-
Notifications
You must be signed in to change notification settings - Fork 1
/
cs495.html
457 lines (456 loc) · 27.2 KB
/
cs495.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
<!doctype html>
<html lang="en">
<head>
<meta charset="utf-8">
<meta name="description" content="Labs, homework, and programs should be completed by each student. For each lab, include screenshots demonstrating completion that include your OdinID somewhere in the capture. These should be included in your lab notebook">
<meta name="viewport" content="width=device-width,initial-scale=1">
<meta name="generator" content="Web and Cloud Security">
<meta name="application-name" content="Web and Cloud Security">
<link rel="canonical" href="https://example.com/cs495/">
<link rel="preconnect" href="https://www.google-analytics.com">
<script>
window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)};ga.l=+new Date;
ga('create', 'UA-49880327-14', 'auto');
ga('send', 'pageview');
</script>
<script async src="https://www.google-analytics.com/analytics.js"></script>
<title>Web and Cloud Security</title>
<link rel="stylesheet" href="/styles/main.css">
<link rel="import" href="/elements/elements.html">
<style is="custom-style">
:root{--paper-tabs-selection-bar-color:currentcolor;--paper-input-container-underline:{display:none};--paper-input-container-underline-focus:{display:none};}.dropdown-filter{--paper-input-container:{padding:8px}} </style>
<meta name="apple-mobile-web-app-capable" content="yes">
<meta name="apple-mobile-web-app-status-bar-style" content="#455a64">
<meta name="apple-mobile-web-app-title" content="Web and Cloud Security">
<link rel="apple-touch-icon" sizes="180x180" href="/images/favicons/apple-touch-icon.png">
<link rel="icon" type="image/png" sizes="32x32" href="/images/favicons/favicon-32x32.png">
<link rel="icon" type="image/png" sizes="194x194" href="/images/favicons/favicon-194x194.png">
<link rel="icon" type="image/png" sizes="192x192" href="/images/favicons/android-chrome-192x192.png">
<link rel="icon" type="image/png" sizes="16x16" href="/images/favicons/favicon-16x16.png">
<link rel="mask-icon" href="/images/favicons/safari-pinned-tab.svg" color="#455a64">
<meta name="msapplication-TileColor" content="#455a64">
<meta name="msapplication-TileImage" content="/images/favicons/mstile-144x144.png">
<meta name="theme-color" content="#455a64">
<meta name="og:type" property="og:type" content="website">
<meta name="og:title" property="og:title" content="Web and Cloud Security">
<meta name="og:description" property="og:description" content="Labs, homework, and programs should be completed by each student. For each lab, include screenshots demonstrating completion that include your OdinID somewhere in the capture. These should be included in your lab notebook">
<meta name="og:url" property="og:url" content="https://example.com/cs495/">
<meta name="og:site_name" property="og:site_name" content="Codelabs">
<meta name="og:determiner" property="og:determiner" content="the">
<meta name="og:locale" property="og:locale" content="en_US">
<meta name="og:image" property="og:image" content="/images/og-image.png">
<meta name="og:image:url" property="og:image:url" content="/images/og-image.png">
<meta name="og:image:type" property="og:image:type" content="image/png">
<meta name="og:image:width" property="og:image:width" content="1200">
<meta name="og:image:height" property="og:image:height" content="1200">
<meta name="og:image:alt" property="og:image:alt" content="Codelabs">
<meta name="twitter:card" property="twitter:card" content="summary_large_image">
<meta name="twitter:title" property="twitter:title" content="Web and Cloud Security">
<meta name="twitter:description" property="twitter:description" content="Labs, homework, and programs should be completed by each student. For each lab, include screenshots demonstrating completion that include your OdinID somewhere in the capture. These should be included in your lab notebook">
