In-course Assignment Information Sheet

Ethical Hacking and Incidence Response

Intakes: UC2F1505FC-ISS
Date Assigend: 21-OCT-2015
Date Due:
Lecturer: Meisam Eslahi

Assignment Overview

This assignment will contribute 100% towards the incoure marks and consists of three
sections as follows:
Section A:

This section is an individual research on latest techniques on ethical hakicng and

penteration testing and carries 40% of total module assessment marks. Each group member
should select a unique title in related domains such as:

1. FootPrinting and Reconnaissance

2. Computer and Network Scanning (Nmap Scripting is preferred)
3. System Enumeration and Hacking
4. Computer and Mobile Malwares (Frameworks to create undetectable viruses is preferred )
5. Social Engineering
6. Denial of Service
7. Hacking Mobile Devices (Android platform is preferred)
8. WEB application breaches and attacks (Is highly recommended!)
9. Wireless Hacking (WEP and WPA Cracking is not accepted!)
10. Any other relevant domains!
Each student is requeired to conduct a research and provide a report on any recent
technique, tool or framework that may used by etchial hackers in any of afformentioed
domains. The report must be typed with Times New Roman font and size 12 with maximum length of
3000 words (excluding diagrams, appendixes and references) in different subsections as follows:

1. Introduction to the technique/tool/framework that you have selected

2. Create scenario to explain the attack nature if its needed.

3.
4.
5.
6.

Impact of the selected technique/tool/framework on the security

General functionality of selected technique/tool/framework
Step by step tutorial on how to use technique/tool/framework
Critical analysis of technique/tool/framework and any countermeasure if applicable.

WARNING: DO NOT try the aforementioned tools or techniques on real systems! You should
test and create your tutorials by using Isolated/Testbed environments such as VMWare,
Metasploitable, DVWA, and etc.)

Section B:

This section is a group task focuses on vulnerability assessment and carries 40% of total
module marks. Vulnerability scanning identifies vulnerabilities and weaknesses of a system and
network in order to determine how a system can be exploited. The students provided with a
windows operating system in virtual machine format. Each team must use proper scanning tool
and methodologies to locate and remediate vulnerabilities in the given operating system. In
addition each team is required to provide detailed reports as follows:
12345-

List of discovered vulnerabilities and findings

Select six top vulnerabilities and briefly explain them.
Select one of the vulnerabilities and explain in details.
Use any exploit or technique to hack into the target by using selected vulnerability.
Patch the vulnerability and countermeasure the attack.

Section C:

This section is a group task and carries 20% of total module marks. The main obejctive
of section C is to anlyze a given memory dump from infected machine using volatility
framework.

Guidelines for the Report

Document the results of your work in a professional and systematic manner and submit one
soft copy and one hard copy. Your completed documentation should meet the following
requirements:

1. Table of contents for every detailed chapter/section.

2. Introduction
3. Individual 1: Title
4. Individual 2: Title
5. Individual .
6. Section B: Title
7. Section C: Title
8. Conclusion
9. References
10. Appendices
11. Workload matrix.

Submission requirements
1. A CD containing an electronic version of the document.
2. Your report must be typed using Microsoft Word with Times New Roman font with 1.5
spaces.
3. The report has to be well presented and should be typed.
4. Ensure that the report is printed on standard A4 (210 X 297 mm) sized paper. Paper weight of
80 grams and above is highly recommended.
5. The report should have a one (1) margin all around the page as illustrated below:

1 inch

1 inch

1 inch

1 inch

1 inch

1 inch

The Typed Text

1 inch

1 inch

6. Every report must have a front cover. A transparent plastic sheet can be placed in front of the
report to protect the front cover. The front cover should have the following details:a) Name
b) Intake code.

c) Subject.
d) Project Title.
e) Date Assigned (the date the report was handed out).
f) Date Completed (the date the report is due to be handed in).
7. All information, figures and diagrams obtained from external sources must be referenced
using the Harvard referencing system accordingly.
Workload Matrix
The marking table must be placed on a single page, located as either the second or third
page of the final assignment documentation. Ensure to fill up of the team members full names
and their respective student IDs.
Students Name
Individual Components (A)
Introduction to the technique/tool/framework that
you have selected (3)
Nobility of selected item (10)
Impact of the selected technique/tool/framework on
the security (4)
General functionality of selected
technique/tool/framework (3)
Step by step tutorial on how to use
technique/tool/framework (10)
Critical analysis of technique/tool/framework and
any countermeasure if applicable (10)
Total Marks (out of 40)

Group Components (B,C)

Technical accuracy (10)

Student 1

Student 2

Student 3

Student 4

Critical analysis & justification (Research) (20)

Demonstration (10)
Presentation (10)
Referencing (10)
Total Marks (out of 60)

Total mark (100)