Assessment 1 Details and Submission Guidelines Trimester Unit Code Unit Title Assessment Type Assessment Title Weight Total Marks Word limit Due Dates 1 ICT306 Advanced Cyber Security Individual...

Assessment 1 Details and Submission Guidelines

Trimester
Unit Code
Unit Title Assessment Type Assessment Title

Weight Total Marks Word limit Due Dates

1
ICT306
Advanced Cyber Security
Individual Assessment


Mastering Network Mapping and Enumeration

Assignment 1 10%
30 %
Assignment 1 40 marks

1500

30

Assignment 1/3/2022

25/09/2022

Permeable:

Assignment 1

Network scanning and enumeration have become an increasingly important aspect of penetration tests over the last couple of years. Organizations now have a complex network of assets storing sensitive and valuable data. To test the security posture of the organization, conducting effective network scanning and enumeration of the organization's network is mandatory. This assignment will help you become an expert in Nmap quickly and easily.

Objectives of the Assignment:

1. 
   

   
   TheAssignmentstartsbysettinguptheworkingandthenhighlightstheimportance of Nmap for network scanning.
   

   
   


2. 
   

   
   Next,youwillgraspthefundamentalconceptsofnetworking,suchasportscanning, the Open Systems Interconnection (OSI) model, network layer, and transport layer.
   

   
   


3. 
   

   
   Moving along, you will learn how to discover hosts using pings and understand advanced scanning that will help you to set up your own virtual hacking lab.
   

   
   


4. 
   

   
   Next, you will learn techniques to detect and evade firewalls and become familiar with the Nmap Scripting Engine (NSE).
   

   
   


5. 
   

   
   Finally, you will find out the role of enumeration services, such as File Transfer Protocol (FTP), Simple Mail Transfer Protocol (SMTP), Doman Name System (DNS), Hyper Text Transfer Protocol (HTTP), Server Message Block (SMB), and MySQL in network scanning.
   

   
   


6. 
   

   
   BytheendofthisAssignment,youwillhaveallthekeyskillsneededtouseNmap for penetration testing
   .
   

   
   

Questions: (Total marks 40)

1.All questions carry equal marks.
2. Justify the document properly before submission.
3. Use the diagrams, images wherever necessary.
4. Provide the references in the description in the IEEE format 5. Word limit is 1500 words.
6. Upload the screen shots for every question on the Moodle.

Q1. What is NMAP? What is NMAP used for?

Q2. Type the command ‘
Nmap -A -T4 scanme.nmap.org
’
in the terminal and check results.
Use the search function to answer the following questions.

1. 
   

   
   What does the switch -A do?
   

   
   


2. 
   

   
   What does the switch -T4 do?
   

   
   

Q3. Open NMAP and type the command
‘nmap
-A -
T4 localhost’
. Depending on your local network and devices, the scan will take anywhere from a few seconds to a few minutes. Review the results and answer the following questions.

1. 
   

   
   Which ports and services are opened?
   

   
   


2. 
   

   
   For each of the open ports, record the software that is providing the services.
   

   
   

Q4. At the terminal command prompt, enter
‘ip address’
to determine the IP address and subnet mask for your host.

a. Record the IP address and subnet mask of your machine. b. Which networks your machine belongs to?

Q5. Locate other hosts on your LAN with command
‘nmap
-A -T4 network address/prefix
’
. For example
‘
nmap -A -
T4 10.0.0.0/24’
.The last octet of the your IP address should be replaced with a zero. For example, in the IP address 10.0.2.15, the .15 is the last octet. Therefore, the network address is 10.0.2.0. The /24 is called the prefix and is a shorthand for the netmask 255.255.255.0. If your network has a different netmask,
search the internet for a “CIDR conversion table” to find your prefix. For example,
255.255.0.0 would be /16.

Note:
This operation can take some time, especially if you have many devices attached to the network. In one test environment, the scan took about 4 minutes.

1. 
   

   
   How many hosts are up?
   

   
   


2. 
   

   
   From your Nmap results, list the IP addresses of the hosts that are on the same
   

   
   

   
   LAN as your machine. List some of the services that are available on the detected hosts.
   

   
   

Q6. Open a web browser and navigate to
‘
scanme.nmap.org
’
. Please read the message posted. What is the purpose of this site?

Q7.
a. At the terminal prompt, enter
‘nmap
-A -
T4 scanme.nmap.org’

Review the results and answer the following questions. b. Which ports and services are opened?
c. Which ports and services are filtered?
d. What is the IP address of the server?

e. What is the operating system?

Q8. Reflection Question.
Nmap is a powerful tool for network exploration and management. How can Nmap

help with network security? How can NMAP be used by a threat nefarious tool?

actor as a

Marking Guide: Criteria

Q1 Q2 Q3 Q4 Q5 Q6 Q7 Q8

2 marks for description 2 marks for description 2 marks for description 2 marks for description 2 marks for description 5 marks for description 2 marks for description 5 marks for description

Description

and 3 marks and 3 marks and 3 marks and 3 marks and 3 marks

and 3 marks

for screen shot for screen shot for screen shot for screen shot for screen shot

for screen shot

Marks

5 5 5 5 5 5 5 5

Marking Rubric for Exercise Answers:

Excellent Very Good

Good

Satisfactory

Unsatisfactory

arguments