IMT3491 - Ethical Hacking and Penetration Testing


Examination arrangement

Examination arrangement: Written exam and Project work
Grade: Letters

Evaluation form Weighting Duration Examination aids Grade deviation
Written examination 1/2 2 hours
Assignment 1/2

Course content

Ethical hacking and penetration testing - definitions

Penetration testing methodologies

Hands-on penetration testing

Learning outcome


Explain how a penetration test is planned, executed, documented and terminated.

Account for vulnerabilities in general and common services running on internal and external servers for a generic company.

Predict client side vulnerabilities and use the new methods for security breaches that may occur here.


Master the most common hacking and penetration testing tools and apply these tools to perform simple penetration testing tasks.

Carry out structured and effective search for security issues in computer systems and computer networks.

Construct  effective penetration tests given existing threats towards software, networks, and network services.

Use and abuse access to one system in order to gather more information about the networks and services used by this system.

General competence:

Awareness of vulnerabilities in software both at server and client side, with an extra focus on network applications.

Sensitivity for potential vulnerabilities in the computer systems and networks of a generic company, and ability to make an analysis of potential threats based on a network description.

Overview of a wide set of tools for testing and accessing systems and networks.

Learning methods and activities


Obligatoriske arbeidskrav:

2 (two) approved exercises.

Compulsory assignments

  • Approved exercises

Further on evaluation

Utfyllende om kontinuasjon:

No re-sit examination - projects and exam are closely connected and related

New project(s) and new exam(s) at next course dates


 Written OR digital exam (50%), depending on the number of students the exam might be oral

 Project work (50%)

 Both parts must be passed

Specific conditions

Exam registration requires that class registration is approved in the same semester. Compulsory activities from previous semester may be approved by the department.

Admission to a programme of study is required:
Information Security (BIS)
Information Security (MIS)
Information Security (MISD)
Network and System Administration (BDR)

Required previous knowledge

IMT2282 Operating systems

Course materials

Thomas Wilhelm (2013). Professional Penetration Testing, Second Edition: Creating and Learning in a Hacking Lab 2nd Edition.

Georgia Weidman (2014). Penetration Testing: A Hands-On Introduction to Hacking 1st Edition

Additional materials

Lee Allen (2012). Advanced Penetration Testing for Highly-Secured Environments: The Ultimate Security Guide.

Credit reductions

Course code Reduction From To
IMT3004 3.7 2017-09-01


Examination arrangement: Written exam and Project work

Term Statuskode Evaluation form Weighting Examination aids Date Time Room *
Autumn ORD Assignment 1/2


Autumn ORD Written examination 1/2 2016-11-30 09:00 B212 - 2.etg. , B213 - 2.etg.
  • * The location (room) for a written examination is published 3 days before examination date.
If more than one room is listed, you will find your room at Studentweb.