The goal of Lab 01 is to become familiar with the Attack Lab environment, practice configuring a small network, and perform some simple security related tasks

• Computer Name RFC1178, Appropriately Name Networked Windows Computers
• Protocols DHCP, DNS and ICMP
• File systems NTFS ext3
• Windows Security Authentication Domain Controller
• Windows Admin Tasks Common Administrative Tasks , VBScript, Logon Script, VBscript examples
• Linux Admin Linux Administration ,Linux Password File
• Lecture Slides

The goal of Lab 02 is to become familiar with network protocols (IP, TCP, ARP). Students will use sniffing tools to monitor user sessions on other hosts in the network, and perform active attacks, such as redirecting traffic and issuing a denial of service attack.

• Sniffers Wireshark tcpdump
• Network Tools netcat nmap
• Lecture

<!-- {{:lecture-lab2.ppt|Slides}}     ====== Lab 03 ====== In this {{:lab03.pdf|Lab 03}}, you will recover passwords using two different techniques: dictionary attack and precomputation attack. Recovering a password, known as password cracking, can be a devastating attack, especially since most users will reuse the same password on different systems. Also, physical access to a machine represents an important opportunity for attackers to compromise the system and gain access. This will be explored by using bootable media to compromise an operating system.   ===== Helpful material ===== * **Password Crackers** [[wp>John_the_Ripper|John the Ripper]] [[http://ophcrack.sourceforge.net/|ophcrack]] * **Password Dumping Utilities** [[wp>|Pwdump]] [[http://www.foofus.net/~fizzgig/fgdump/|fgdump]] * **Lecture** {{:lab3.ppt|Slides}}   ====== Lab 04 ====== The goal of the {{:lab04.pdf|Lab 04}} is to become familiar with various injection problems such as command injection, code injection etc. Injection attack is the exploitation of software bugs caused by processing invalid data. The goal of this lab is to study ways to exploit different injection vulnerabilities.   ===== Helpful material ===== * **Sample Application** {{:casino-sample.gz|Casino}} * **Java Decompiler** [[http://jode.sourceforge.net/|JODE]] * **Dynamic linker** [[wp>Dynamic_linker|Dynamic linker]] [[http://www.yolinux.com/TUTORIALS/LibraryArchives-StaticAndDynamic.html|Static, Shared Dynamic and Loadable Linux Libraries ]] [[wp>DLL_injection|DLL Injection]] * **Lecture** {{:lab4.ppt|Slides}}     ====== Lab 05 ====== The goal of the {{:lab05.pdf|Lab 05}} is to study tools that help find vulnerabilities in software applications.   ===== Helpful material ===== * **Tools** [[wp>Nikto_Web_Scanner|Nikto]] [[http://www.parosproxy.org/|Paros Proxy]] [[wp>OpenVAS|OpenVAS]] [[wp>Metasploit_Project|Metasploit]] * **Lecture** {{:lab5.ppt|Slides}}         ====== Lab 06 ====== The goal of the {{:lab06.pdf|Lab 06}} is to gain first-hand experience on different types of overflow vulnerabilities. Such vulnerabilities can be utilized by a malicious user to alter the flow control of the program, even execute arbitrary pieces of code. For instance, buffer overflow vulnerability arises due to the mixing of the storage for data (e.g. buffers) and the storage for controls (e.g. return addresses): an overflow in the data part can affect the flow of the program, because an overflow can change the return address and as a result enable execution of malicious code   ===== Helpful material ===== * **Tools** [[wp>Metasploit_Project|Metasploit]] [[http://www.gnu.org/software/gdb/|gdb]] * **Papers** [[http://insecure.org/stf/smashstack.html|Smashing the Stack]] [[http://www.radarhack.com/tutorial/metasploit_for_dummies.pdf|Metasploit for dummies]] [[http://dougsko.com/msf3/msf3tut.pdf|Developing an Exploit Using the Metasploit Framework]] * **Lecture** {{:lab6.ppt|Slides}}     ====== Lab 07 ======   The goal of the {{:lab07.pdf|Lab 07}} is to study intrusion protection strategies, and gain hands-on experience with different types of protection methods, such as intrusion detection and prevention software (IDPS), auditing, and honeypots   ===== Helpful material ===== * **Tools** [[wp>Snort_(software)|Snort]] [[http://www.honeyd.org/|honeyd]] [[http://www.honeyd.org/|honeyd]] [[http://labrea.sourceforge.net/labrea-info.html|labrea]] * **Lecture** {{:lab7.ppt|Slides}}           ====== Game ======   * **Rules** {{:game.ppt|Game}}     * **Projects** * Team 1 {{:team1.tgz|Project }} * Team 2 {{:team2.tgz|Project}} * Team 3 {{:team3.tgz|Project}}   -->