Last Updated: 29/07/2025
Version: 1.0
Total Students: 103
Total Assignments: 20
- Total Assignments: 20 unique assignments
- Total Students: 103 students
- Duration: 2 hours maximum per assignment
- Report: 2-3page report per assignment
- Deadline: Submit befor next Friday
- TCP and UDP Port Discovery - Scan
scanme.nmap.org
for open ports - Full Port Scan - Scan all 65,535 ports on
testphp.vulnweb.com
- DNS and IP Discovery - Find IPs and DNS info of
zero.webappsecurity.com
- Detect Service Version with Nmap - Version detection on
testphp.vulnweb.com
- Check Internet Exposure via Shodan - Personal security audit
- Create Low-Privilege User - Create
student01
user without sudo access - File Creation and Permission - Set file permissions to 751
- Sudo Usage Logging - Monitor
/var/log/auth.log
for sudo attempts
- What is Shodan? - Explore Shodan.io for
scanme.nmap.org
- Explain Core Network Terms - Create guide for NAT, ARP, MAC, IPv4, IPv6
- System Hack Timeline - Research real cyber attacks (6-step timeline)
- Discover Hidden Directories - Use
dirb
/gobuster
ontestphp.vulnweb.com
- Directory Monitoring Bash Script - 15-line script to monitor
/home/student/Downloads
- Mini Port Scanner Script - Bash script for top 1000 ports
- Bash Script for Auto Ping and Log - Ping domain every 5 mins, log to CSV
- Python Socket Port Scanner - 15-line Python script for ports 1-100
- Linux AI Help Chat using Groq API - 15-line Python chatbot for Linux commands
- VirusTotal API Usage - 10-15 lines to check file hash with VirusTotal
- Ncat Chat Terminal - 10-line script for chat using
ncat
- Serve a Directory using Python - Use
python3 -m http.server 8080
- Round 1: Students 1-20 (20 students)
- Round 2: Students 21-40 (20 students)
- Round 3: Students 41-60 (20 students)
- Round 4: Students 61-80 (20 students)
- Round 5: Students 81-103 (23 students)
Each assignment is given to multiple students across different rounds:
- Assignment 1: 5 students (one per round)
- Assignment 2: 5 students (one per round)
- Assignment 3: 5 students (one per round)
- ... and so on for all 20 assignments
- Create GitHub repository:
EH_sem3_2025_Notes
- Create directory:
1st Assignment
- Submit all work in this directory
- Methodology: How you approached the task
- Screenshots: Where applicable
- Findings: What you discovered
- Conclusions: What you learned
- Code: Include all scripts and configurations
- Technical Implementation (40%)
- Report Quality (30%)
- Security Analysis (20%)
- Documentation (10%)
- Nmap - Network scanning and discovery
- Bash Scripting - Automation and monitoring
- Python - API integration and custom tools
- Linux Commands - System administration
- Shodan - Internet reconnaissance
- VirusTotal - Malware analysis
scanme.nmap.org
- Nmap's test servertestphp.vulnweb.com
- Vulnerable web applicationzero.webappsecurity.com
- Security testing site
- All assignments are for educational purposes only
- Use only authorized systems and targets
- Follow ethical hacking principles
- Respect privacy and legal boundaries
- Only test systems you own or have permission to test
- Do not attempt to access unauthorized systems
- Report any discovered vulnerabilities responsibly
- Maintain confidentiality of sensitive information
- Check assignment details in Assignment_Mapped_For_All.md
- Review the detailed explanations and scenarios
- Follow the step-by-step instructions provided
- Contact instructor for clarification
- Repository created with correct name
- Assignment directory structure set up
- Technical implementation completed
- Screenshots and evidence collected
- 1-page report written
- Code and scripts included
- Submission ready by deadline