Cybersecurity Final Project – Complete Professional Security Assessment, Vulnerability Assessment & Penetration Testing

## Project Title, Due Date : September/1/2026

Cybersecurity Final Project – Complete Professional Security Assessment, Vulnerability Assessment & Penetration Testing
## Project Description

I am looking for an experienced cybersecurity professional or penetration tester to help complete a college-level final cybersecurity project.

The project is a **Professional Security Assessment** and requires practical lab work as well as professional Word documentation and a PowerPoint presentation.

The freelancer should be comfortable working with **Windows, Linux, Kali Linux, Nmap, Nessus/OpenVAS, vulnerability assessment, penetration testing tools, system hardening, risk analysis, and professional cybersecurity reporting.**

### Project Requirements

The project must include **at least 4 target systems**, with at least:

* 1 Windows system
* 1 Linux system
* 2 additional Windows/Linux/legacy vulnerable systems

Virtual machines can be used.

A suggested environment could include:

* Windows Server 2022
* Windows 10/11
* Ubuntu Server
* Metasploitable 2 or another intentionally vulnerable Linux system

The freelancer may recommend a better lab environment if necessary.

## Part 1 – Systems Documentation & Hardening

For all four target systems:

* Document operating system and configuration
* Document IP address
* Identify hosted/running services
* Document update/patch cycle
* Document backup procedures
* Perform appropriate security hardening
* Explain the hardening/security controls implemented
* Ensure required services remain functional
* Perform an `nmap -sV` scan against every target
* Include screenshots/output from the Nmap scans

A professional **Systems Documentation Word document** must be provided.

## Part 2 – Vulnerability Assessment

Perform a detailed vulnerability assessment against **all four targets** using:

* Nessus, or
* OpenVAS / Greenbone

For each system:

* Provide scan results
* Identify vulnerabilities
* Interpret the findings
* Assign appropriate severity/risk levels
* Explain potential business/security impact
* Provide remediation recommendations
* Include screenshots or exported reports as evidence

The results should be written professionally rather than simply copying scanner output.

## Part 3 – Attack Narrative

Develop an attack/pentest plan for each of the four targets.

The tools and techniques should be appropriate for the services discovered on each machine.

The project must use multiple cybersecurity/pentesting tools and must include **at least 3 tools that are less common/new compared with standard classroom tools.**

Possible tools may include, depending on the target:

* Nmap
* Metasploit Framework
* Nikto
* Gobuster
* enum4linux-ng
* SMBClient
* SSH-Audit
* Hydra
* Burp Suite
* SQLmap
* Nuclei
* WhatWeb
* Feroxbuster
* CrackMapExec/NetExec
* Other appropriate tools

The exact tools should be selected based on the exposed services and vulnerabilities of each system.

## Part 4 – Penetration Testing

Perform penetration testing against all four authorized lab targets based on the attack narrative.

For each target, provide:

* Tools used
* Commands used
* Relevant output
* Screenshots
* Findings
* Explanation of what was discovered
* Security impact
* Recommended remediation

I need **relevant penetration-testing results for all four systems**, not simply Nmap scans.

Testing should only be conducted in a controlled virtual/lab environment.

## Part 5 – Final Security Assessment Report

Create a professional Word document containing the complete Security Assessment.

The report should include:

1. Cover page
2. Table of contents
3. Executive summary
4. Scope and objectives
5. Lab/environment overview
6. Testing methodology
7. Attack surface analysis
8. Vulnerability assessment
9. Findings for all four targets
10. Penetration-testing results
11. Evidence/screenshots
12. Risk/severity ratings
13. Business/security impact
14. Remediation recommendations
15. Prioritized remediation roadmap
16. Conclusion/stakeholder summary
17. References
18. Appendices where appropriate

The report must be well structured, clear, concise, objective, professionally written, and free of grammatical errors.

Any assumptions should be clearly identified, and important technical claims should be supported by evidence.

## Part 6 – PowerPoint Presentation

Create a professional PowerPoint presentation summarizing the Security Assessment.

Approximately **8–12 slides** should be sufficient depending on the amount of information.

It should include:

* Project overview
* Scope
* Target systems
* Methodology
* Important vulnerabilities
* Key penetration-testing findings
* Risk overview
* Screenshots/graphics/diagrams
* Main remediation recommendations
* Conclusion

The slides should be visually professional and suitable for presenting the project to an instructor/stakeholder.

## Final Deliverables

I need the following completed files:

1. **Systems Documentation – Word document**
2. **Full Security Assessment – Word document**
3. **Security Assessment Presentation – PowerPoint**
4. **Nmap scan evidence for all four targets**
5. **Nessus/OpenVAS vulnerability scan results/evidence**
6. **Penetration-testing screenshots/output for all four targets**
7. **Attack narrative**
8. Any supporting reports/files used during the assessment

### Important

This is not only a writing project.

I need someone who can **actually build/use a virtual cybersecurity lab, run the scans/tests, collect genuine screenshots/output, interpret the findings, and prepare the professional documentation.**

Please do not fabricate screenshots or scanner results.

When applying, please tell me:

* Your cybersecurity/pentesting experience
* Whether you have experience with Kali Linux
* Whether you have experience with Nessus/OpenVAS
* Whether you can provide genuine lab screenshots/results
* What four target systems you recommend
* How long you need to complete the entire project
* Your total price for all deliverables

I will provide the original assignment instructions/templates to the selected freelancer.