Module 02: Penetration Testing Scoping and Engagement Methodology 2

Exercise 2: Penetration Testing Project Planning and Scheduling Using OpenProj

Scenario

OpenProj software can help you in planning and scheduling the penetration testing assignment in well structured and efficient manner. This software is used for controlling, tracking and managing the various projects in the organizations.

Lab Duration: 5 Minutes

1. Click Windows Server 2012 (External Network). Click Ctrl+Alt+Delete.
   
2. In the password field click Pa$$w0rd and press Enter:
   

   You can use the Type Password option from the Commands menu to enter the password.

   
3. To launch OpenProj, click Windows icon located in the lower left corner of the screen. The Startmenu appears, type OpenProj and click the OpenProj search result to launch the application.
   

   Click the Close button at the top right corner of the Server Manager window.
   If a Networks notification appears in the right-hand section of the window, click Yes.

   
4. The OpenProj main window appears along with Tip of the Day pop-up, click Close button on the Tip of the Day pop-up to proceed.
   

   If the License Agreement appears on the screen, accept the license agreement and then register with OpenProj using your email address.

   
5. Click Create Project on Welcome to OpenProjwindow in order to plan and schedule your penetration testing project.
   

   You can also create a new project from File menu i.e., from File-->New Projectmenu

   
6. The New Project window appears; enter the name of your project, Start date of project, Name of the Manager, and click OK.
   Here,
   Project Name: RedTeamPlan_Project_Layout
   Start date: Mention the date
   Manager: John
   

   Notes section is optional.

   
7. The empty new project is created as shown in the screenshot.
   
8. Enter the name of the task directly under the Name column and schedule the task by adding start date / time and finish date/time for the task under Start and Finish columns respectively.
   

   The Start date/time and Finish date/time may vary as you perform the tasks. You can also provide preferred Start and Finish date/time accordingly.

   Drag the left pane to the right until all the column names are visible.
   You can also double-click on column field to fill the task details with Task Information wizard.
   If the task completes within 8 hours, you can also change the number of hours the task will take with the help of Task Information wizard

   
9. Go to View -->Resources from the menu to add the resources that will be involved in the project.
   
10. Enter all the resources details that will be engaged in the activities of project.
    
11. Now click Gantt tab from the left-hand side (1st tab) and enter the name of the task directly under Name column and schedule the task by adding start date / time and finish date/time for the task under Start and Finish columns respectively.
    

    You can also directly enter the number of days that task will take with the help of Task Information.

    
12. Right Click on the task that you want to have as a subtask, and then click Indent (>) from the context menu to create a new subtask as shown in the screenshot.
    
13. A new subtask is created as shown in the screenshot. The prior task will get a node option, with which you can expand the tasks.
    
14. Double-click on the task to which resources have to be assigned. Task Information - 1 wizard will pop up. Go to Resources tab and click Assign Resources button. The Assign Resources window will appear; click Assign button to assign resources from available resources.
    

    Once you have assigned the resources, close the Assign Resources and Task Information pop-ups.

    
15. Double-click the task for which you want place notes. Under Task Information - 1 wizard, go to Notes tab and write your note about the task. Click Close.
    
16. The Note will be added in the Task as shown in the screenshot.
    
17. Go to the File menu and click the Save As option to save the report in .xml format. Choose the file type as .xml from drop-down list.
    As this is a free version you cannot save or import the pentest report.
    

    A pop-up appears saying You should only use xml format when exchanging with another application as some data may be lost. Do you want to continue. Click Ok.

    
18. Close all the opened windows.

After completion of this lab, you will be aware of how to plan and schedule your penetration testing project with OpenProj.