Course Name :
PENETRATION TESTING & VULNERABILITY ASSESSMENT
Still no participant
Still no reviews
PENETRATION TESTING & VULNERABILITY ASSESSMENT
In the end, the goal is to identify security weaknesses in a network, machine, or piece of software. Once they’re caught, the people maintaining the systems or software can eliminate or reduce the weaknesses before hostile parties discover them.
“Security” isn’t limited to how well the machines and software stand up against penetration attempts.
MSCS2104-PENETRATION TESTING & VULNERABILITY ASSESSMENT
MODULE (I):
OWASP: Introduction to web applications security, threats and OWASP principles, introduction to secure design, web server: introduction a secure setup of apache, firewalling a server Browser: general concepts, functionalities, browsers war, configuration (HTTP-cookies, contents, scripting etc. attack to browsers, and users tracking/profiling (third party cookies, super cookies, XSS, CSFR, Command Injection), browser security (add-ons, plugins, same-origin policy etc.) & secure browsing.
OWASP Privacy preserving: attacks to privacy, (spyware & backdoors, browser, email etc.) Tracking techniques: (HTTP cookies, third party cookies, browser fingerprinting, CSP) Advanced browser configuration, anonymity and onion routing (Tor). Internet E-mail: Architecture and infrastructure, functions, agents and standards, MIME & PGP, phishing, spamming & spoofing, DKIM, SPF, introduction to email forensics.
MODULE (III):
Introduction to EthicalHacking Terminology-Fivestages ofhacking-VulnerabilityResearch-Legalimplication of hackingImpact of hacking. Foot printing & Social engineering.
Information gathering methodologies- Competitive Intelligence- DNS Enumerations- Social Engineering attacks. Scanning & Enumeration Port Scanning-Network Scanning- Vulnerability Scanning- NMAP scanning tool- OS Finger printing Enumeration. System Hacking Password.
MODULE (IV):
Sniffers & SQL Injection Active and passive sniffing- ARP Poisoning- Session Hijacking- DNS Spoofing- Conduct SQL Injection attack – Counter measures. Cracking techniques- Key loggers- Escalating privileges- Hiding Files-Steganography technologies- Countermeasures.
Anonymity and onion routing
Internet E-mail: Architecture and infrastructure, functions, agents and standards
Introduction to Ethical Hacking Terminology-Five stages of hacking
Vulnerability Research-Legal implication of hacking Impact of hacking
Foot printing & Social engineering
Information gathering methodologies
Competitive Intelligence- DNS Enumerations
Social Engineering attacks
Scanning & Enumeration Port Scanning
Network Scanning- Vulnerability Scanning- NMAP scanning tool
OS Finger printing Enumeration
System Hacking Password
Sniffers & SQL Injection Active and passive sniffing
ARP Poisoning- Session Hijacking
DNS Spoofing
Conduct SQL Injection attack – Counter measures
Steganography technologies- Countermeasures.
Cracking techniques- Key loggers
Steganography technologies- Countermeasures.
Recent Comments