Solved - CA1 - Analysing Digital Evidence and Investigation Reports

Continuous Assessment 1 (40%) Description of Assessment Tasks Phase 1: Penetration Testing, Vulnerable Machine – DC1 (15%) Objective: In this phase, students will set up a virtual penetration testing machine and vulnerable machines (DC-1), performing reconnaissance to identify vulnerabilities. The goal is to exploit identified vulnerabilities to gain unauthorized access to the system, then document the process in a detailed penetration testing report. Practical Lab Requirements: • Create a virtual environment with a penetration testing machine and a vulnerable target machine (DC-2). • Conduct thorough reconnaissance to identify potential vulnerabilities on the target system. • Perform penetration testing using appropriate tools and techniques to exploit the vulnerabilities identified. • Gain access to the system and maintain persistence if applicable. • Document each step taken, the tools used, the findings, and the exploitation process in a detailed penetration testing report. Phase 2: Penetration Testing - Vulnerable Machine – DC2 (15%) Objective: In this phase, students will set up a virtual penetration testing machine and vulnerable machines (DC-2), performing reconnaissance to identify vulnerabilities. The goal is to exploit identified vulnerabilities to gain unauthorized access to the system, then document the process in a detailed penetration testing report. Practical Lab Requirements: • Create a virtual environment with a penetration testing machine and a vulnerable target machine (DC-2). • Conduct thorough reconnaissance to identify potential vulnerabilities on the target system. • Perform penetration testing using appropriate tools and techniques to exploit the vulnerabilities identified. • Gain access to the system and maintain persistence if applicable. • Document each step taken, the tools used, the findings, and the exploitation process in a detailed penetration testing report. Final Report Requirements for Phase 1 and Phase 2: Students will compile a comprehensive 2000 word report detailing all phases of the assessment, offering a complete analysis of their actions, findings, and recommendations. The report should cover the following sections: Executive Summary • A detailed description of the reconnaissance, exploitation, and vulnerabilities identified, including the tools used. • Analyse the incident response process, identifying strengths and weaknesses in handling the attacks. • Describe the security improvements implemented during the penetration test and their effectiveness in mitigating identified risks. • Discuss the legal, ethical, and compliance aspects of conducting penetration tests and exploiting vulnerabilities. • Offer suggestions for enhancing the organization’s security posture based on the findings and exploitation. Phase 3: Client-Side Exploitation Techniques and Security Mitigation in Penetration Testing (10%) Question: Client-side exploitation is a common technique used by penetration testers to identify vulnerabilities in user-side applications such as web browsers, email clients, and document viewers. Discuss the concept of client-side exploitation in penetration testing. In your answer, explain:

1. What client-side exploitation is and how it differs from server-side exploitation.
2. Common client-side attack vectors (e.g., malicious websites, phishing emails, drive-by downloads,

or malicious documents).

1. How attackers or penetration testers deliver and execute client-side exploits.
2. At least two real-world examples of client-side vulnerabilities.
3. Recommended security measures and mitigation techniques to defend against client-side

exploitation. Final Report Requirements for Phase 3: Your report should be around 500 words and include the following: Report Structure • Introduction (Approx. 70–80 words) • Concept of Client-Side Exploitation (Approx. 80–100 words) • Common Client-Side Attack Vectors (Approx. 120–140 words) • Exploitation Process in Penetration Testing (Approx. 80–100 words) • Real-World Examples of Client-Side Vulnerabilities (Approx. 60–80 words) • Mitigation and Security Measures (Approx. 60–80 words) • Conclusion (Approx. 40–50 words) • References Learning Outcomes: This assessment addresses the following module learning outcomes for this module: • Understand the concept of client-side exploitation and its role in penetration testing. • Differentiate between client-side and server-side attacks in cybersecurity environments. • Identify common client-side attack vectors such as phishing emails, malicious websites, drive-by downloads, and infected documents. • Explain the process used by attackers or penetration testers to deliver and execute client-side exploits. • Recommend appropriate security controls and mitigation techniques to protect systems against clientside exploitation. Assessment Requirements All assessment submissions must meet the following minimum requirements: ● Be submitted in the format outlined in the assignment summary table. ● Meet the minimum workload requirement (2500 words). ● Be submitted by the deadline date specified or be subject to late submission penalties. ● Be submitted via Moodle upload ● Use Harvard Referencing when citing third party material. ● Be the student’s own work. ● Include the CCT assessment cover page