<meta name="twitter:image" property="twitter:image" content="/images/og-image.png">
<meta name="twitter:url" property="twitter:url" content="https://example.com/cs495/">
</head>
<body id="app" is="body-bind" class="loading fullbleed view">
<paper-header-panel id="main" mode="standard" main>
<header id="banner" down>
<div class="site-width">
<p><img id="logo" src="/images/pdx-cs-logo.png" width="30" height="40" alt="Portland State University"></p>
<div class="banner-description">
<div class="banner-meta">
<h2>Web and Cloud Security</h2>
<p>Labs, homework, and programs should be completed by each student. For each lab, include screenshots demonstrating completion that include your OdinID somewhere in the capture. These should be included in your lab notebook</p>
</div>
</div>
</div>
</header>
<main>
<div id="filters" class="site-width layout horizontal center justified">
<div id="sortby">
<paper-tabs selected="0" noink on-iron-activate="sortBy">
<paper-tab>A-Z</paper-tab>
<paper-tab>Recent</paper-tab>
<paper-tab>Duration</paper-tab>
</paper-tabs>
</div>
<paper-dropdown-menu label="Choose a class" class="dropdown-filter" no-label-float noink no-animations>
<paper-listbox id="eventList" slot="dropdown-content" class="dropdown-content"><a href="/cs410b/" tabindex="-1">
<paper-item>Blockchain Development and Security</paper-item>
</a>
<a href="/cs410g/" tabindex="-1">
<paper-item>Generative Security Applications</paper-item>
</a>
<a href="/cs430/" tabindex="-1">
<paper-item>Internet, Web, and Cloud Systems</paper-item>
</a>
<a href="/cs488/" tabindex="-1">
<paper-item>Cloud and Cluster Data Management</paper-item>
</a>
<a href="/cs491/" tabindex="-1">
<paper-item>Introduction to Computer Security</paper-item>
</a>
<a href="/cs492/" tabindex="-1">
<paper-item>Malware Reverse Engineering</paper-item>
</a>
<a href="/cs495/" tabindex="-1">
<paper-item>Web and Cloud Security</paper-item>
</a>
</paper-listbox>
</paper-dropdown-menu>
<paper-dropdown-menu label="Filter by category" class="dropdown-filter" no-label-float noink no-animations>
<paper-listbox id="categorylist" slot="dropdown-content" class="dropdown-content" on-iron-activate="onCategoryActivate" attr-for-selected="filter">
<paper-item filter="aws">aws</paper-item>
<paper-item filter="client">client</paper-item>
<paper-item filter="cloud">cloud</paper-item>
<paper-item filter="gcp">gcp</paper-item>
<paper-item filter="python">python</paper-item>
<paper-item filter="server">server</paper-item>
<paper-item filter="setup">setup</paper-item>
<paper-item filter="tools">tools</paper-item>
</paper-listbox>
</paper-dropdown-menu></div>
<card-sorter id="cards" class="site-width">
<a href="/labs/W8.4_aws_cloudgoat/index.html?index=..%2F..cs495" on-tap="navigate" class="codelab-card category-aws" data-category="aws,cloud,security,nb08" data-title="8.4: CloudGoat" data-duration="73" data-summary="Exploit vulnerable cloud deployments to gain unauthorized access to cloud resources." data-updated="2024-01-08T21:34:10Z" data-tags="cs495" data-pin="">
<div class="description"><h4>8.4: CloudGoat</h4></div>
<div class="description">Exploit vulnerable cloud deployments to gain unauthorized access to cloud resources.</div>
<div class="card-duration">
<span>73 min </span>
<span>Updated Jan 8, 2024</span>
</div>
<div class="card-footer">
<div class="category-icon aws-icon"></div>
<paper-button class="aws-bg">Start</paper-button>
</div>
</a>
<a href="/labs/W8.3_aws_serverlessgoat/index.html?index=..%2F..cs495" on-tap="navigate" class="codelab-card category-aws" data-category="aws,cloud,security,nb08" data-title="8.3: Serverless Goat" data-duration="68" data-summary="Exploit a serverless application to gain unauthorized access to resources of the account that hosts it." data-updated="2023-03-28T14:07:39Z" data-tags="cs495" data-pin="">
<div class="description"><h4>8.3: Serverless Goat</h4></div>
<div class="description">Exploit a serverless application to gain unauthorized access to resources of the account that hosts it.</div>
