Differences

This shows you the differences between two versions of the page.

--- labs [2010/10/26 00:40] – mark
+++ labs [2011/12/20 14:17] (current) – mark
@@ Line 51: / Line 51: @@
   * **Dynamic linker**  [[wp>Dynamic_linker|Dynamic linker]] [[http://www.yolinux.com/TUTORIALS/LibraryArchives-StaticAndDynamic.html|Static, Shared Dynamic and Loadable Linux Libraries
 ]] [[wp>DLL_injection|DLL Injection]]
   * **Lecture** {{:lab4.ppt|Slides}}
+====== Lab 05 ======
+The goal of the {{:lab05.pdf|Lab 05}} is to study tools that help find vulnerabilities in software applications.
+===== Helpful material =====
+    * **Tools**  [[wp>Nikto_Web_Scanner|Nikto]] [[http://www.parosproxy.org/|Paros Proxy]]  [[wp>OpenVAS|OpenVAS]] [[wp>Metasploit_Project|Metasploit]]
+    * **Lecture** {{:lab5.ppt|Slides}}
+====== Lab 06 ======
+The goal of the {{:lab06.pdf|Lab 06}} is to gain first-hand experience on different types of overflow vulnerabilities. Such vulnerabilities can be utilized by a malicious user to alter the flow control of the program, even execute arbitrary pieces of code. For instance, buffer overflow vulnerability arises due to the mixing of the storage for data (e.g. buffers) and the storage for controls (e.g. return addresses): an overflow in the data part can affect the flow of the program, because an overflow can change the return address and as a result enable execution of malicious code
+===== Helpful material =====
+    * **Tools**   [[wp>Metasploit_Project|Metasploit]] [[http://www.gnu.org/software/gdb/|gdb]]
+    * **Papers** [[http://insecure.org/stf/smashstack.html|Smashing the Stack]] [[http://www.radarhack.com/tutorial/metasploit_for_dummies.pdf|Metasploit for dummies]] [[http://dougsko.com/msf3/msf3tut.pdf|Developing an Exploit Using the Metasploit Framework]]
+    * **Lecture** {{:lab6.ppt|Slides}}
+====== Lab 07 ======
+The goal of the {{:lab07.pdf|Lab 07}} is to study intrusion protection strategies, and gain hands-on experience with different types of protection methods, such as intrusion detection and prevention software (IDPS),
+auditing, and honeypots
+===== Helpful material =====
+    * **Tools**   [[wp>Snort_(software)|Snort]] [[http://www.honeyd.org/|honeyd]] [[http://www.honeyd.org/|honeyd]] [[http://labrea.sourceforge.net/labrea-info.html|labrea]]
+    * **Lecture** {{:lab7.ppt|Slides}}
+====== Game ======
+    * **Rules**     {{:game.ppt|Game}}
+    * **Projects**