Seedlab

Records & Reports for Seedlabs (https://seedsecuritylabs.org/) on Ubuntu 16.04

Build

To generate pdf README of each lab, enter the corresponding folder and use

pandoc -s --listings -H ../code_style.tex -o readme.pdf README.MD

References

Du, W. (2019). Computer & Internet Security: A Hands-on Approach. Wenliang Du.

Export bibtex as:

@book{du2019computer,
  title={Computer \& Internet Security: A Hands-on Approach},
  author={Du, W.},
  isbn={9781733003933},
  url={https://books.google.com/books?id=HclQxQEACAAJ},
  year={2019},
  publisher={Wenliang Du}
}

Besides,

Thanks to

• Some code from the seed book: https://github.com/kevin-w-du/BookCode
• Figures in the seed book: https://www.handsonsecurity.net/files/misc/SEEDBook_figs_2nd.pdf

To-do List

Ref: http://www.cis.syr.edu/~wedu/seed/toc.pdf

• [ ] Software Security
  • [x] Buffer Overflow Vulnerability Lab
  • [ ] Return-to-libc Attack Lab
    • [x] Task 1-5
    • [ ] Task 6
  • [x] Format String Vulnerability Lab
  • [x] Race Condition Vulnerability Lab
  • [x] Environment Variable and Set-UID Lab
  • [x] Shellshock Attack Lab
  • [ ] Dirty COW Attack Lab
• [ ] Web Security (deprecated, just used to test snort)
  • [ ] Cross-Site Request Forgery Attack Lab
  • [ ] Cross-Site Scripting Attack Lab
  • [ ] SQL Injection Attack Lab
• [ ] Network Security
  • [x] Packet Sniffing & Spoofing Lab
  • [x] TCP Attack Lab
  • [x] Linux Firewall Lab
  • [ ] Bypassing Firewall using VPN
  • [ ] Local DNS Attack Lab
  • [ ] Remote DNS Cache Poisoning Attack Lab
  • [x] Heartbleed Attack Lab (only for Ubuntu 12.04)
  • [ ] VPN Lab
• [ ] Crypto
  • [x] Secret-Key Encryption Lab
  • [x] Pseudo Random Number Generation Lab
  • [x] MD5 Collision Attack Lab
  • [x] RSA Encryption and Signature Lab
  • [x] Public-Key Infrastructure (PKI) Lab
  • [x] Hash Length Extension Attack Lab (Azure Ubuntu 20.4)
  • [ ] Transport Layer Security (TLS) Lab (Azure Ubuntu 20.4)
• [x] System Security
  • [x] Meltdown Attack Lab
  • [x] Spectre Attack Lab
• [ ] Mobile Security
  • [ ] Android Repackaging Attack Lab
  • [ ] Android Rooting Lab
  • [ ] Android ClickJacking Attack Lab