[major=IA | course_id=HOD402 | syllabus_id=13295 | semester=7 | combo=core | title=Ethical Hacking and Offensive Security]
Course ID: HOD402
Title EN: Ethical Hacking and Offensive Security
Title VI: Thâm nhập thử và phòng thủ
Credits: 3.0
Prerequisites: ITE303 or ITE302c, OSP201
Description: The digital landscape is evolving at an unprecedented rate with unknown threats lurking around every corner. Cybersecurity resilience in the modern world cannot be just an addon - it's a necessity. Organizations must build cybersecurity resilience, and offensive security professionals like Ethical Hackers and Penetration Testers can help proactively discover unknown threats and address them before cybercriminals do.
Target Audience This course is designed to prepare learners with the Ethical Hacker skillset. Learners will become proficient in the art of scoping, executing, and reporting on vulnerability assessments, while recommending mitigation strategies. By using an engaging gamified narrative throughout the course, with real-world inspired hands-on practice labs, learners develop essential workforce readiness skills to lay a solid foundation in offensive security.
After completing this course, learners can enter cybersecurity careers, either on the offensive security side as ethical hackers or penetration testers, or on the defensive security side by understanding the mindset and tactics of threat actors, while implementing security controls and monitoring, analyzing, and responding to current security threats.
Student tasks: - Students must attend at least 80% of contact sessions in order to be accepted to the final examination.
- Students are responsible to do all exercises, assignments and labs given by instructor in class or at home and submit on time
- Use laptop in class only for learning purpose
- Promptly access to the http://flm.fpt.edu.vn for up-to-date course information
- Students must complete all assignments on the Cisco Networking Academy (https://skillsforall.com/) with a result of at least 75%.
Tools: Internet, basic tools for ethical hacking (VMWare, Kali Linux, Wireshark, Nmap, …)
Course type: traditional
Decision: 932/QĐ-ĐHFPT dated 08/22/2025
Approved date: 2025-08-22
CLO1: Explain the importance of methodological ethical hacking and penetration testing.
[1] category=LAB; type=on-going; weight=20.0; duration=60'; question_type=CLO1-CLO10; grading_guide=- cover content 5,6,7,8; completion_criteria=; clos=4
[2] category=Progress test 1; type=on-going; weight=10.0; duration=10'-30'; question_type=CLO1-CLO5; grading_guide=- cover content 1,2,3,4,5; completion_criteria=; clos=>0
[3] category=Progress test 2; type=on-going; weight=10.0; duration=10'-30'; question_type=CLO6-CLO10; grading_guide=- cover content 6,7,8,9,10; completion_criteria=; clos=>0
[4] category=Project; type=on-going; weight=30.0; duration=60'; question_type=CLO1-CLO10; grading_guide=- costudents' active learning attitude during the course;
discipline and communication; completion_criteria=; clos=4
[5] category=Final exam; type=Final exam; weight=30.0; duration=60'; question_type=; grading_guide=Studied all of course's Material; completion_criteria=1) On-going Assessment
+ 02 Progress Test: 20%
+ Project: 30%
+ 12 Labs: 20%
2) 1 Final Exam: 30%
3) Completion criteria: Every on-going assessment component > 0, Final Result >=5, Average Lab Score >= 4 & Final Exam Score >=4; clos=4
[1] desc=CEH v12 Certified Ethical Hacker Study Guide with 750 Practice Test Questions; author=Ric Messier; publisher=Sybex; edition=1st; isbn=978-1394186921; main=; online=; note=
[2] desc=Cisco Ethical Hacker Slide
https://skillsforall.com/course/ethical-hacker?courseLang=en-US; author=Cisco; publisher=Cisco; edition=; isbn=; main=True; online=True; note=
[3] desc=Hacking Exposed 7: Network Security Secrets and Solutions; author=Stuart McClure, Joel Scambray, George Kurtz; publisher=McGraw-Hill Education; edition=7th; isbn=978-0071780285; main=; online=; note=
[4] desc=Hands-On Ethical Hacking and Network Defense (4th); author=Rob Wilson, Michael Simpson, Nicholas Antill; publisher=Cengage Learning; edition=4th; isbn=978-0357509753; main=; online=; note=
Session 1: Module 1: Introduction to Ethical Hacking and Penetration Testing
1.1 Understanding Ethical Hacking and Penetration Testing
Introduction to the Project
Topic: Offline; Teaching type: CLO1; LO: IT
ITU: Syllabus, textbook, resources, Slide module 1
Download: Read Materials, Discussion, Review Lecture

