Everybody welcome to the last video of the module so we're going to be going over the scope ID hands
on project that I want you all to go through.
Now the project in this case we're going to create a fully fleshed out scoping document which is the
assessment document that I showed in the previous video.
Now you can use that template or you can create your own.
What I want you to do though is create your own.
But in case you're not as creative just like I'm not as I'm not that creative.
Go ahead and use the template.
And that's completely fine.
What I want you to do is when you when you are scoping this I want you to assume the following.
Assume that the service that you're testing is a single web application.
It is a Java based web application which is an important concept.
But I want you to keep in mind this is a PROD system with no high availability.
None system goes down service goes down.
Now the scope is restricted to only this machine so you can't just start blasting away at everything
on the network.
The web app team is a point of contact or the stakeholder.
So you can make up a name and phone number if you want or you can leave it.
The name is the web app team and then an email as a point of contact again can be anything.
Now what you need to make sure as you check it needs to be on authenticated and authenticated.
Now the important bit here is that if it's a web app remember the what the word authenticated and authenticated
means.
So you're going to have to do you're gonna have to make some sort of a request from the Web team and
you need to make sure that you need to note that in the scoping document as far as the goals.
So you need to make sure that you get for example an account with that application.
So what I want you guys to go ahead and do is flush this all out.
Go ahead and upload it to your storage of choice and then provide the link in the Facebook group so
we can all take a look at what scoping document that you guys decided to build.
Now combined you can change the name.
You can use fake names real names for the company fake names for companies.
It's entirely up to you.
This is just a fictional document.
We're not actually doing an engagement with it and you don't have to actually sign it but if you really
want to go for it.