<div class="card-duration">
<span>68 min </span>
<span>Updated Mar 28, 2023</span>
</div>
<div class="card-footer">
<div class="category-icon aws-icon"></div>
<paper-button class="aws-bg">Start</paper-button>
</div>
</a>
<a href="/labs/W8.2_aws_flaws2/index.html?index=..%2F..cs495" on-tap="navigate" class="codelab-card category-aws" data-category="aws,cloud,security,nb08" data-title="8.2: flaws2.cloud" data-duration="73" data-summary="Play attacker and defender roles in the cloud using several vulnerable cloud deployments." data-updated="2023-02-17T20:36:49Z" data-tags="cs495" data-pin="">
<div class="description"><h4>8.2: flaws2.cloud</h4></div>
<div class="description">Play attacker and defender roles in the cloud using several vulnerable cloud deployments.</div>
<div class="card-duration">
<span>73 min </span>
<span>Updated Feb 17, 2023</span>
</div>
<div class="card-footer">
<div class="category-icon aws-icon"></div>
<paper-button class="aws-bg">Start</paper-button>
</div>
</a>
<a href="/labs/W8.1_aws_flaws/index.html?index=..%2F..cs495" on-tap="navigate" class="codelab-card category-aws" data-category="aws,cloud,security,nb08" data-title="8.1: flaws.cloud" data-duration="77" data-summary="Exploit several vulnerable cloud deployments to gain unauthorized access." data-updated="2023-03-14T12:56:47Z" data-tags="cs495" data-pin="">
<div class="description"><h4>8.1: flaws.cloud</h4></div>
<div class="description">Exploit several vulnerable cloud deployments to gain unauthorized access.</div>
<div class="card-duration">
<span>77 min </span>
<span>Updated Mar 14, 2023</span>
</div>
<div class="card-footer">
<div class="category-icon aws-icon"></div>
<paper-button class="aws-bg">Start</paper-button>
</div>
</a>
<a href="/labs/W5.4_insecure_deserialization_nodejs/index.html?index=..%2F..cs495" on-tap="navigate" class="codelab-card category-client" data-category="client,security,nb05" data-title="5.4: Insecure Deserialization (JavaScript)" data-duration="55" data-summary="Leverage a deserialization vulnerability to exploit a NodeJS web application." data-updated="2023-02-21T15:50:11Z" data-tags="cs495" data-pin="">
<div class="description"><h4>5.4: Insecure Deserialization (JavaScript)</h4></div>
<div class="description">Leverage a deserialization vulnerability to exploit a NodeJS web application.</div>
<div class="card-duration">
<span>55 min </span>
<span>Updated Feb 21, 2023</span>
</div>
<div class="card-footer">
<div class="category-icon client-icon"></div>
<paper-button class="client-bg">Start</paper-button>
</div>
</a>
<a href="/labs/W5.5_websocket/index.html?index=..%2F..cs495" on-tap="navigate" class="codelab-card category-client" data-category="client,security,nb05" data-title="5.5: Web Socket Vulnerabilities" data-duration="10" data-summary="Leverage vulnerabilities in web socket use" data-updated="2023-02-19T22:25:53Z" data-tags="cs495" data-pin="">
<div class="description"><h4>5.5: Web Socket Vulnerabilities</h4></div>
<div class="description">Leverage vulnerabilities in web socket use</div>
<div class="card-duration">
<span>10 min </span>
<span>Updated Feb 19, 2023</span>
</div>
<div class="card-footer">
<div class="category-icon client-icon"></div>
<paper-button class="client-bg">Start</paper-button>
</div>
</a>
<a href="/labs/W5.3_insecure_deserialization_php/index.html?index=..%2F..cs495" on-tap="navigate" class="codelab-card category-client" data-category="client,security,nb05" data-title="5.3: Insecure Deserialization (PHP)" data-duration="43" data-summary="Leverage a deserialization vulnerability to exploit a PHP web application." data-updated="2023-02-17T19:19:53Z" data-tags="cs495" data-pin="">
<div class="description"><h4>5.3: Insecure Deserialization (PHP)</h4></div>
<div class="description">Leverage a deserialization vulnerability to exploit a PHP web application.</div>
<div class="card-duration">
<span>43 min </span>
<span>Updated Feb 17, 2023</span>
</div>
<div class="card-footer">
<div class="category-icon client-icon"></div>
