这是一篇来自英国的关于安全编程课程的编程代写
Obtaining the Files
The coursework fifiles are stored in a zip fifile in the directory /group/teaching/module-sp/2022/q3-code.tgz.
You can transfer this fifile to your local machine via scp:
scp [user]@student.ssh.inf.ed.ac.uk:/group/teaching/module-sp/2022/q3-code.tgz /local_dir
The fifiles can then be extracted via:
tar -xpf q3-code.tgz
Docker
This coursework focuses on a vulnerable web server. We’ve provided a containerised version of the server based on Docker.
If you want to install Docker on your own machine, follow the intructions provided on the Docker website for your operating system.
Otherwise, the SEED Labs Virtual Machine contains the necessary software to run Docker pre-installed. Note that this VM is immutable so if you are using it (and anyway, for safety), back up your work by saving any work that you do inside the virtual machine (edited source fifiles, etc) in your home directory. On the SEED Lab VM, Docker can be started by running systemctl start docker.
Note that the Docker containers are also immutable. Thus, restarting the container will reset the database and lose any changes.
Setting up
Prior to doing the coursework, you’ll need to build the provided Docker image. You can build and launch the container with the correct networking set up by running docker-compose up -d.
If you make any changes to the web apps source code and you wish to test it, you can rebuild the image with docker-compose build –no-cache
Useful commands
- Restart Docker: systemctl restart docker
- List Docker Containers w/ IDs: docker ps
- Stop Container: docker stop [Container ID]
- Remove Container: docker rm [Container ID]
- Teardown Docker Compose: docker-compose down
- Run Command in Container: docker exec -it [Container ID] [Command]
- Check Running Processes in Container: docker top [Container ID] #
- Web Security (28 marks)
The provided Dockerfifile describes a very naive web app for image sharing and voting. You may access the web app through http://localhost:8080.
This server is poorly confifigured and is susceptible to a number of vulnerabilities. There are 10 users created for you in advance. They are user1 ~ user10. The passwords are the same as respective usernames. Feel free to register your own users as well.
- Describe how the user fifield is vulnerable to an XSS based attack. Your description should include code to
demonstrate the vulnerability (e.g., by injecting the javascript alert(“Hello World!”)) as well as step by step instructions. Provide a patch fifile to remedy this vulnerability (see Notes). (6 marks)
- Describe how the signature fifield allows an attacker to mount a CSRF attack. The attack should cause a victim to vote for the attacker (another user) transparently. Describe the steps to perform the attack from the perspective of both the attacker and victim. Again, give your answer as a clear and unambiguous series of steps detailing the necessary inputs. Provide a patch fifile to remedy this vulnerability (see Notes). (6 marks)
- Describe how the image upload fifield is vulnerable to a Remote File Inclusion attack. The attack should allow arbitary code to be run on the server. In particular, a successful attack obtains a reverse shell on the target system. Again, give your answer as a clear and unambiguous series of steps detailing the necessary inputs. Provide a patch fifile to remedy this vulnerability (see Notes). (7 marks)
NB: This question requires that you run your own simple web server on your host machine. The most straightforward way to do this is the Python SimpleHTTPServer, which can be launched via python3 -m http.server.
- The PHP initialisation fifile, php.ini, is a critical confifiguration fifile that governs many aspects of PHP’s behaviour. The provided version contains a number of questionable confifiguration settings. Describe three of these misconfifigured settings including how they can lead to exploitation. Provide a patched version of the PHP.ini fifile that fifixes these problems (see Notes). (9 marks)
Notes
You should provide you description and answers in answers.pdf and submit the overall corrected version of the code in a single patch fifile called question3.diffff. Remember to backup the fifiles in /srv/http before modifying them. You will need the original code to run the diffff command.
Before making any changes to the code, fifirst produce a back up:
cd code
cp -pr imageApp imageApp.orig
After completing all of the questions, you can produce a batch diffff fifile using the command:
cd code
diff -cr imageApp.orig imageApp > question3.diff
Then submit question3.diffff
Feel free to modify any source code and rebuild the containers, but be aware that any exploit code will be tested against the original Docker images running according to the original confifiguration.
Partial marks will be awarded if you cannot produce a working exploit, but have demonstrated that an attack vector is vulnerable.
Submission instructions (Part 2)
Go to the SP Learn course and select “Assessment” from the left hand menu. Select the “Assignment Submission” folder and then the “Coursework (parts 1 and 2) folder. Click on the link “Submit via Gradescope”. This will take you to the Gradescope interface. For anyone who has sat an online exam over the last two years, this should look familiar to you. From here, you can drag and drop your fifile(s) to submit.
Please name your fifiles as follows:
answers3.pdf A PDF document containing the answers to Question 3.
question3.diffff The patch fifile generated for Question 3.
The PDF documents should be well-formatted printable A4 PDFs, you may generate them with whatever program you want. Text answers should be brief and to-the-point.
We will mark the most recent fifiles and their submission timestamps must be before the deadline to avoid standard lateness penalties.
You must submit by the fifinal deadline 12 noon, Fri 18th November 2022.
You’re reminded that late coursework is only allowed if approved by the University’s central ESC Team, see the Informatics advice page for more details and how to apply.1
程序代写代做C/C++/JAVA/安卓/PYTHON/留学生/PHP/APP开发/MATLAB
本网站支持淘宝 支付宝 微信支付 paypal等等交易。如果不放心可以用淘宝交易！
E-mail: itcsdx@outlook.com 微信:itcsdx
如果您使用手机请先保存二维码，微信识别。如果用电脑，直接掏出手机果断扫描。
