There are no pre-requisites for this module to be added

This module will cover a range of elements concerned with penetration testing, security testing and offensive security methods. Considerable practical focus is made on methods and tools to assist in penetration testing. Areas of study include:• Testing methodologies and processes, attack frameworks, testing preparation, reporting, and law. Infrastructure and Linux for pentesting. • Information gathering, including passive and active reconnaissance. • Infrastructure security testing, including recon, enumeration and vulnerability analysis. Vulnerabilities, exploits and payloads. • Exploitation types, methods, exploit frameworks and post-exploit methods. • Web App technologies, vulnerabilities, and security testing methods. Injection attack methods. • Authentication credential and password attack methods and testing. • AI for Security Testing, testing AI systems, and current related research.

Upon completion of this module you will be able to

LO1: Develop an advanced understanding and critically evaluate the planning, and execution, of computer security testing procedures, with particular reference to applicable law, risk management and risk mitigation.

LO2: Investigate, critically analyse and reflect on common application, operating system and network vulnerabilities, both theoretically and practically.

LO3: Apply the analytical and practical skills needed to perform, assess, and reflect on security testing with reference to appropriate methodologies and frameworks.

LO4: Critically evaluate specific security problems and reflect on possible design and configuration changes to mitigate the issues identified.

LO5: Reflect on, and critically evaluate, the current research into security testing, threat landscape, and vulnerability mitigation.