Session 2: 1.2 Exploring Penetration Testing Methodologies
1.3 Building Your Own Lab
Topic: Offline; Teaching type: CLO1; LO: TU
ITU: Slide module 1
Download: Read Materials, Discussion, Review Lecture

Session 3: LAB 1
Topic: Offline; Teaching type: CLO1; LO: U
ITU: Module Slides, Lab Manual
Download: Review Lab 1

Session 4: LAB 1(cont)
Topic: Offline; Teaching type: CLO1; LO: U
ITU: Module Slides, Lab Manual
Download: Review Lab 1
CLO10: Apply incident response models to manage network security incidents.
Session 1: Project : Group and topic register + Divide class into 3-5 groups + Group select the interesting topic
Students form groups of 3–5 members in Session 5 to initiate the ethical hacking project. Groups establish roles (e.g., reconnaissance lead, exploit developer, report writer) and set collaboration protocols to ensure effective teamwork throughout the project.
Topic: Offline; Teaching type: CLO1; LO: U
ITU: Module Slides, Lab Manual
Download: Read Materials, Discussion,

Session 2: Module 2: Planning and Scoping a Penetration Testing Assessment
2.1 Comparing and Contrasting Governance, Risk, and Compliance Concepts
Topic: Offline; Teaching type: CLO2; LO: IT
ITU: textbook, resources, Slide module 2
Download: Read Materials, Discussion, Review Lecture

Session 3: Module 2:(cont)
2.2 Explaining the Importance of Scoping and Organizational or Customer Requirements
2.3 Demonstrating an Ethical Hacking Mindset by Maintaining Professionalism and Integrity
Topic: Offline; Teaching type: CLO2; LO: IT
ITU: textbook, resources, Slide module 2
Download: Read Materials, Discussion, Review Lecture

Session 4: LAB 2: Lab_Pre-Engagement_Scope_and_Planning
Topic: Offline; Teaching type: CLO2; LO: U
ITU: Module Slides, Lab Manual
Download: Review Lab 2
CLO2: Create penetration testing preliminary documents.
Session 1: Module 3: Information Gathering and Vulnerability Scanning
3.1 Performing Passive Reconnaissance
3.2 Performing Active Reconnaissance
Topic: Offline; Teaching type: CLO3; LO: IT
ITU: textbook, resources, Slide module 3
Download: Read Materials, Discussion, Review Lecture

Session 2: Module 3: (cont)
3.3 Understanding the Art of Performing Vulnerability Scans
3.4 Understanding How to Analyze Vulnerability Scan Results
Topic: Offline; Teaching type: CLO3; LO: IT
ITU: textbook, resources, Slide module 3
Download: Read Materials, Discussion, Review Lecture

Session 3: LAB 3
Topic: Offline; Teaching type: CLO3; LO: U
ITU: Module Slides, Lab Manual
Download: Review Lab 3

Session 4: LAB 3: (cont)
Topic: Offline; Teaching type: CLO3; LO: U
ITU: Module Slides, Lab Manual
Download: Review Lab 3
CLO3: Perform information gathering and vulnerability scanning activities.
Session 1: Groups discuss and work on group topics