<paper-button class="client-bg">Start</paper-button>
</div>
</a>
<a href="/labs/W5.2_clickjacking_webcache/index.html?index=..%2F..cs495" on-tap="navigate" class="codelab-card category-client" data-category="client,security,nb05" data-title="5.2: Clickjacking, Web Cache Poisoning" data-duration="50" data-summary="Leverage unsolicited framing and web cache poisoning to exploit vulnerable web applications" data-updated="2023-02-20T00:22:17Z" data-tags="cs495" data-pin="">
<div class="description"><h4>5.2: Clickjacking, Web Cache Poisoning</h4></div>
<div class="description">Leverage unsolicited framing and web cache poisoning to exploit vulnerable web applications</div>
<div class="card-duration">
<span>50 min </span>
<span>Updated Feb 20, 2023</span>
</div>
<div class="card-footer">
<div class="category-icon client-icon"></div>
<paper-button class="client-bg">Start</paper-button>
</div>
</a>
<a href="/labs/W5.1_csrf/index.html?index=..%2F..cs495" on-tap="navigate" class="codelab-card category-client" data-category="client,security,nb05" data-title="5.1: CSRF" data-duration="53" data-summary="Leverage cross-site request forgery to exploit vulnerable web applications" data-updated="2023-02-17T17:52:05Z" data-tags="cs495" data-pin="">
<div class="description"><h4>5.1: CSRF</h4></div>
<div class="description">Leverage cross-site request forgery to exploit vulnerable web applications</div>
<div class="card-duration">
<span>53 min </span>
<span>Updated Feb 17, 2023</span>
</div>
<div class="card-footer">
<div class="category-icon client-icon"></div>
<paper-button class="client-bg">Start</paper-button>
</div>
</a>
<a href="/labs/W4.1_xss/index.html?index=..%2F..cs495" on-tap="navigate" class="codelab-card category-client" data-category="client,security,nb04" data-title="4.1: XSS" data-duration="174" data-summary="Leverage cross-site scripting to attack vulnerable clients" data-updated="2024-02-09T18:39:09Z" data-tags="cs495" data-pin="">
<div class="description"><h4>4.1: XSS</h4></div>
<div class="description">Leverage cross-site scripting to attack vulnerable clients</div>
<div class="card-duration">
<span>174 min </span>
<span>Updated Feb 9, 2024</span>
</div>
<div class="card-footer">
<div class="category-icon client-icon"></div>
<paper-button class="client-bg">Start</paper-button>
</div>
</a>
<a href="/labs/W4.2_cors_csp/index.html?index=..%2F..cs495" on-tap="navigate" class="codelab-card category-client" data-category="client,security,nb04" data-title="4.2: CORS, Content Security Policy" data-duration="72" data-summary="Experiment with headers within HTTP that limit XSS vulnerabilities." data-updated="2023-02-18T17:45:08Z" data-tags="cs495" data-pin="">
<div class="description"><h4>4.2: CORS, Content Security Policy</h4></div>
<div class="description">Experiment with headers within HTTP that limit XSS vulnerabilities.</div>
<div class="card-duration">
<span>72 min </span>
<span>Updated Feb 18, 2023</span>
</div>
<div class="card-footer">
<div class="category-icon client-icon"></div>
<paper-button class="client-bg">Start</paper-button>
</div>
</a>
<a href="/labs/W7.1_cloud_setup/index.html?index=..%2F..cs495" on-tap="navigate" class="codelab-card category-cloud" data-category="cloud,security,nb07" data-title="7.1: Cloud Setup" data-duration="30" data-summary="Setup accounts on a cloud provider for the course." data-updated="2023-02-06T20:53:45Z" data-tags="cs495" data-pin="">
<div class="description"><h4>7.1: Cloud Setup</h4></div>
<div class="description">Setup accounts on a cloud provider for the course.</div>
<div class="card-duration">
<span>30 min </span>
<span>Updated Feb 6, 2023</span>
</div>
<div class="card-footer">
<div class="category-icon cloud-icon"></div>
<paper-button class="cloud-bg">Start</paper-button>
</div>
</a>
<a href="/labs/W7.2_gcp_thunderctf/index.html?index=..%2F..cs495" on-tap="navigate" class="codelab-card category-gcp" data-category="gcp,cloud,security,nb07" data-title="7.2: Thunder CTF" data-duration="371" data-summary="Play attacker and defender roles in the cloud using several vulnerable cloud deployments." data-updated="2023-03-15T01:20:49Z" data-tags="cs495" data-pin="">
