Ethical Hacking and Offensive Security (HOD402)
Vietnamese title: Thâm nhập thử và phòng thủ
Credits: 3
Prerequisites: ITE303 or ITE302c, OSP201

Description:
The digital landscape is evolving at an unprecedented rate with unknown threats lurking around every corner. Cybersecurity resilience in the modern world cannot be just an addon - it's a necessity. Organizations must build cybersecurity resilience, and offensive security professionals like Ethical Hackers and Penetration Testers can help proactively discover unknown threats and address them before cybercriminals do.
Target Audience This course is designed to prepare learners with the Ethical Hacker skillset. Learners will become proficient in the art of scoping, executing, and reporting on vulnerability assessments, while recommending mitigation strategies. By using an engaging gamified narrative throughout the course, with real-world inspired hands-on practice labs, learners develop essential workforce readiness skills to lay a solid foundation in offensive security.
After completing this course, learners can enter cybersecurity careers, either on the offensive security side as ethical hackers or penetration testers, or on the defensive security side by understanding the mindset and tactics of threat actors, while implementing security controls and monitoring, analyzing, and responding to current security threats.

Learning outcomes:
Explain the importance of methodological ethical hacking and penetration testing.
Apply incident response models to manage network security incidents.
Create penetration testing preliminary documents.
Perform information gathering and vulnerability scanning activities.
Explain how social engineering attacks succeed.
Explain how to exploit wired and wireless network vulnerabilities.
Explain how to exploit application-based vulnerabilities.
Explain how to exploit cloud, mobile, and IoT security vulnerabilities.
Explain how to perform post-exploitation activities; Create a penetration testing report; Classify pentesting tools by use case.
Evaluate network security alerts; Analyze network intrusion data to identify compromised hosts and vulnerabilities.

Student tasks:
- Students must attend at least 80% of contact sessions in order to be accepted to the final examination.
- Students are responsible to do all exercises, assignments and labs given by instructor in class or at home and submit on time
- Use laptop in class only for learning purpose
- Promptly access to the http://flm.fpt.edu.vn for up-to-date course information
- Students must complete all assignments on the Cisco Networking Academy (https://skillsforall.com/) with a result of at least 75%.

Tools:
Internet, basic tools for ethical hacking (VMWare, Kali Linux, Wireshark, Nmap, …)

Materials:
description: CEH v12 Certified Ethical Hacker Study Guide with 750 Practice Test Questions
author: Ric Messier
publisher: Sybex
published_date: 2023
edition: 1st
isbn: 978-1394186921
description: Cisco Ethical Hacker Slide
https://skillsforall.com/course/ethical-hacker?courseLang=en-US
author: Cisco
publisher: Cisco
description: Hacking Exposed 7: Network Security Secrets and Solutions
author: Stuart McClure, Joel Scambray, George Kurtz
publisher: McGraw-Hill Education
published_date: 2012
edition: 7th
isbn: 978-0071780285
description: Hands-On Ethical Hacking and Network Defense (4th)
author: Rob Wilson, Michael Simpson, Nicholas Antill
publisher: Cengage Learning
published_date: 2022
edition: 4th
isbn: 978-0357509753

Assessments:
category: LAB
type: on-going
weight: 20.0
duration: 60'
question_type: CLO1-CLO10
no_question: Home work, class
knowledge_and_skill: 1
grading_guide: - cover content 5,6,7,8
note: each lab focuses on the session topic
category: Progress test 1
type: on-going
weight: 10.0
duration: 10'-30'
question_type: CLO1-CLO5
no_question: Multiple choices
Marked by Computer or a suitable format
knowledge_and_skill: 30
grading_guide: - cover content 1,2,3,4,5
note: in class, by instructor
category: Progress test 2
type: on-going
weight: 10.0
duration: 10'-30'
question_type: CLO6-CLO10
no_question: Multiple choices
Marked by Computer or a suitable format
knowledge_and_skill: 30
grading_guide: - cover content 6,7,8,9,10
note: in class, by instructor
category: Project
type: on-going
weight: 30.0
duration: 60'
question_type: CLO1-CLO10
no_question: Home work, class
knowledge_and_skill: 1
grading_guide: - costudents' active learning attitude during the course;
discipline and communication
note: Each group receives a research topic and reports at the end of the term
category: Final exam
type: Final exam
weight: 30.0
duration: 60'
no_question: Multiple choices
Marked by Computer
knowledge_and_skill: 50
grading_guide: Studied all of course's Material
note: Studied all of course's Material