Groups select a project topic in Session 5, choosing from: a simulated penetration test in a lab environment, a case study of a real-world ethical hacking incident, or development of a custom penetration testing tool. The problem definition outlines the target system, scenario, or case study context, specifying objectives like identifying vulnerabilities or analyzing attack impacts.
Topic: Offline; Teaching type: CLO3; LO: U
ITU: Module Slides, Lab Manual
Download: Read Materials, Discussion,

Session 2: LAB 4:
4.1-Lab_Advanced_Searches
4.2-Lab-Packet_Crafting_with_Scapy
4.3-Lab_Network_Sniffing_with_Wireshark
Topic: Offline; Teaching type: CLO3; LO: U
ITU: Module Slides, Lab Manual
Download: Review Lab 4

Session 3: LAB 5:
5.1-Lab-Vulnerability_Scanning_with-Kali_Tools
5.2-Lab-Investigate_Vulnerability_Information_Sources
Topic: Offline; Teaching type: CLO3; LO: U
ITU: Module Slides, Lab Manual
Download: Review Lab 5

Session 4: LAB 5: (cont)
5.1-Lab-Vulnerability_Scanning_with-Kali_Tools
5.2-Lab-Investigate_Vulnerability_Information_Sources
Topic: Offline; Teaching type: CLO3; LO: U
ITU: Module Slides, Lab Manual
Download: Review Lab 5
CLO4: Explain how social engineering attacks succeed.
Session 1: Module 4: Social Engineering Attacks
4.1 Pretexting for an Approach and Impersonation
4.2 Social Engineering Attacks
Topic: Offline; Teaching type: CLO4; LO: IT
ITU: textbook, resources, Slide module 4
Download: Read Materials, Discussion, Review Lecture

Session 2: Module 4: (cont)
4.3 Physical Attacks

Conduct thorough research leveraging Modules 1–3 (e.g., ethical hacking concepts, penetration testing methodologies, reconnaissance techniques). Use resources like textbooks, OWASP guidelines, and NIST standards to understand the chosen topic’s technical and ethical scope.
Topic: Offline; Teaching type: CLO4; LO: TU
ITU: textbook, resources, Slide module 4
Download: Read Materials, Discussion, Review Lecture

Session 3: Module 4: (cont)
4.4 Social Engineering Tools
4.5 Methods of Influence
Topic: Offline; Teaching type: CLO4; LO: IT
ITU: textbook, resources, Slide module 4
Download: Read Materials, Discussion, Review Lecture

Session 4: LAB 6:
6.1-Lab_Explore_the_Social_Engineer_Toolkit_(SET)
Topic: Offline; Teaching type: CLO4; LO: U
ITU: Module Slides, Lab Manual
Download: Review Lab 6
CLO5: Explain how to exploit wired and wireless network vulnerabilities.
Session 1: LAB 6: (cont)
6.2-Lab_Using_the_Browser_Exploitation_Framework_(BeEF)
Topic: Offline; Teaching type: CLO4; LO: U
ITU: Module Slides, Lab Manual
Download: Review Lab 6

Session 2: Module 5: Exploiting Wired and Wireless Networks
5.1 Exploiting Network-Based Vulnerabilities
Topic: Offline; Teaching type: CLO5; LO: IT
ITU: textbook, resources, Slide module 5
Download: Read Materials, Discussion, Review Lecture

Session 3: Module 5: Exploiting Wired and Wireless Networks (Cont)
5.2 Exploiting Wireless Vulnerabilities
Quiz1
Topic: Offline; Teaching type: CLO5; LO: IT
ITU: textbook, resources, Slide module 5
Download: Read Materials, Discussion, Review Lecture

Session 4: LAB 7:
7.1-Lab_On-Path_Attacks_with_Ettercap
7.2-Lab_Scanning_for_SMB_Vulnerabilities_with_enum4linux
Topic: Offline; Teaching type: CLO5; LO: U
ITU: Module Slides, Lab Manual
Download: Review Lab 7
CLO6: Explain how to exploit application-based vulnerabilities.
Session 1: Groups discuss and work on group topics