<div class="description"><h4>7.2: Thunder CTF</h4></div>
<div class="description">Play attacker and defender roles in the cloud using several vulnerable cloud deployments.</div>
<div class="card-duration">
<span>371 min </span>
<span>Updated Mar 15, 2023</span>
</div>
<div class="card-footer">
<div class="category-icon gcp-icon"></div>
<paper-button class="gcp-bg">Start</paper-button>
</div>
</a>
<a href="/labs/W7.3_gcp_defender/index.html?index=..%2F..cs495" on-tap="navigate" class="codelab-card category-gcp" data-category="gcp,cloud,security,nb07" data-title="7.3: Thunder CTF Defender" data-duration="75" data-summary="Play defender in the cloud using a compromised cloud deployment." data-updated="2023-03-09T04:29:08Z" data-tags="cs495" data-pin="">
<div class="description"><h4>7.3: Thunder CTF Defender</h4></div>
<div class="description">Play defender in the cloud using a compromised cloud deployment.</div>
<div class="card-duration">
<span>75 min </span>
<span>Updated Mar 9, 2023</span>
</div>
<div class="card-footer">
<div class="category-icon gcp-icon"></div>
<paper-button class="gcp-bg">Start</paper-button>
</div>
</a>
<a href="/labs/W3.2_hw2/index.html?index=..%2F..cs495" on-tap="navigate" class="codelab-card category-python" data-category="python,server,security,nb03" data-title="3.2: HW2 (conditional-responses)" data-duration="161" data-summary="Write a program to perform Blind SQL injection using binary search" data-updated="2024-02-08T17:30:37Z" data-tags="cs495" data-pin="">
<div class="description"><h4>3.2: HW2 (conditional-responses)</h4></div>
<div class="description">Write a program to perform Blind SQL injection using binary search</div>
<div class="card-duration">
<span>161 min </span>
<span>Updated Feb 8, 2024</span>
</div>
<div class="card-footer">
<div class="category-icon python-icon"></div>
<paper-button class="python-bg">Start</paper-button>
</div>
</a>
<a href="/labs/W1.2_webprogramming/index.html?index=..%2F..cs495" on-tap="navigate" class="codelab-card category-python" data-category="python,client,security,nb01" data-title="1.2: Web Programming" data-duration="53" data-summary="Use Python to efficiently access a collection of web sites" data-updated="2024-01-09T21:39:48Z" data-tags="cs495" data-pin="">
<div class="description"><h4>1.2: Web Programming</h4></div>
<div class="description">Use Python to efficiently access a collection of web sites</div>
<div class="card-duration">
<span>53 min </span>
<span>Updated Jan 9, 2024</span>
</div>
<div class="card-footer">
<div class="category-icon python-icon"></div>
<paper-button class="python-bg">Start</paper-button>
</div>
</a>
<a href="/labs/W1.4_hw1/index.html?index=..%2F..cs495" on-tap="navigate" class="codelab-card category-python" data-category="python,homework,server,security,nb01" data-title="1.4: HW1 (2fa-broken-logic)" data-duration="147" data-summary="Write a program to brute-force a vulnerable 2FA process" data-updated="2024-01-23T22:13:32Z" data-tags="cs495" data-pin="">
<div class="description"><h4>1.4: HW1 (2fa-broken-logic)</h4></div>
<div class="description">Write a program to brute-force a vulnerable 2FA process</div>
<div class="card-duration">
<span>147 min </span>
<span>Updated Jan 23, 2024</span>
</div>
<div class="card-footer">
<div class="category-icon python-icon"></div>
<paper-button class="python-bg">Start</paper-button>
</div>
</a>
<a href="/labs/W2.3_xxe/index.html?index=..%2F..cs495" on-tap="navigate" class="codelab-card category-server" data-category="server,security,nb02" data-title="2.3: XXE" data-duration="35" data-summary="Leverage XML eXternal Entities to exploit vulnerable web applications" data-updated="2024-01-31T15:09:12Z" data-tags="cs495" data-pin="">
<div class="description"><h4>2.3: XXE</h4></div>
<div class="description">Leverage XML eXternal Entities to exploit vulnerable web applications</div>
