Ethical Hacking

Task 1: Penetration Testing are essential for the security of organizations. It examines whether an organization's security policies, procedures and controls are genuinely effective or not. The penetration testing report provides a complete overview of the uncovered vulnerabilities with a POC (Proof of Concept) and recommendations to fix those vulnerabilities with priority details. The article “[login to view URL][login to view URL]” includes a penetration testing against the security controls within their information environment. It provides a practical demonstration on the effectiveness of the security controls and their susceptibility to be exploited. Analyse any five vulnerabilities that were identified in the report by studying the tools used to detect them and their risks. Critically evaluate any five of the suggested countermeasures. Task 2: As an Ethical Hacker, you have been given the mission of evaluating the security posture of the company’s systems, which will be identified to you by your instructor in the testbed environment. In this task, you are requested to select the appropriate tools for collecting the following information, apply them and create a well commented report in which you critically evaluate the findings: 1. Using footprinting tools, find the following details about the target company: a. Domain name, Top Level Domain and sub-domains b. Email list in the identified domain c. Web technologies d. Web server Operating System e. Branch and location details 2. Using scanning techniques, find the following details: a. Details on the live machine/machines b. List of open ports c. List of Operating Systems 3. Using Enumeration techniques, find the following details: a. List of shared folders b. system's valid usernames c. machine names d. IP tables 4. With reference to at least one popular Vulnerability Scoring Systems and Databases such as Common Weakness Enumeration (CWE), provide details on the following vulnerabilities: a. SQL Injection. b. Cross-Site Request Forgery (CSRF) c. Cross-Site Scripting (XSS) d. Session Fixation e. Local File Inclusion (LFI) 5. Gain access to the target’s web site in the virtual environment which is provided to you using: a. SQL injection b. Cross-Site Scripting (XSS) 6. Recommend the necessary security solutions for protecting against the following risks and vulnerabilities: a. SQL Injection. b. Cross-Site Request Forgery (CSRF) c. Cross-Site Scripting (XSS) d. Session Fixation e. Local File Inclusion (LFI)