Location via proxy:   [ UP ]  
[Report a bug]   [Manage cookies]                
Scribd Logo
Upload

Welcome to Scribd!

  • 42 views

    Planning and Managing The Security of A Network (420-B75-ES) - Assignment3

    Uploaded by

    Divyang Pandya
    This document provides instructions for an assignment involving setting up a virtual environment to exploit vulnerabilities against a DVWA app. Students are asked to perform a clean install of MS Server 2019 and related software before installing the DVWA app. Videos and articles are referenced to guide students on how to inject SQL and retrieve all data from a form field, as well as how to set up the required WAMP installation on Windows. Students must complete all the steps, take screenshots with system time and hostname displayed, and submit their work and findings in a Word file for grading.

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd

    Planning and Managing The Security of A Network (420-B75-ES) - Assignment3

    Uploaded by

    Divyang Pandya
    42 views1 page
    This document provides instructions for an assignment involving setting up a virtual environment to exploit vulnerabilities against a DVWA app. Students are asked to perform a clean install of MS Server 2019 and related software before installing the DVWA app. Videos and articles are referenced to guide students on how to inject SQL and retrieve all data from a form field, as well as how to set up the required WAMP installation on Windows. Students must complete all the steps, take screenshots with system time and hostname displayed, and submit their work and findings in a Word file for grading.

    Original Title

    Assignment3

    Copyright

    © © All Rights Reserved

    Available Formats

    DOCX, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    This document provides instructions for an assignment involving setting up a virtual environment to exploit vulnerabilities against a DVWA app. Students are asked to perform a clean install of MS Server 2019 and related software before installing the DVWA app. Videos and articles are referenced to guide students on how to inject SQL and retrieve all data from a form field, as well as how to set up the required WAMP installation on Windows. Students must complete all the steps, take screenshots with system time and hostname displayed, and submit their work and findings in a Word file for grading.

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd
    Download as docx, pdf, or txt
    42 views1 page

    Planning and Managing The Security of A Network (420-B75-ES) - Assignment3

    Uploaded by

    Divyang Pandya
    This document provides instructions for an assignment involving setting up a virtual environment to exploit vulnerabilities against a DVWA app. Students are asked to perform a clean install of MS Server 2019 and related software before installing the DVWA app. Videos and articles are referenced to guide students on how to inject SQL and retrieve all data from a form field, as well as how to set up the required WAMP installation on Windows. Students must complete all the steps, take screenshots with system time and hostname displayed, and submit their work and findings in a Word file for grading.

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd
    Download as docx, pdf, or txt
    You are on page 1of 1

    Planning and managing the security of a network (420-B75-ES) – Assignment3

    To become a true security expert would certainly require understanding what the vulnerabilities are and
    how to exploit them. In learning network security, students are invited to set up a virtual environment
    where a vulnerability is exploited against the DVWA app: injecting SQL in a form field to retrieve all data.
    Students will need to perform a clean install of MS Server 2019, and install Apache, MySQL, PHP and
    phpMyAdmin before installing the DVWA app. A video is available of all the steps performed in Ubuntu
    Server here:
    https://web.microsoftstream.com/video/a14146a2-0633-40fd-a75e-a31d1cd4c298

    The video mostly follows the instructions in the Medium article titled “Midterm - Ethical Hacking (Part
    1)”, written by Michael Whittle available at:
    Ethical Hacking (Part 1): OWASP Top 10 and DVWA | by Michael Whittle | Level Up Coding
    (gitconnected.com)

    A PDF of the article has been added to the assignment as well.

    For their MS Server 2019 WAMP (Windows Apache Mysql Php) installation, students need to manually
    install the software, as can be found in this video:
    https://www.youtube.com/watch?v=cm5L2EXA_t4

    Or this one:
    https://www.youtube.com/watch?v=vKTgJv8g48w

    Here is also a good resource on superuser.com:


    https://superuser.com/questions/748117/how-to-manually-install-apache-php-and-mysql-on-windows

    Students need to perform all the steps and take screenshots, displaying their system’s time and
    hostname in a command prompt.

    Then students will install Ubuntu Desktop, and access the DVWA app hosted by the MS Server. Again,
    follow the steps in the video, and perform the SQL injection in the form field has shown.

    Put all screenshots, well organized, with proper description for each, in a Word file titled “[YOUR FIRST
    NAME]_[YOUR LAST NAME]_ AS3_420-B75-ES.docx”.

    In the same Word file, add a section where you compare the source code for the SQL injection between
    low security and impossible levels. Research what prepared SQL statements are and explain how to
    recognize SQL statements, so that you can make sure the web apps hosted on your servers use them.

    In the same Word file, add a section that records all problems you encountered during the task, logging
    the time when the problem occurred, the error message if any, one link that helped you solve the
    problem if any and the solution.

    The assignment is worth 10 points and students have 1 week to complete. 1 point is deducted for every
    missing or incorrect step. 1 point is deducted for every screenshot that fail to display time and hostname
    in command prompt as asked.

    You might also like