Hacking Techniques and Countermeasures

Level: 7

Learning Outcome 1: Employ advanced hacking techniques to compromise computer systems and networks

Learning Outcome 2: Review and evaluate advanced reconnaissance and scanning techniques used by Attackers

Learning Outcome 3: Critically analyse techniques used by attackers to gain and maintain access to computer systems and cover tracks of the attack

Learning Outcome 4: Develop the skills required to assess the impact of security incidents to an organization review, assess and critique different categories of computer incidents so that appropriate countermeasure can be designed and applied

Learning Outcome 5: Gain some experience with the key phases of an incident handling process and develop the skills to appropriately react to a range of security incidents

Learning Outcome 6: Learn and employ advanced techniques and tools used by hackers to compromise computer systems so that you can better prepare and react to them in an incident handling situation. Need help with your online assessment? Schedule now!

Assessment Brief
With regards to X machine (to be confirmed on week 9 of teaching) on Hackthebox platform, you are required to demonstrate your ability to carry out advanced exploitation techniques by creating a penetration testing methodology. Specifically, you are required to perform and report on the following(1200 words, 60%):
Design of a methodology
Host enumeration and fingerprinting
Service enumeration and fingerprinting
Vulnrebility scanning
Vulnrebility exploitation

Methodology Design

This section focuses on
Design of a methodology
Firstly a clear methodology
should be presented,
with sufficient detail so that a technical reader can
understand the approach taken and what each stage
attempts to do.
This can include but is not limited to:
The types of scans performed
The types of vulnerabilities assessed
The techniques used
The tools to be used

Methodology Effectiveness & Efficiency
This section focuses on
Host enumeration and fingerprinting
Service enumeration and fingerprinting
Vulnerability Scanning
The report should then reflect you executing each step of the methodology. It should show each stage being executed efficiently with the least number of commands used, each command should run with the optimal options. The way the tools/commands are used should simulate attack from a malicious hacker. The output of the commands should also be show clearly and the output should be in its most efficient form. Or with a filter (i.e grep) used to extract the most important/key pieces of information Overall - You should show the execution of each step of the Ethical Hacking Methodology you present. Marks are awarded for how effective and efficient you are.

Machine exploitation
This section focuses
Vulnerability Exploitation
A clear and concise description of what the vulnerability is.
A comment or indicator on how serious the issue is
A repeatable example should be given. (Proof of Concept)

Machine vulnerability mitigation
An explanation on why each item presents a security risk
Advice on how to fix/remediate the issues found

Report Summary
A technical and management summary are both presented which are tailored for each audience and highlight the key findings and approach

The rapid expansion of satellite technology has transformed global communication, navigation, and data transmission, making satellites essential to modern infrastructure. However, as reliance on satellite systems grows, so does the risk of cyber threats. Satellites face unique cybersecurity challenges due to their remote nature, limited resources, and exposure to both physical and digital threats. Understanding these challenges and implementing robust security measures are essential to protect satellite systems from potential exploitation. This part of assignment is divided into 3 main categories:

Introduction to Satellite Cyber security:
Describe how satellite systems function, including a brief overview of their architecture and communication protocols
Explain the importance of cybersecurity in satellite operations
Identifying Potential Threats and Vulnerabilities: Software vulnerabilities in satellite firmware or operating systems
Cyber security measures for Satellite systems:
Propose effective cybersecurity strategies to mitigate the vulnerabilities identified in the previous section.
Discuss the unique challenges of implementing these measures in the satellite environment