M.Sc. (Information Technology) Security Breaches and Countermeasures Practical Syllabus - Mumbai University 2026

• 1. Use the following tools to perform footprinting and reconnaissance 2. Recon-ng (Using Kali Linux) a) 3. FOCA Tool 4. Windows Command Line Utilities 5. Ping 6. Tracert using Ping 7. Tracert b) 8. NSLookup 9. Website Copier Tool – HTTrack 10. Metasploit (for information gathering) 11. Whois Lookup Tools for Mobile – DNS Tools, Whois, Ultra Tools Mobile 12. Smart Whois c) 13. eMailTracker Pro 14. Tools for Mobile – Network Scanner, Fing – I Network Tool, Network Discovery Tool, Port Droid Tool d) a. Scan the network using the following tools: i. Hping2 / Hping3 ii. Advanced IP Scanner iii. Angry IP Scanner e) iv. Masscan v. NEET vi. CurrPorts vii. Colasoft Packet Builder viii. The Dude f) ix. b. Use Proxy Workbench to see the data passing through it and save the data to file. c. Perform Network Discovery using the following tools: i. Solar Wind Network Topology Mapper ii. OpManager iii. Network View g) iv. LANState Pro d. Use the following censorship circumvention tools: i. Alkasir h) ii. Tails OS e. Use Scanning Tools for Mobile – Network Scanner, Fing – Network Tool, Network Discovery Tool, Port Droid Tool a. Perform Enumeration using the following tools: i. Nmap ii. NetBIOS Enumeration Tool iii. SuperScan Software a) iv. Hyena v. SoftPerfect Network Scanner Tool vi. OpUtils vii. SolarWinds Engineer’s Toolset viii. Wireshark b. Perform the vulnerability analysis using the following tools: i. Nessus ii. OpenVas a. Perform mobile network scanning using NESSUS. b) b. Perform the System Hacking using the following tools: i. Winrtgen II ii. PWDump iii. Ophcrack iv. Flexispy v. NTFS Stream Manipulation vi. ADS Spy d) vii. Snow viii. Quickstego ix. Clearing Audit Policies x. Clearing Logs a. Use wireshark to sniff the network. b. Use SMAC for MAC Spoofing. c. Use Caspa Network Analyser. e) d. Use Omnipeek Network Analyzer. a. Use Social Engineering Toolkit on Kali Linux to perform Social Engineering using Kali Linux. b. Perform the DDOS attack using the following tools: i. HOIC ii. LOIC
• III a) iii. HULK iv. Metasploit c. Using Burp Suite to inspect and modify traffic between the browser and target application. a. Perform Web App Scanning using OWASP Zed Proxy. b. Use droidsheep on mobile for session hijacking c. Demonstrate the use of the following firewalls: b) i. Zonealarm and analyse using Firewall Analyzer. ii. Comodo Firewall d. Use HoneyBOT to capture malicious network traffic. e. Use the following tools to protect attacks on the web servers: i. ID Server ii. Microsoft Baseline Security Analyzer c) iii. Syhunt Hybrid a. Protect the Web Application using dotDefender. b. Demonstrate the following tools to perform SQL Injection: i. Tyrant SQL ii. Havij iii. BBQSQL d) Use Aircrack-ng suite for wireless hacking and countermeasures. Use the following tools for cryptography i. HashCalc ii. Advanced Encryption Package iii. MD5 Calculator e) iv. TrueCrypt v. CrypTool

Books and References

• 1 CEHv10, Certified Ethical Ric Messier Sybex - Wiley - 2019 Hacker Study Guide
• 2 All in One, Certified Ethical Matt Walker Tata McGraw Hill - 2012 Hacker
• 3 CEH V10: EC-Council Certified I.P. Specialist IPSPECIALIST - 2018 Ethical Hacker Complete Training Guide