Schedule:
session: Module 1: Introduction to Ethical Hacking and Penetration Testing
1.1 Understanding Ethical Hacking and Penetration Testing
Introduction to the Project
learning_outcomes: IT
session: 1.2 Exploring Penetration Testing Methodologies
1.3 Building Your Own Lab
learning_outcomes: TU
session: LAB 1
learning_outcomes: U
session: LAB 1(cont)
learning_outcomes: U
session: Project : Group and topic register + Divide class into 3-5 groups + Group select the interesting topic
Students form groups of 3–5 members in Session 5 to initiate the ethical hacking project. Groups establish roles (e.g., reconnaissance lead, exploit developer, report writer) and set collaboration protocols to ensure effective teamwork throughout the project.
learning_outcomes: U
session: Module 2: Planning and Scoping a Penetration Testing Assessment
2.1 Comparing and Contrasting Governance, Risk, and Compliance Concepts
learning_outcomes: IT
session: Module 2:(cont)
2.2 Explaining the Importance of Scoping and Organizational or Customer Requirements
2.3 Demonstrating an Ethical Hacking Mindset by Maintaining Professionalism and Integrity
learning_outcomes: IT
session: LAB 2: Lab_Pre-Engagement_Scope_and_Planning
learning_outcomes: U
session: Module 3: Information Gathering and Vulnerability Scanning
3.1 Performing Passive Reconnaissance
3.2 Performing Active Reconnaissance
learning_outcomes: IT
session: Module 3: (cont)
3.3 Understanding the Art of Performing Vulnerability Scans
3.4 Understanding How to Analyze Vulnerability Scan Results
learning_outcomes: IT
session: LAB 3
learning_outcomes: U
session: LAB 3: (cont)
learning_outcomes: U
session: Groups discuss and work on group topics

Groups select a project topic in Session 5, choosing from: a simulated penetration test in a lab environment, a case study of a real-world ethical hacking incident, or development of a custom penetration testing tool. The problem definition outlines the target system, scenario, or case study context, specifying objectives like identifying vulnerabilities or analyzing attack impacts.
learning_outcomes: U
session: LAB 4:
4.1-Lab_Advanced_Searches
4.2-Lab-Packet_Crafting_with_Scapy
4.3-Lab_Network_Sniffing_with_Wireshark
learning_outcomes: U
session: LAB 5:
5.1-Lab-Vulnerability_Scanning_with-Kali_Tools
5.2-Lab-Investigate_Vulnerability_Information_Sources
learning_outcomes: U
session: LAB 5: (cont)
5.1-Lab-Vulnerability_Scanning_with-Kali_Tools
5.2-Lab-Investigate_Vulnerability_Information_Sources
learning_outcomes: U
session: Module 4: Social Engineering Attacks
4.1 Pretexting for an Approach and Impersonation
4.2 Social Engineering Attacks
learning_outcomes: IT
session: Module 4: (cont)
4.3 Physical Attacks

Conduct thorough research leveraging Modules 1–3 (e.g., ethical hacking concepts, penetration testing methodologies, reconnaissance techniques). Use resources like textbooks, OWASP guidelines, and NIST standards to understand the chosen topic’s technical and ethical scope.
learning_outcomes: TU
session: Module 4: (cont)
4.4 Social Engineering Tools
4.5 Methods of Influence
learning_outcomes: IT
session: LAB 6:
6.1-Lab_Explore_the_Social_Engineer_Toolkit_(SET)
learning_outcomes: U
session: LAB 6: (cont)
6.2-Lab_Using_the_Browser_Exploitation_Framework_(BeEF)
learning_outcomes: U
session: Module 5: Exploiting Wired and Wireless Networks
5.1 Exploiting Network-Based Vulnerabilities
learning_outcomes: IT
session: Module 5: Exploiting Wired and Wireless Networks (Cont)
5.2 Exploiting Wireless Vulnerabilities
Quiz1
learning_outcomes: IT
session: LAB 7:
7.1-Lab_On-Path_Attacks_with_Ettercap
7.2-Lab_Scanning_for_SMB_Vulnerabilities_with_enum4linux
learning_outcomes: U
session: Groups discuss and work on group topics

Perform reconnaissance (passive and active, per Module 3) to identify attack surfaces and vulnerabilities. Document potential threats (e.g., network-based, application-based, or social engineering attacks) and assess their risks using frameworks like NIST or CompTIA PenTest+.
learning_outcomes: U
session: Module 6: Exploiting Application-Based Vulnerabilities
6.1 Overview of Web Application-Based Attacks for Security Professionals and the OWASP Top 10
6.2 How to Build Your Own Web Application Lab
learning_outcomes: IT
session: Module 6: Exploiting Application-Based Vulnerabilities (cont)
6.3 Understanding Business Logic Flaws
6.4 Understanding Injection-Based Vulnerabilities
learning_outcomes: IT
session: Module 6: Exploiting Application-Based Vulnerabilities (cont)
6.5 Exploiting Authentication-Based Vulnerabilities
6.6 Exploiting Authorization-Based Vulnerabilities

