali & Tedi Heriyanto, “Backtrack -4: Assuring security by penetration testing”, PACKT Publishing., 2011. ISBN: 978-1-849513-94-4.

 

Session Plan

Session 1

Introduction to web applications security

PTV-M1-1

Session 2

Threats and OWASP principles

PTV-M1-2

Session 3

Introduction to secure design

PTV-M1-3

Session 4

web server: introduction a secure setup of apache

PTV-M1-4

Session 5

fire walling a server Browser: general concepts functionalities

PTV-M1-5

Session 6

Browsers war, configuration HTTP-cookies, contents, scripting etc

PTV-M1-6

Session 7

Attack to browsers, and users tracking/profiling

PTV-M1-7

Session 8

Browser security  & secure browsing

PTV-M1-8

Session 9

Attacks to privacy, (spyware & back doors, browser, email etc.)

M 1 S 1

Session 10

Tracking techniques: (HTTP cookies, third party cookies, browser fingerprinting, CSP) Advanced browser configuration

M 1 S 2

M 1 S 3

M 1 S 4

Session 11

Anonymity and onion routing -

Anonymity and Onion routing

Session 12

Internet E-mail: Architecture and infrastructure, functions, agents and standards

M 1 S 5

Session 13

MIME & PGP

M 1 S 6

Session 14

phishing, spamming & spoofing

M 1 S 7

Session 15

DKIM, SPF, introduction to email forensics

M 1 S 8

Session 16

Introduction to Ethical Hacking Terminology-Five stages of hacking

Introduction to Ethical Hacking Terminology

Session 17

Vulnerability Research-Legal implication of hacking Impact of hacking

Vulnerability Research

Session 18

 Foot printing & Social engineering

Foot printing

Session 19

Information gathering methodologies-

Methods of Information Gathering

Session 20

Competitive Intelligence- DNS Enumerations-

Competitive Intelligence and DNS Enumerations

Session 21

 Social Engineering attacks-

Social Engineering Attacks

Session 22

Scanning & Enumeration Port Scanning-

Scanning and Enumeration

Session 23

Network Scanning- Vulnerability Scanning- NMAP scanning tool-

Network Scanning

Session 24

OS Finger  printing Enumeration-

OS Finger printing Eneumeration

Session 25

System Hacking Password-

System Hacking Pass word

Session 26

Sniffers & SQL Injection Active and passive sniffing-

Sniffing and SQL injection

Session 27

ARP Poisoning- Session Hijacking-

ARP Poisoning

Session 28

DNS Spoofing-

DNS Spoofing

Session 29

Conduct SQL Injection attack – Counter measures-

SQL injection attack

Session 30

Steganography technologies- Countermeasures-

steganography technology and countermeasures

Session 31

Cracking techniques- Key loggers-

Cracking and Keyloggers

experiment-1

To learn about hacking tools and skills-

EXPERIMEN1(VAPT)

https://youtu.be/7yqCq8P2SRc

experiment-2

To study about foot printing and Reconnaissance

EXPERIMENT NO-2(VAPT)

https://youtu.be/29X0_3aJ8pE

experiment-3

To study about finger printing-

EXPERIMENT 3(VAPT)

https://youtu.be/29X0_3aJ8pE

experiment-4

To study about system hacking-

EXPERIMENT4(VAPT)

https://youtu.be/947o1ySWU2w

experiment-5

To study about Wireless hacking-

EXPERIMENT 5(VAPT)

https://youtu.be/tdCeRFYCgYI

experiment-6

To learn & study about Sniffing & their tools-

EXPERIMENT6(VAPT)

https://youtu.be/LvaII2PEwcQ

Our Main Teachers

Sangram Routray

Assistant Professor
VIEW PROFILE