ITSC304: Operating Systems Exploitation Final Project

PROJECT REPORT > ITSC304: Operating Systems Exploitation Final Project

Southern Alberta Institute of Technology ITSC ITSC 304 The final document should be a Word document with requested screen captures, reports, and references. Labs must be submitted by the due date for full credit. After the due date, late submissions will receive a grade of zero (0). I certify that the work submitted in this assignment is my own and that it has ...[Show More]

Southern Alberta Institute of Technology
ITSC
ITSC 304
The final document should be a Word document with requested screen captures, reports, and
references.
Labs must be submitted by the due date for full credit. After the due date, late submissions will
receive a grade of zero (0).
I certify that the work submitted in this assignment is my own and that it has not been taken in
whole or in part from any other source. I understand that the penalty for plagiarism will include a
grade of zero (0) for this assignment plus disciplinary action in accordance with SAIT policies.
EVALUATION
Setup and connect vulnerable machines (targets) 5
Vulnerability Assessment – Nessus 25
Exploitation, Post-exploitation, Attack 20
Report 10
TOTAL MARK 60
1
This study source was downloaded by 100000894475127 from CourseHero.com on 12-14-2024 01:27:00 GMT -06:00
https://www.coursehero.com/file/223090297/ITSC304-Final-Project-1docx/
Final Project Objectives
 Assess vulnerabilities
 Exploit and post-exploit Windows and Linux target systems
 Implement an attack from Mitre@attack framework
 Generate reports
Reading and References
 Vulnerable machines https://github.com/rapid7/metasploitable3
 https://www.vulnhub.com/resources/
 Vulnerability Assessment Nessus https://www.tenable.com/ or OpenVAS
https://www.openvas.org/#about
 Attacks Framework https://attack.mitre.org/
 Pentest Reports http://www.pentest-standard.org/index.php/Reporting
 https://www.pentesteracademy.com/
Requirements
1. Virtualbox or VMware
2. Windows
3. Linux machines
2

Project Instructions
I. ( 5 marks) Setup and connect 3 virtual machines. Kali virtual machine,
the attacker and two victim machines (Windows and Linux). You can use virtual
machines used in the Labs or download Metasploitable machines from github such
as:
https://github.com/rapid7/metasploitable3 or
https://www.offensive-security.com/metasploit-unleashed/requirements/.
Make sure the target machines are vulnerable (critical and high)
II. (25 marks) Vulnerability Assessment. The commercial vulnerability
scanner most widely used by the industry is Nessus
1. Install Nessus Essentials (free version)