Design a penetration testing strategy or tool, aligned with Modules 3–6. For simulations, plan reconnaissance, scanning, and exploitation phases (e.g., using Kali Linux tools). For case studies, outline analytical approaches. For tool development, design scripts for tasks like vulnerability scanning or exploit automation.
learning_outcomes: IT
session: Module 6: Exploiting Application-Based Vulnerabilities (cont)
6.7 Understanding Cross-Site Scripting (XSS) Vulnerabilities
learning_outcomes: IT
session: Module 6: Exploiting Application-Based Vulnerabilities (cont)
6.8 Understanding Cross-Site Request Forgery (CSRF/XSRF) and Server-Side Request Forgery Attacks
learning_outcomes: IT
session: Module 6: Exploiting Application-Based Vulnerabilities (cont)
6.9 Understanding Clickjacking
learning_outcomes: IT
session: Module 6: Exploiting Application-Based Vulnerabilities (cont)
6.10 Exploiting File Inclusion Vulnerabilities
learning_outcomes: IT
session: Module 6: Exploiting Application-Based Vulnerabilities (cont)
6.11 Exploiting Insecure Code Practices
learning_outcomes: IT
session: LAB 8:
8.1-Lab-Web_Vulnerability_Scanning
8.2-Lab-Using_the_GVM_Vulnerability_Scanner
learning_outcomes: U
session: LAB 9:
9.1-Lab-Injection_Attacks
9.2-Lab-Using_Password_Tools
learning_outcomes: U
session: LAB 9: (cont)
9.3-Lab-Cross_Site_Scripting
learning_outcomes: U
session: Groups discuss and work on group topics

Use AI tools in to brainstorm attack vectors, generate code snippets (e.g., for reconnaissance or exploit scripts), or structure findings. Critically evaluate AI outputs for accuracy and relevance, documenting the validation process (e.g., cross-referencing with OWASP or testing in a lab environment).
learning_outcomes: U
session: Module 7: Cloud, Mobile, and IoT Security
7.1 Researching Attack Vectors and Performing Attacks on Cloud Technologies
learning_outcomes: IT
session: Module 7: Cloud, Mobile, and IoT Security (cont)
7.2 Explaining Common Attacks and Vulnerabilities Against Specialized Systems
learning_outcomes: IT
session: Module 8: Performing Post-Exploitation Techniques
8.1 Creating a Foothold and Maintaining Persistence After Compromising a System
learning_outcomes: IT
session: Module 8: Performing Post-Exploitation Techniques (cont)
8.2 Understanding How to Perform Lateral Movement, Detection Avoidance, and Enumeration

Execute the project: conduct penetration tests (e.g., exploiting XSS, SQL injection, or network vulnerabilities), analyze case studies with detailed attack breakdowns, or develop and test custom tools. Document all steps, including tools used (e.g., SET, BeEF, Wireshark) and outcomes.
learning_outcomes: IT
session: Module 9: Reporting and Communication
9.1 Comparing and Contrasting Important Components of Written Reports
9.2 Analyzing the Findings and Recommending the Appropriate Remediation Within a Report
learning_outcomes: IT
session: Module 9: Reporting and Communication (cont)
9.3 Explaining the Importance of Communication During the Penetration Testing Process
9.4 Explaining Post-Report Delivery Activities
learning_outcomes: IT
session: Lab 10:
10.1-Lab-Explore_PenTest_Reports
10.2-Lab–Recommend_Remediation_Based_on_Findings
learning_outcomes: U
session: Groups discuss and work on group topics

Draft an 8–12 page report covering the scenario overview, vulnerability assessment, exploitation/mitigation strategies, and AI usage reflection. Conduct peer reviews within the group to refine technical accuracy, clarity, and alignment with standards like OWASP or NIST, as per Module 9.
learning_outcomes: U
session: Module 10: Tools and Code Analysis
10.1 Understanding the Basic Concepts of Scripting and Software Development
learning_outcomes: IT
session: Module 10: Tools and Code Analysis (cont)
10.2 Understanding the Different Use Cases of Penetration Testing Tools and Analyzing Exploit Code
learning_outcomes: IT
session: LAB 11:
11.1-Lab–Analyze_Exploit_Code
learning_outcomes: U
session: LAB 11: (cont)
11.2-Lab–Analyze_Automation_Code
learning_outcomes: U
session: Module 11: Cryptography
11.1 Understanding Cryptography Basics
11.2 Understanding Symmetric and Asymmetric Algorithms
learning_outcomes: IT
session: Module 11. Cryptography (cont.)
11.3 Components of PKI
11.4 Understanding Cryptography Attacks
learning_outcomes: IT
session: LAB 12
learning_outcomes: U
session: Lab 12(cont)
Report the progress of Project

Finalize the report, incorporating peer feedback and ensuring compliance with ethical hacking standards. Prepare a 10–15 minute presentation with slides and, if applicable, live demos (e.g., tool execution or attack simulation), focusing on key findings and remediation strategies.
learning_outcomes: U
session: Module 12 Network. Protection Systems
12.1 Understanding Routers
12.2 Understanding Firewalls
learning_outcomes: IT
session: Module 12 Network. Protection Systems (cont.)
12.3 Understanding Intrusion Detection and Prevention Systems
12.3 Understanding Honeypots
learning_outcomes: IT
session: Groups discuss and work on group topics

Deliver the presentation, allocating 8–10 minutes for slides or demos and 5 minutes for Q&A. Peers will question technical details, ethical considerations, and mitigation approaches. Assessment criteria include communication clarity, technical depth, teamwork, and ability to defend findings, per Module 9.
learning_outcomes: U
session: Groups discuss and work on group topics
learning_outcomes: U
session: Group Present: Final report the Project
learning_outcomes: U
session: Group Present: Final report the Project (Cont)
learning_outcomes: U
session: Course Review