Practical Penetration Testing Assignment

1. Access the Kali Linux VM

• Use the same process you followed in your workshops.
• Log in to the assignment The test network is 192.168.34.0/24.

2. Scan the Network

• Use tools like nmap, netdiscover, or ping sweep to find all live hosts. Identify open ports, running services, and OS types.

Draw a network map based on your scan results.

3. Attack and Exploit Targets

Use tools such as:

• Nmap (for port scanning & version detection), Nikto (web vulnerabilities)
  Metasploit (exploit frameworks)
  Hydra, Enum4linux, etc. (depending on services)
• Gain access and collect flags (text strings starting with FLAG).
• 15 or more flags are hidden across the machines.

4. Document Every Attack

For each flag:

• Show how you discovered the target
• Tools used, commands run, vulnerabilities exploited. Screenshots or outputs (can go in an appendix). Describe how access was gained to get the flag

5. Recommend Fixes

• For each vulnerability or exploited service:
• Propose concrete security improvements (e.g., patch software, firewall rules,
  Disable unused services.