Perform reconnaissance (passive and active, per Module 3) to identify attack surfaces and vulnerabilities. Document potential threats (e.g., network-based, application-based, or social engineering attacks) and assess their risks using frameworks like NIST or CompTIA PenTest+.
Topic: Offline; Teaching type: CLO5; LO: U
ITU: Module Slides, Lab Manual
Download: Read Materials, Discussion,

Session 2: Module 6: Exploiting Application-Based Vulnerabilities
6.1 Overview of Web Application-Based Attacks for Security Professionals and the OWASP Top 10
6.2 How to Build Your Own Web Application Lab
Topic: Offline; Teaching type: CLO6; LO: IT
ITU: textbook, resources, Slide module 6
Download: Read Materials, Discussion, Review Lecture

Session 3: Module 6: Exploiting Application-Based Vulnerabilities (cont)
6.3 Understanding Business Logic Flaws
6.4 Understanding Injection-Based Vulnerabilities
Topic: Offline; Teaching type: CLO6; LO: IT
ITU: textbook, resources, Slide module 6
Download: Read Materials, Discussion, Review Lecture

Session 4: Module 6: Exploiting Application-Based Vulnerabilities (cont)
6.5 Exploiting Authentication-Based Vulnerabilities
6.6 Exploiting Authorization-Based Vulnerabilities

Design a penetration testing strategy or tool, aligned with Modules 3–6. For simulations, plan reconnaissance, scanning, and exploitation phases (e.g., using Kali Linux tools). For case studies, outline analytical approaches. For tool development, design scripts for tasks like vulnerability scanning or exploit automation.
Topic: Offline; Teaching type: CLO6; LO: IT
ITU: textbook, resources, Slide module 6
Download: Read Materials, Discussion, Review Lecture
CLO7: Explain how to exploit cloud, mobile, and IoT security vulnerabilities.
Session 1: Module 6: Exploiting Application-Based Vulnerabilities (cont)
6.7 Understanding Cross-Site Scripting (XSS) Vulnerabilities
Topic: Offline; Teaching type: CLO6; LO: IT
ITU: textbook, resources, Slide module 6
Download: Read Materials, Discussion, Review Lecture

Session 2: Module 6: Exploiting Application-Based Vulnerabilities (cont)
6.8 Understanding Cross-Site Request Forgery (CSRF/XSRF) and Server-Side Request Forgery Attacks
Topic: Offline; Teaching type: CLO6; LO: IT
ITU: textbook, resources, Slide module 6
Download: Read Materials, Discussion, Review Lecture

Session 3: Module 6: Exploiting Application-Based Vulnerabilities (cont)
6.9 Understanding Clickjacking
Topic: Offline; Teaching type: CLO6; LO: IT
ITU: textbook, resources, Slide module 6
Download: Read Materials, Discussion, Review Lecture

Session 4: Module 6: Exploiting Application-Based Vulnerabilities (cont)
6.10 Exploiting File Inclusion Vulnerabilities
Topic: Offline; Teaching type: CLO6; LO: IT
ITU: textbook, resources, Slide module 6
Download: Read Materials, Discussion, Review Lecture
CLO8: Explain how to perform post-exploitation activities; Create a penetration testing report; Classify pentesting tools by use case.
Session 1: Module 6: Exploiting Application-Based Vulnerabilities (cont)
6.11 Exploiting Insecure Code Practices
Topic: Offline; Teaching type: CLO6; LO: IT
ITU: textbook, resources, Slide module 6
Download: Read Materials, Discussion, Review Lecture

Session 2: LAB 8:
8.1-Lab-Web_Vulnerability_Scanning
8.2-Lab-Using_the_GVM_Vulnerability_Scanner
Topic: Offline; Teaching type: CLO6; LO: U
ITU: Module Slides, Lab Manual
Download: Review Lab 8