<div class="card-duration">
<span>35 min </span>
<span>Updated Jan 31, 2024</span>
</div>
<div class="card-footer">
<div class="category-icon server-icon"></div>
<paper-button class="server-bg">Start</paper-button>
</div>
</a>
<a href="/labs/W2.1_broken_access_control/index.html?index=..%2F..cs495" on-tap="navigate" class="codelab-card category-server" data-category="server,security,nb02" data-title="2.1: Broken Access Control" data-duration="243" data-summary="Leverage access control vulnerabilities to exploit vulnerable web sites" data-updated="2024-01-31T15:05:23Z" data-tags="cs495" data-pin="">
<div class="description"><h4>2.1: Broken Access Control</h4></div>
<div class="description">Leverage access control vulnerabilities to exploit vulnerable web sites</div>
<div class="card-duration">
<span>243 min </span>
<span>Updated Jan 31, 2024</span>
</div>
<div class="card-footer">
<div class="category-icon server-icon"></div>
<paper-button class="server-bg">Start</paper-button>
</div>
</a>
<a href="/labs/W3.1_cmd_sql_injection/index.html?index=..%2F..cs495" on-tap="navigate" class="codelab-card category-server" data-category="server,security,nb03" data-title="3.1: Command and SQL injection" data-duration="55" data-summary="Leverage command and SQL injection to exploit web applications" data-updated="2024-02-05T22:17:16Z" data-tags="cs495" data-pin="">
<div class="description"><h4>3.1: Command and SQL injection</h4></div>
<div class="description">Leverage command and SQL injection to exploit web applications</div>
<div class="card-duration">
<span>55 min </span>
<span>Updated Feb 5, 2024</span>
</div>
<div class="card-footer">
<div class="category-icon server-icon"></div>
<paper-button class="server-bg">Start</paper-button>
</div>
</a>
<a href="/labs/W1.3_broken_authentication/index.html?index=..%2F..cs495" on-tap="navigate" class="codelab-card category-server" data-category="server,security,nb01" data-title="1.3: Broken Authentication" data-duration="70" data-summary="Leverage authentication vulnerabilities to gain unauthorized access to sites." data-updated="2024-01-18T18:25:22Z" data-tags="cs495" data-pin="">
<div class="description"><h4>1.3: Broken Authentication</h4></div>
<div class="description">Leverage authentication vulnerabilities to gain unauthorized access to sites.</div>
<div class="card-duration">
<span>70 min </span>
<span>Updated Jan 18, 2024</span>
</div>
<div class="card-footer">
<div class="category-icon server-icon"></div>
<paper-button class="server-bg">Start</paper-button>
</div>
</a>
<a href="/labs/W2.2_ssrf/index.html?index=..%2F..cs495" on-tap="navigate" class="codelab-card category-server" data-category="server,security,nb02" data-title="2.2: SSRF" data-duration="23" data-summary="Leverage server-side request forgery to exploit vulnerable web applications" data-updated="2024-01-31T15:17:17Z" data-tags="cs495" data-pin="">
<div class="description"><h4>2.2: SSRF</h4></div>
<div class="description">Leverage server-side request forgery to exploit vulnerable web applications</div>
<div class="card-duration">
<span>23 min </span>
<span>Updated Jan 31, 2024</span>
</div>
<div class="card-footer">
<div class="category-icon server-icon"></div>
<paper-button class="server-bg">Start</paper-button>
</div>
</a>
<a href="/labs/W1.1_setup/index.html?index=..%2F..cs495" on-tap="navigate" class="codelab-card category-setup" data-category="setup,security,nb01" data-title="1.1: Setup" data-duration="81" data-summary="Setup the accounts and virtual machines for use in this course." data-updated="2024-01-16T01:06:32Z" data-tags="cs495" data-pin="">
<div class="description"><h4>1.1: Setup</h4></div>
<div class="description">Setup the accounts and virtual machines for use in this course.</div>
<div class="card-duration">
<span>81 min </span>
<span>Updated Jan 16, 2024</span>
</div>
<div class="card-footer">
<div class="category-icon setup-icon"></div>
<paper-button class="setup-bg">Start</paper-button>
