skymemorygit / seedlab

Records & Reports for Seed-project

Seedlab

Records & Reports for Seedlabs (https://seedsecuritylabs.org/) on Ubuntu 16.04

---

Build

To generate pdf README of each lab, enter the corresponding folder and use

pandoc -s --listings -H ../code_style.tex -o readme.pdf README.MD

---

References

Du, W. (2019). Computer & Internet Security: A Hands-on Approach. Wenliang Du.

Export bibtex as:

@book{du2019computer,
  title={Computer \& Internet Security: A Hands-on Approach},
  author={Du, W.},
  isbn={9781733003933},
  url={https://books.google.com/books?id=HclQxQEACAAJ},
  year={2019},
  publisher={Wenliang Du}
}

Besides,

Thanks to

• Some code from the seed book: https://github.com/kevin-w-du/BookCode
• Figures in the seed book: https://www.handsonsecurity.net/files/misc/SEEDBook_figs_2nd.pdf

---

To-do List

Ref: http://www.cis.syr.edu/~wedu/seed/toc.pdf

• Software Security
  • Buffer Overflow Vulnerability Lab
  • Return-to-libc Attack Lab
    • Task 1-5
    • Task 6
  • Format String Vulnerability Lab
  • Race Condition Vulnerability Lab
  • Environment Variable and Set-UID Lab
  • Shellshock Attack Lab
  • Dirty COW Attack Lab
• Web Security (deprecated, just used to test snort)
  • Cross-Site Request Forgery Attack Lab
  • Cross-Site Scripting Attack Lab
  • SQL Injection Attack Lab
• Network Security
  • Packet Sniffing & Spoofing Lab
  • TCP Attack Lab
  • Linux Firewall Lab
  • Bypassing Firewall using VPN
  • Local DNS Attack Lab
  • Remote DNS Cache Poisoning Attack Lab
  • Heartbleed Attack Lab (only for Ubuntu 12.04)
  • VPN Lab
• Crypto
  • Secret-Key Encryption Lab
  • Pseudo Random Number Generation Lab
  • MD5 Collision Attack Lab
  • RSA Encryption and Signature Lab
  • Public-Key Infrastructure (PKI) Lab
  • Hash Length Extension Attack Lab (Azure Ubuntu 20.4)
  • Transport Layer Security (TLS) Lab (Azure Ubuntu 20.4)
• System Security
  • Meltdown Attack Lab
  • Spectre Attack Lab
• Mobile Security
  • Android Repackaging Attack Lab
  • Android Rooting Lab
  • Android ClickJacking Attack Lab