Lab #4 – Assessment Worksheet
Using Ethical Hacking Techniques to Exploit a Vulnerable
Workstation
IS4650
Course Name and Number: _____________________________________________________

Student Name: ________________________________________________________________
Instructor Name: ______________________________________________________________
Lab Due Date: ________________________________________________________________
Overview
In this lab, you performed all five phases of ethical hacking: reconnaissance (using Zenmap GUI for Nmap), scanning (using OpenVAS), enumeration (exploring the vulnerabilities identified by
OpenVAS), compromise (attack and exploit the known vulnerabilities) using the Metasploit
Framework application), and conducted post-attack activities by recommending specific countermeasures for remediating the vulnerabilities and eliminating the possible exploits.
Lab Assessment Questions & Answers
1. What are the five steps of ethical hacking? reconnaissance, scanning,enumeration, compromise, post-attack activities: recommended countermeasures for remediation.

2. During the reconnaissance step of the attack, what open ports were discovered by Zenmap? What services were running on those ports?
There were several Ports, I will list onl a few POrts, 21,3306,22,53,445,111,25, all running TCP: the services running were Linux telneted, smtp Postfix, Apache Tomcat/Coyote JSP

3. What step in the hacking attack process uses Zenmap?
Reconnaissance

4. What step in the hacking attack process identifies known vulnerabilities?
Enumeration

5. During the vulnerability scan, you identified a vulnerable service in the Linux victim system.
What was the name of the vulnerable service?
I believe that this is the telnet service.
Copyright © 2014 by Jones & Bartlett Learning, LLC, an Ascend Learning Company. All rights reserved.