Project exam · Ethical Hacking and Penetration Testing (legal labs)
Project exam: ethical hacking practical
Project examexpert· about 1.25 hours· 6 steps· 75 min · pass 70%
The brief
A timed practical. In 75 minutes you write five checks a tester reaches for every day (scope, parsing a scan, CVSS banding, ordering findings, spotting safe SQL) and give one piece of real lab evidence. Every task is checked when you hand in; no hints or answers are shown.
Why it matters
Technical rounds for junior pentest and bug-bounty roles test exactly this: can you parse tool output, prioritise by severity, recognise a safe fix and stay in scope, against the clock.
Skills you practise
- scope checks
- parsing nmap output
- CVSS bands
- prioritising findings
- recognising parameterised queries
- lab evidence
You need
- For the last task: your isolated lab with a scannable target and nmap
What you will have at the end
exam.py with five working checks and one captured scan, and your score.
How it is marked (rubric, 100 points)
| Scope and parsingTasks 1 and 2 pass, including the out-of-scope and closed-port cases. | 30 |
|---|---|
| Severity handlingTasks 3 and 4 pass: correct bands with validation and worst-first ordering. | 40 |
| Safe-fix recognitionTask 5 tells a parameterised query from string building. | 20 |
| Lab evidenceA real version scan of an in-scope target is captured. | 10 |
- 6tasks
- 75 mintime limit
- 70%to pass
Rules: a project exam
- Do each task on your own machine, then paste the command output into its box here.
- Work alone, without notes or a search engine, as in the real exam.
- No hints and no answers. You can run your code, but the checks run only when you hand in.
- Every task is checked automatically when you hand in, or when the time is up.
- You see which tasks passed at the end. You can take it again.