Scribd
Upload
15 views

Assignment - Penetration Testing

Uploaded by

Amirul Hakim
Copyright
© © All Rights Reserved
Available Formats
Download as PDF, TXT or read online on Scribd
15 views

Assignment - Penetration Testing

Uploaded by

Amirul Hakim
Copyright
© © All Rights Reserved
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 2

IKB30503 Information Security Management System

Title: Phases of Penetration Testing Assignment

Objective: The objective of this assignment is to familiarize students with the phases of
penetration testing, which is a critical cybersecurity practice for identifying and mitigating
vulnerabilities in computer systems and networks.

Instructions: In this assignment, you will research and explore the various phases of
penetration testing. You will be required to provide a detailed description of each phase and
explain its significance in the penetration testing process.

Phase 1: Pre-engagement
1. Provide an overview of the pre-engagement phase.
2. Explain the importance of scoping in penetration testing.
3. List the key activities that take place during this phase.

Phase 2: Information Gathering


1. Describe the information gathering phase in penetration testing.
2. Discuss the tools and techniques commonly used for gathering information about the
target.
3. Explain how open-source intelligence (OSINT) plays a role in this phase.

Phase 3: Vulnerability Analysis


1. Explain the vulnerability analysis phase.
2. Discuss the process of identifying vulnerabilities in the target system.
3. Provide examples of common vulnerabilities that might be targeted.

Phase 4: Exploitation
1. Define the exploitation phase.
2. Discuss the role of ethical hacking in this phase.
3. Explain the difference between ethical hacking and malicious hacking.

Phase 5: Post-Exploitation
1. Describe the post-exploitation phase.
2. Explain what happens after a successful exploitation of vulnerabilities.
3. Discuss the goals of post-exploitation activities.

Phase 6: Reporting
1. Explain the importance of reporting in penetration testing.
2. Describe the components of a penetration testing report.
3. Discuss the audience for the penetration testing report.

Phase 7: Clean-up and Remediation


1. Describe the clean-up and remediation phase.
2. Explain how vulnerabilities are patched and mitigated.
3. Discuss the role of the penetration tester in this phase.
Phase 8: Verification and Validation
1. Provide an overview of the verification and validation phase.
2. Explain how the effectiveness of remediation efforts is tested.
3. Discuss the final steps to ensure the security of the target system.

Phase 9: Documentation and Knowledge Transfer


1. Describe the documentation and knowledge transfer phase.
2. Explain the importance of documenting all findings and procedures.
3. Discuss how knowledge is transferred to the client's team for ongoing security.

Phase 10: Post-Testing Activities


1. Explain the activities that occur after the penetration testing engagement has
concluded.
2. Discuss the importance of maintaining a strong client-penetration tester relationship.
3. Mention the benefits of continuous testing and security improvement.

Requirements:
 The assignment should be typed and formatted professionally.
 Include a cover page with your name, student ID, course title, and date.
 Each phase should be discussed thoroughly, and examples or case studies can be
included to illustrate key points.
 Citations and references should be provided for any external sources used.

You might also like