Session 3: LAB 9:
9.1-Lab-Injection_Attacks
9.2-Lab-Using_Password_Tools
Topic: Offline; Teaching type: CLO6; LO: U
ITU: Module Slides, Lab Manual
Download: Review Lab 9

Session 4: LAB 9: (cont)
9.3-Lab-Cross_Site_Scripting
Topic: Offline; Teaching type: CLO6; LO: U
ITU: Module Slides, Lab Manual
Download: Review Lab 9
CLO9: Evaluate network security alerts; Analyze network intrusion data to identify compromised hosts and vulnerabilities.
Session 1: Groups discuss and work on group topics

Use AI tools in to brainstorm attack vectors, generate code snippets (e.g., for reconnaissance or exploit scripts), or structure findings. Critically evaluate AI outputs for accuracy and relevance, documenting the validation process (e.g., cross-referencing with OWASP or testing in a lab environment).
Topic: Offline; Teaching type: CLO6; LO: U
ITU: Module Slides, Lab Manual
Download: Read Materials, Discussion,

Session 2: Module 7: Cloud, Mobile, and IoT Security
7.1 Researching Attack Vectors and Performing Attacks on Cloud Technologies
Topic: Offline; Teaching type: CLO7; LO: IT
ITU: textbook, resources, Slide module 7
Download: Read Materials, Discussion, Review Lecture

Session 3: Module 7: Cloud, Mobile, and IoT Security (cont)
7.2 Explaining Common Attacks and Vulnerabilities Against Specialized Systems
Topic: Offline; Teaching type: CLO7; LO: IT
ITU: textbook, resources, Slide module 7
Download: Read Materials, Discussion, Review Lecture

Session 4: Module 8: Performing Post-Exploitation Techniques
8.1 Creating a Foothold and Maintaining Persistence After Compromising a System
Topic: Offline; Teaching type: CLO8; LO: IT
ITU: textbook, resources, Slide module 8
Download: Read Materials, Discussion, Review Lecture
Session 1: Module 8: Performing Post-Exploitation Techniques (cont)
8.2 Understanding How to Perform Lateral Movement, Detection Avoidance, and Enumeration

Execute the project: conduct penetration tests (e.g., exploiting XSS, SQL injection, or network vulnerabilities), analyze case studies with detailed attack breakdowns, or develop and test custom tools. Document all steps, including tools used (e.g., SET, BeEF, Wireshark) and outcomes.
Topic: Offline; Teaching type: CLO8; LO: IT
ITU: textbook, resources, Slide module 8
Download: Read Materials, Discussion, Review Lecture

Session 2: Module 9: Reporting and Communication
9.1 Comparing and Contrasting Important Components of Written Reports
9.2 Analyzing the Findings and Recommending the Appropriate Remediation Within a Report
Topic: Offline; Teaching type: CLO8; LO: IT
ITU: textbook, resources, Slide module 9
Download: Read Materials, Discussion, Review Lecture

Session 3: Module 9: Reporting and Communication (cont)
9.3 Explaining the Importance of Communication During the Penetration Testing Process
9.4 Explaining Post-Report Delivery Activities
Topic: Offline; Teaching type: CLO8; LO: IT
ITU: textbook, resources, Slide module 9
Download: Read Materials, Discussion, Review Lecture

Session 4: Lab 10:
10.1-Lab-Explore_PenTest_Reports
10.2-Lab–Recommend_Remediation_Based_on_Findings
Topic: Offline; Teaching type: CLO8; LO: U
ITU: Module Slides, Lab Manual
Download: Review Lab 10
Session 1: Groups discuss and work on group topics

Draft an 8–12 page report covering the scenario overview, vulnerability assessment, exploitation/mitigation strategies, and AI usage reflection. Conduct peer reviews within the group to refine technical accuracy, clarity, and alignment with standards like OWASP or NIST, as per Module 9.
Topic: Offline; Teaching type: CLO8; LO: U
ITU: Module Slides, Lab Manual
Download: Read Materials, Discussion,

