CYS405 · Annotated SlidesChapter 1 — Introduction to Ethical Hacking and Penetration Testing
Chapter 1 · Annotated slides

Introduction to Ethical Hacking and Penetration Testing

Hacker profiles and motives, the TAP principle of controls, ethical hacking vs. penetration testing vs. audits and vulnerability assessments, ethical hackers and the CIA triad, the five hacking phases, the skills and ethics of a pen tester, laws and certifications.

Slide text Study notes Highlight: key words Tips, tricks & traps Seen again elsewhere How it can come up
Slide 1: Slide 1
Exam weight Low

    Learning Objective

    • Explore the history and current state of hacking and penetration testing, including their ethical and legal implications.
    2
    Exam weight Low

      Key Concepts

      • Motives of hackers
      • History of hacking
      • Ethical hacking and penetration testing
      • Laws and ethical standards for penetration testers and ethical hackers
      3
      Exam weight Low

        Profiles and Motives of Different Types of Hackers

        • Good guys are InfoSec professionals who use hacking skills to expose vulnerabilities and makes their systems more secure
        • Amateurs [Script Kiddies] are entry-level hackers who use scripts and software from experienced hackers
        • Criminals are hackers who conduct illegal activities for financial gain
        • Suicide Hackers: aim for destruction without worrying about punishment
        • Ideologues [Hacktivists] are hackers who conduct hacking activities for political or ideological goals
        4
        Exam weight High
        1. Hat colours: black hat (malicious), white hat (authorized, ethical), gray hat (in between, may act without permission). Also script kiddies, hacktivists, suicide hackers, state-sponsored, cyber terrorists.
        🎯 How this can come up · 1 question
        MCQ

        A hacker who works with the owner’s permission to find weaknesses is a:

        Slide 5: TAP Principle of Controls
        Exam weight Low
        1. TAP: controls are Technical, Administrative, Physical.
        Slide 6: The Hacker Mindset
        Exam weight Low
          Slide 7: Motivations
          Exam weight Low
            Slide 8: Modern Hacking and Cybercriminals
            Exam weight Low
              Slide 9: Ethical Hacking and Penetration Testing
              Exam weight High
              1. Ethical hacking = authorized hacking to find and fix weaknesses before attackers do. A pen test simulates a real attack within an agreed scope.
              🎯 How this can come up · 1 question
              True / False

              The key difference between an ethical hacker and a criminal hacker is permission (authorization).

              Slide 10: Ethical Hacking and Penetration Testing (Cont.)
              Exam weight Low
                Slide 11: Comparison among Audit, Vulnerability Assessment and Pen Testing
                Exam weight High
                1. Audit: checks compliance with a standard. Vulnerability assessment: finds and lists weaknesses. Pen test: actually exploits them to prove impact.
                Exam trapA vulnerability assessment does NOT exploit; a penetration test does.
                🎯 How this can come up · 1 question
                MCQ

                Which activity actually exploits weaknesses to show their impact?

                Slide 12: Role of Ethical Hacking
                Exam weight Low
                  Slide 13: Role of Ethical Hacking (Cont.)
                  Exam weight Low

                    14
                    Exam weight Low
                      Slide 15: Ethical Hackers and the C-I-A Triad: The C-I-A Triad
                      Exam weight High
                      1. Attacks map onto the CIA triad: disclosure (confidentiality), alteration (integrity), denial (availability), the DAD triad.
                      🎯 How this can come up · 1 question
                      MCQ

                      A DoS attack targets:

                      Slide 16: Ethical Hackers and the C-I-A Triad: Usability vs. Security
                      Exam weight Low
                        Slide 17: Main Hacking Phases
                        Exam weight High
                        1. Five phases: 1 Reconnaissance → 2 Scanning → 3 Gaining access → 4 Maintaining access → 5 Clearing tracks.
                        TipFive phases: 1 Reconnaissance → 2 Scanning → 3 Gaining access → 4 Maintaining access → 5 Clearing tracks.
                        Slide 18: 1- Reconnaissance
                        Exam weight High
                        1. Reconnaissance: gather information. Passive (no direct contact: public sources) vs. active (interacting with the target).
                        🎯 How this can come up · 1 question
                        MCQ

                        Searching the target’s website and news articles without touching their systems is:

                        Slide 19: 2- Scanning
                        Exam weight Low
                        1. Scanning: probe the network for live hosts, open ports, services and vulnerabilities.
                        Slide 20: 3- Gaining Access
                        Exam weight Low
                        1. Gaining access: exploit a vulnerability (password cracking, buffer overflow, session hijacking…).
                        Slide 21: 4- Maintaining Access
                        Exam weight Low
                        1. Maintaining access: backdoors, rootkits, Trojans to come back later.
                        Slide 22: 5- Clearing Tracks
                        Exam weight High
                        1. Clearing tracks: delete logs, hide files, avoid detection.
                        🎯 How this can come up · 1 question
                        MCQ

                        Deleting log entries happens in which phase?

                        Slide 23: Slide 23
                        Exam weight Low
                          Slide 24: Skills of the Ethical Hacker
                          Exam weight Low
                            Slide 25: Performing a Penetration Test: Ethical Hacking Steps
                            Exam weight High
                            1. Before testing: written permission (contract), scope, rules of engagement, NDA. Test types: black box (no knowledge), white box (full knowledge), gray box (partial).
                            🎯 How this can come up · 2 questions
                            MCQ

                            A test where the tester has no prior knowledge of the target is:

                            True / False

                            An ethical hacker may start testing once the scope is agreed verbally.

                            Slide 26: Performing a Penetration Test (Cont.)
                            Exam weight Low

                              Laws and Ethical Standards

                              Trust

                              • Client places trust in ethical hacker to use proper discretion when performing tests
                              • If ethical hacker breaks trust, can degrade trust in other project aspects, such as the reported results of tests

                              Legal implications

                              • Violating limits defined by the permitted scope of testing may be sufficient cause for client to take legal action against ethical hacker
                              • If violating test scope results in damages, client may be compelled to take legal action
                              27
                              Exam weight Low
                              1. Laws (e.g. computer-misuse acts) make unauthorized access a crime regardless of intent.

                              Laws and Ethical Standards (Cont.)

                              Examples of laws and ethical standards:

                              • Computer Fraud and Abuse Act
                              • US Electronic Communications Privacy Act
                              • Sarbanes-Oxley Act (SOX)
                              • Federal Information Security Modernization Act (FISMA 2014)
                              28
                              Exam weight Low

                                Certifications

                                • CEH: Certified Ethical Hacker from EC-Council https://www.eccouncil.org
                                • GPEN: GIAC (Global Information Assurance Certification) Penetration Tester from SANS https://www.giac.org/certification/penetration-tester-gpen
                                • OSCP: Offensive Security Certified Professional from offensive security https://www.offensive-security.com/information-security-certifications/oscp-offensive-security-certified-professional/
                                • Mile2: are less well known https://mile2.com/
                                • CISSP: Certified Information Systems Security Professional: not a penetration testing certificate. It is a general information security certification.
                                29
                                Exam weight Low
                                1. Certifications: CEH, OSCP, GPEN, CompTIA PenTest+.
                                Slide 30: Summary
                                Exam weight Low