CIS 248 - Ethical Hacking II

4 Credits, 5 Contact Hours
3 lecture periods 2 lab periods

Knowledge and skills required to enter the field of professional penetration testing by understanding and applying the attacks, techniques, and tools used by adversaries.

Prerequisite(s): CIS 188, and CIS 247
Recommendation: Completion of CIS 221 before enrolling in this course. If any recommended course is taken, see a financial aid or Veteran’s Affairs advisor to determine funding eligibility as appropriate. This course requires a solid knowledge of networking, administration of Linux and Windows, and basic scripting.
Information: Prerequisite may be waived, due to comparable industry experience, with consent of the Program Director.

Course Learning Outcomes

Analyze security weaknesses in IT systems.
Design an IT security penetration testing plan.
Conduct successful penetration tests against an Active Directory environment.
Create comprehensive penetration test reports.

Outline:

Review of Kali Linux
Bash and Powershell Scripting
Common Tools
Recon
1. Passive
2. Active
Vulnerability Scanning
Attacks
1. Web Application
2. Buffer Overflows
Attacking the Client
1. Windows
2. Microsoft Office
3. Memory corruption
4. AV evasion
Privilege Escalation
Password Attacks
Active Directory Attacks
Post Exploitation
Attack toolkits
1. Metasploit
2. PowerShell Empire

Effective Term:
Fall 2023