CSE4481

User Tools

Site Tools

You are here: CSE 4481 4.0 - Computer Security Laboratory » CSE 4481 Labs
Trace:
labs

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
labs [2014/01/08 15:14] – marklabs [2014/03/26 02:37] (current) – mark
Line 16: Line 16:
   * **Windows Admin Tasks** [[http://technet.microsoft.com/en-us/library/cc784837%28WS.10%29.aspx|Common Administrative Tasks]] , [[wp>VBScript]], [[http://technet.microsoft.com/en-us/library/cc758918(WS.10).aspx|Logon Script]], [[http://www.computerperformance.co.uk/Logon/logon_scripts.htm|VBscript examples]]    * **Windows Admin Tasks** [[http://technet.microsoft.com/en-us/library/cc784837%28WS.10%29.aspx|Common Administrative Tasks]] , [[wp>VBScript]], [[http://technet.microsoft.com/en-us/library/cc758918(WS.10).aspx|Logon Script]], [[http://www.computerperformance.co.uk/Logon/logon_scripts.htm|VBscript examples]] 
   * **Linux Admin**  [[http://tldp.org/LDP/lame/LAME/linux-admin-made-easy/|Linux Administration]] ,[[http://tldp.org/LDP/lame/LAME/linux-admin-made-easy/shadow-file-formats.html|Linux Password File]]   * **Linux Admin**  [[http://tldp.org/LDP/lame/LAME/linux-admin-made-easy/|Linux Administration]] ,[[http://tldp.org/LDP/lame/LAME/linux-admin-made-easy/shadow-file-formats.html|Linux Password File]]
-  * **Lecture**  {{:lab1.pdf|Slides}}+  * **Lecture**  {{:lab1.ppt|Slides}}
        
- 
-<html> 
-<!-- 
- 
  
 ====== Lab 02 ====== ====== Lab 02 ======
Line 31: Line 27:
   * **Sniffers**  [[wp>Wireshark|Wireshark]] [[wp>Tcpdump|tcpdump]]   * **Sniffers**  [[wp>Wireshark|Wireshark]] [[wp>Tcpdump|tcpdump]]
   * **Network Tools** [[wp>Netcat|netcat]] [[wp>nmap|nmap]]   * **Network Tools** [[wp>Netcat|netcat]] [[wp>nmap|nmap]]
-  * **Lecture** {{:lecture-lab2.ppt|Slides}}+  * **Lecture** {{:lecture-lab2.ppt|Slides}} 
  
    
Line 47: Line 43:
   * **Password Crackers**  [[wp>John_the_Ripper|John the Ripper]] [[http://ophcrack.sourceforge.net/|ophcrack]]   * **Password Crackers**  [[wp>John_the_Ripper|John the Ripper]] [[http://ophcrack.sourceforge.net/|ophcrack]]
   * **Password Dumping Utilities**  [[wp>|Pwdump]] [[http://www.foofus.net/~fizzgig/fgdump/|fgdump]]   * **Password Dumping Utilities**  [[wp>|Pwdump]] [[http://www.foofus.net/~fizzgig/fgdump/|fgdump]]
-  * **Lecture** {{:lab3.ppt|Slides}}+  * **Lecture**  {{:lab3.ppt|Slides}}
  
 ====== Lab 04 ====== ====== Lab 04 ======
Line 65: Line 61:
 ===== Helpful material ===== ===== Helpful material =====
     * **Tools**  [[wp>Nikto_Web_Scanner|Nikto]] [[http://www.parosproxy.org/|Paros Proxy]]  [[wp>OpenVAS|OpenVAS]] [[wp>Metasploit_Project|Metasploit]]     * **Tools**  [[wp>Nikto_Web_Scanner|Nikto]] [[http://www.parosproxy.org/|Paros Proxy]]  [[wp>OpenVAS|OpenVAS]] [[wp>Metasploit_Project|Metasploit]]
-    * **Lecture** {{:lab5.ppt|Slides}}    +    * **Lecture** {{:lab5.ppt|Slides}} 
- +
- +
  
 +  
 ====== Lab 06 ====== ====== Lab 06 ======
 The goal of the {{:lab06.pdf|Lab 06}} is to gain first-hand experience on different types of overflow vulnerabilities. Such vulnerabilities can be utilized by a malicious user to alter the flow control of the program, even execute arbitrary pieces of code. For instance, buffer overflow vulnerability arises due to the mixing of the storage for data (e.g. buffers) and the storage for controls (e.g. return addresses): an overflow in the data part can affect the flow of the program, because an overflow can change the return address and as a result enable execution of malicious code The goal of the {{:lab06.pdf|Lab 06}} is to gain first-hand experience on different types of overflow vulnerabilities. Such vulnerabilities can be utilized by a malicious user to alter the flow control of the program, even execute arbitrary pieces of code. For instance, buffer overflow vulnerability arises due to the mixing of the storage for data (e.g. buffers) and the storage for controls (e.g. return addresses): an overflow in the data part can affect the flow of the program, because an overflow can change the return address and as a result enable execution of malicious code
Line 76: Line 70:
     * **Tools**   [[wp>Metasploit_Project|Metasploit]] [[http://www.gnu.org/software/gdb/|gdb]]     * **Tools**   [[wp>Metasploit_Project|Metasploit]] [[http://www.gnu.org/software/gdb/|gdb]]
     * **Papers** [[http://insecure.org/stf/smashstack.html|Smashing the Stack]] [[http://www.radarhack.com/tutorial/metasploit_for_dummies.pdf|Metasploit for dummies]] [[http://dougsko.com/msf3/msf3tut.pdf|Developing an Exploit Using the Metasploit Framework]]     * **Papers** [[http://insecure.org/stf/smashstack.html|Smashing the Stack]] [[http://www.radarhack.com/tutorial/metasploit_for_dummies.pdf|Metasploit for dummies]] [[http://dougsko.com/msf3/msf3tut.pdf|Developing an Exploit Using the Metasploit Framework]]
-    * **Lecture** {{:lab6.ppt|Slides}}   +    * **Lecture** {{:lab6.ppt|Slides}} 
 + 
 + 
 +   
  
  
Line 87: Line 84:
     * **Tools**   [[wp>Snort_(software)|Snort]] [[http://www.honeyd.org/|honeyd]] [[http://www.honeyd.org/|honeyd]] [[http://labrea.sourceforge.net/labrea-info.html|labrea]]     * **Tools**   [[wp>Snort_(software)|Snort]] [[http://www.honeyd.org/|honeyd]] [[http://www.honeyd.org/|honeyd]] [[http://labrea.sourceforge.net/labrea-info.html|labrea]]
     * **Lecture** {{:lab7.ppt|Slides}}       * **Lecture** {{:lab7.ppt|Slides}}  
- 
- 
- 
  
  
Line 95: Line 89:
  
     * **Rules**    {{:game.ppt|Game}}       * **Rules**    {{:game.ppt|Game}}  
 +    * **Projects**  
 +        * Team 1   {{:team1.zip|Project }} 
 +        * Team 2   {{:team2.zip|Project}} 
 +        * Team 3   {{:team3.zip|Project}}
 +        * Team 4   {{:team4.zip|Project}}
 +        * Team 5   {{:team5.zip|Project}}
  
  
-    * **Projects**   +<html> 
-        * Team 1   {{:team1.tgz|Project }}  +<!--
-        * Team 2   {{:team2.tgz|Project}}  +
-        * Team 3   {{:team3.tgz|Project}} +
 --> -->
 </html> </html>
labs.1389194072.txt.gz · Last modified: 2014/01/08 15:14 by mark
Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki