Subject Syllabus
CY-702 (A) - Penetration Testing and Vulnerability Analysis
CSCY · Semester 7
Course Modules
Learn topic-wise with Hyper AI and revise using mapped PYQs.
Introduction to penetration testingLegal and ethical considerationsTypes of penetration testingPenetration testing methodologies.Information Gathering and Scanning: Foot printing and reconnaissance techniquesNetwork scanning and enumerationSINT (Open-source intelligence) gatheringVulnerability scanning tools.
Exploitation and Post-Exploitation: Exploiting system and network vulnerabilitiesPrivilege escalation techniques, post-exploitation activitiesMaintaining access and pivoting Web ApplicationSecurityIntroduction to web application securityCommon web application vulnerabilitiesWeb application penetration testing methodologiesWeb vulnerability scanners and tools.
Wireless Network Security: Wireless network security conceptsWi-Fi vulnerabilities and attacksWireless penetration testing techniques, securing wireless networks Social Engineering and Physical Security: Introduction to social engineeringTechniques and tactics of social engineeringPhysical security vulnerabilities and testingMitigating social engineering and physical security risks.
Cryptography and Secure Communications: Basics of cryptographyCryptographic algorithms and protocolsEncryption, decryption, and key management, secure communication channelsReporting and Remediation: Documentation and reporting of findingsPrioritizing and mitigating vulnerabilities, engaging stakeholders and communicating recommendations, post-testing activities and continuous improvement.