Course: ICS344 – Information Security
Semester: 242
Instructor: Dr. Fakhri Khan
- Group Number: 4
- Section: F08
| Name | Student ID | Contributions |
|---|---|---|
| AMINAH LAZNAM | 202183890 | Participated in all project phases |
| FATIMA BAZROUN | 202177910 | Participated in all project phases |
✅ All tasks and responsibilities were completed collaboratively during regular group meetings.
ICS344-CourseProject/
├── phase1/ # Phase 1: Exploitation and Privilege Escalation
│ ├── screenshots/ # Screenshots related to Phase 1 steps
│ ├── custom/ # Custom scripts used for enumeration and privilege escalation
│ │ ├── ExploitRoot.c # Custom C code for privilege escalation (PwnKit exploit)
│ │ ├── escalate.sh # Bash script to compile and run ExploitRoot.c automatically
│ │ ├── lightpeas.sh # Lightweight enumeration script (LightPeas equivalent)
│ └── README.md # Full Phase 1 report and documentation
├── phase2/ # Phase 2: Splunk SIEM Setup and Log Forwarding
│ ├── screenshots/ # Screenshots related to Phase 2 steps
│ └── README.md # Full Phase 2 report and documentation
├── phase3/ # Phase 3: Defensive Security Implementation
│ ├── screenshots/ # Screenshots related to Phase 3 steps
│ └── README.md # Full Phase 3 report and documentation
└── README.md # Root README
This project includes:
- Phase 1: Attack a vulnerable service using Metasploit and a custom script.
- Phase 2: Analyze the attack data using a SIEM dashboard.
- Phase 3: Propose and test a defensive strategy against the exploited service.
All screenshots, scripts, and explanations are included inside each phase’s respective folder.
- The repository link has been included above for evaluation purposes.
- Repository is public and organized per project guidelines.