</div>
</a>
<a href="/labs/W6.5_exploit2/index.html?index=..%2F..cs495" on-tap="navigate" class="codelab-card category-tools" data-category="tools,security,nb06" data-title="6.5: Exploitation tools (Pt 2)" data-duration="27" data-summary="Exploit a target using Metasploit" data-updated="2023-02-24T15:52:56Z" data-tags="cs495" data-pin="">
<div class="description"><h4>6.5: Exploitation tools (Pt 2)</h4></div>
<div class="description">Exploit a target using Metasploit</div>
<div class="card-duration">
<span>27 min </span>
<span>Updated Feb 24, 2023</span>
</div>
<div class="card-footer">
<div class="category-icon tools-icon"></div>
<paper-button class="tools-bg">Start</paper-button>
</div>
</a>
<a href="/labs/W6.3_discovery2/index.html?index=..%2F..cs495" on-tap="navigate" class="codelab-card category-tools" data-category="tools,security,nb06" data-title="6.3: Discovery tools (Pt 2)" data-duration="42" data-summary="Scan WordPress sites for vulnerabilities automatically with wpscan" data-updated="2023-02-26T00:48:45Z" data-tags="cs495" data-pin="">
<div class="description"><h4>6.3: Discovery tools (Pt 2)</h4></div>
<div class="description">Scan WordPress sites for vulnerabilities automatically with wpscan</div>
<div class="card-duration">
<span>42 min </span>
<span>Updated Feb 26, 2023</span>
</div>
<div class="card-footer">
<div class="category-icon tools-icon"></div>
<paper-button class="tools-bg">Start</paper-button>
</div>
</a>
<a href="/labs/W6.2_discovery1/index.html?index=..%2F..cs495" on-tap="navigate" class="codelab-card category-tools" data-category="tools,security,nb06" data-title="6.2: Discovery tools (Pt 1)" data-duration="39" data-summary="Actively discover potential targets using wfuzz, nmap, bucket-stream, and Google dorking" data-updated="2023-02-26T03:09:45Z" data-tags="cs495" data-pin="">
<div class="description"><h4>6.2: Discovery tools (Pt 1)</h4></div>
<div class="description">Actively discover potential targets using wfuzz, nmap, bucket-stream, and Google dorking</div>
<div class="card-duration">
<span>39 min </span>
<span>Updated Feb 26, 2023</span>
</div>
<div class="card-footer">
<div class="category-icon tools-icon"></div>
<paper-button class="tools-bg">Start</paper-button>
</div>
</a>
<a href="/labs/W6.1_tools_setup/index.html?index=..%2F..cs495" on-tap="navigate" class="codelab-card category-tools" data-category="tools,security,nb06" data-title="6.1: Tools setup" data-duration="55" data-summary="Setup Kali VMs and web servers to practice using tools that automate reconnaissance, scanning, and exploitation." data-updated="2023-03-17T18:28:21Z" data-tags="cs495" data-pin="">
<div class="description"><h4>6.1: Tools setup</h4></div>
<div class="description">Setup Kali VMs and web servers to practice using tools that automate reconnaissance, scanning, and exploitation.</div>
<div class="card-duration">
<span>55 min </span>
<span>Updated Mar 17, 2023</span>
</div>
<div class="card-footer">
<div class="category-icon tools-icon"></div>
<paper-button class="tools-bg">Start</paper-button>
</div>
</a>
<a href="/labs/W6.4_exploit1/index.html?index=..%2F..cs495" on-tap="navigate" class="codelab-card category-tools" data-category="tools,security,nb06" data-title="6.4: Exploitation tools (Pt 1)" data-duration="25" data-summary="Exploit targets using hydra, sqlmap, xsstrike, commix" data-updated="2023-02-28T05:09:16Z" data-tags="cs495" data-pin="">
<div class="description"><h4>6.4: Exploitation tools (Pt 1)</h4></div>
<div class="description">Exploit targets using hydra, sqlmap, xsstrike, commix</div>
<div class="card-duration">
<span>25 min </span>
<span>Updated Feb 28, 2023</span>
</div>
<div class="card-footer">
<div class="category-icon tools-icon"></div>
<paper-button class="tools-bg">Start</paper-button>
</div>
</a>
</card-sorter>
<div id="loading-placeholder" class="site-width">
Loading Codelabs, please wait...
</div>
</main>
</paper-header-panel>
<script src="/scripts/main.js"></script>
</body>
</html>