PENETRATION TESTING & VULNERABILITY ASSESSMENT

Teacher

Sangram Routray

Category

Core Courses

Course Attendees

Still no participant

Course Reviews

Still no reviews

Course Name :

PENETRATION TESTING & VULNERABILITY ASSESSMENT

 

Code(Credit) :CUTM1689(4-0-2)

Course Objectives

In the end, the goal is to identify security weaknesses in a network, machine, or piece of software. Once they’re caught, the people maintaining the systems or software can eliminate or reduce the weaknesses before hostile parties discover them.

“Security” isn’t limited to how well the machines and software stand up against penetration attempts.

Learning Outcomes

  • Explain the basic principles and techniques of how attackers can enter computer systems.
  • put acquired knowledge into practice by performing ethical penetration tests and hide the intrusion.
  • perform analyses of data breaches and audits of information technology security.
  • evaluate the strengths and weaknesses of various information technology solutions in terms of data security.
  • independently present and perform demonstrations of pen-tests for educational purposes.
  • evaluate the societal role of hacking from a social, ethical and economic standpoint

Course Syllabus

MSCS2104-PENETRATION TESTING & VULNERABILITY ASSESSMENT

 

MODULE (I):                                                                                                                       

OWASP: Introduction to web applications security, threats and OWASP principles, introduction to secure design, web server: introduction a secure setup of apache, firewalling a server Browser: general concepts, functionalities, browsers war, configuration (HTTP-cookies, contents, scripting etc. attack to browsers, and users tracking/profiling (third party cookies, super cookies, XSS, CSFR, Command Injection), browser security (add-ons, plugins, same-origin policy etc.) & secure browsing.

 

OWASP Privacy preserving: attacks to privacy, (spyware & backdoors, browser, email etc.) Tracking techniques: (HTTP cookies, third party cookies, browser fingerprinting, CSP) Advanced browser configuration, anonymity and onion routing (Tor). Internet E-mail: Architecture and infrastructure, functions, agents and standards, MIME & PGP, phishing, spamming & spoofing, DKIM, SPF, introduction to email forensics.

 

MODULE (III):                                                                                                                    

Introduction to EthicalHacking Terminology-Fivestages ofhacking-VulnerabilityResearch-Legalimplication of hackingImpact of hacking. Foot printing & Social engineering.

Information gathering methodologies- Competitive Intelligence- DNS Enumerations- Social Engineering attacks. Scanning & Enumeration Port Scanning-Network Scanning- Vulnerability Scanning- NMAP scanning tool- OS Finger  printing Enumeration. System Hacking Password.

 

MODULE (IV):                                                                                                                    

 

Sniffers & SQL Injection Active and passive sniffing- ARP Poisoning- Session Hijacking- DNS Spoofing- Conduct SQL Injection attack – Counter measures. Cracking techniques- Key loggers- Escalating privileges- Hiding Files-Steganography technologies- Countermeasures.

Session Plan

Session 1

Introduction to web applications security

PTV-M1-1

Session 2

Threats and OWASP principles

PTV-M1-2

Session 3

Introduction to secure design

PTV-M1-3

Session 4

web server: introduction a secure setup of apache

PTV-M1-4

Session 5

fire walling a server Browser: general concepts functionalities

PTV-M1-5

Session 6

Browsers war, configuration HTTP-cookies, contents, scripting etc

PTV-M1-6

Session 7

Attack to browsers, and users tracking/profiling

PTV-M1-7

Session 8

Browser security  & secure browsing

PTV-M1-8

Session 9

Attacks to privacy, (spyware & back doors, browser, email etc.)

M 1 S 1

Session 10

Tracking techniques: (HTTP cookies, third party cookies, browser fingerprinting, CSP) Advanced browser configuration

M 1 S 2

M 1 S 3

M 1 S 4

Session 11

Anonymity and onion routing 

Session 12

Internet E-mail: Architecture and infrastructure, functions, agents and standards

M 1 S 5

Session 13

MIME & PGP

M 1 S 6

Session 14

phishing, spamming & spoofing

M 1 S 7

Session 15

DKIM, SPF, introduction to email forensics

M 1 S 8

Session 16

Introduction to Ethical Hacking Terminology-Five stages of hacking

Session 17

Vulnerability Research-Legal implication of hacking Impact of hacking

Session 18

 Foot printing & Social engineering

Session 19

Information gathering methodologies

Session 20

Competitive Intelligence- DNS Enumerations

Session 21

 Social Engineering attacks

Session 22

Scanning & Enumeration Port Scanning

Session 23

Network Scanning- Vulnerability Scanning- NMAP scanning tool

Session 24

OS Finger  printing Enumeration

Session 25

System Hacking Password

Session 26

Sniffers & SQL Injection Active and passive sniffing

Session 27

ARP Poisoning- Session Hijacking

Session 28

DNS Spoofing

Session 29

Conduct SQL Injection attack – Counter measures

Session 30

Steganography technologies- Countermeasures.

Session 31

Cracking techniques- Key loggers

Session 32

Steganography technologies- Countermeasures.

experiment-1

To learn about hacking tools and skills

https://youtu.be/7yqCq8P2SRc

experiment-2

To study about foot printing and Reconnaissance

https://youtu.be/29X0_3aJ8pE

experiment-3

To study about finger printing

https://youtu.be/29X0_3aJ8pE

experiment-4

To study about system hacking

https://youtu.be/947o1ySWU2w

experiment-5

To study about Wireless hacking

https://youtu.be/tdCeRFYCgYI

experiment-6

To learn & study about Sniffing & their tools

https://youtu.be/LvaII2PEwcQ

Case Studies

Case Studies

Recent Comments

    Our Main Teachers

    Sangram Routray

    Assistant Professor
    VIEW PROFILE