Session 2: Module 10: Tools and Code Analysis
10.1 Understanding the Basic Concepts of Scripting and Software Development
Topic: Offline; Teaching type: CLO8; LO: IT
ITU: textbook, resources, Slide module 10
Download: Read Materials, Discussion, Review Lecture

Session 3: Module 10: Tools and Code Analysis (cont)
10.2 Understanding the Different Use Cases of Penetration Testing Tools and Analyzing Exploit Code
Topic: Offline; Teaching type: CLO8; LO: IT
ITU: textbook, resources, Slide module 10
Download: Read Materials, Discussion, Review Lecture

Session 4: LAB 11:
11.1-Lab–Analyze_Exploit_Code
Topic: Offline; Teaching type: CLO8; LO: U
ITU: Module Slides, Lab Manual
Download: Review Lab 11
Session 1: LAB 11: (cont)
11.2-Lab–Analyze_Automation_Code
Topic: Offline; Teaching type: CLO8; LO: U
ITU: Module Slides, Lab Manual
Download: Review Lab 11

Session 2: Module 11: Cryptography
11.1 Understanding Cryptography Basics
11.2 Understanding Symmetric and Asymmetric Algorithms
Topic: Offline; Teaching type: CLO9; LO: IT
ITU: textbook, resources, Slide module 11
Download: Read Materials, Discussion, Review Lecture

Session 3: Module 11. Cryptography (cont.)
11.3 Components of PKI
11.4 Understanding Cryptography Attacks
Topic: Offline; Teaching type: CLO9; LO: IT
ITU: textbook, resources, Slide module 11
Download: Read Materials, Discussion, Review Lecture

Session 4: LAB 12
Topic: Offline; Teaching type: CLO9; LO: U
ITU: Module Slides, Lab Manual
Download: Review Lab 12
Session 1: Lab 12(cont)
Report the progress of Project

Finalize the report, incorporating peer feedback and ensuring compliance with ethical hacking standards. Prepare a 10–15 minute presentation with slides and, if applicable, live demos (e.g., tool execution or attack simulation), focusing on key findings and remediation strategies.
Topic: Offline; Teaching type: CLO9; LO: U
ITU: Module Slides, Lab Manual
Download: Read Materials, Discussion

Session 2: Module 12 Network. Protection Systems
12.1 Understanding Routers
12.2 Understanding Firewalls
Topic: Offline; Teaching type: CLO10; LO: IT
ITU: textbook, resources, Slide module 12
Download: Read Materials, Discussion, Review Lecture

Session 3: Module 12 Network. Protection Systems (cont.)
12.3 Understanding Intrusion Detection and Prevention Systems
12.3 Understanding Honeypots
Topic: Offline; Teaching type: CLO10; LO: IT
ITU: textbook, resources, Slide module 12
Download: Read Materials, Discussion, Review Lecture

Session 4: Groups discuss and work on group topics

Deliver the presentation, allocating 8–10 minutes for slides or demos and 5 minutes for Q&A. Peers will question technical details, ethical considerations, and mitigation approaches. Assessment criteria include communication clarity, technical depth, teamwork, and ability to defend findings, per Module 9.
Topic: Offline; Teaching type: CLO10; LO: U
ITU: Module Slides, Lab Manual
Download: Read Materials, Discussion
Session 1: Groups discuss and work on group topics
Topic: Offline; Teaching type: CLO10; LO: U
ITU: Module Slides, Lab Manual
Download: Read Materials, Discussion

Session 2: Group Present: Final report the Project
Topic: Offline; Teaching type: CLO10; LO: U
ITU: Module Slides, Lab Manual
Download: Review Lab 15

Session 3: Group Present: Final report the Project (Cont)
Topic: Offline; Teaching type: CLO1-CLO10; LO: U
ITU: Project report and demo
Download: Groups present their topics

Session 4: Course Review
Topic: Offline; Teaching type: CLO1-CLO10; LO: 
ITU: Module 1-12
Download: review and prepare to FE