Discover Top Posts Tagged with #lab 2

Popular Recent

did you have a coherent picture in your head when you read about the bone monsters, the one in the laboratory and the one that killed everyone? I was struggling tbh

my idea for the bone monster is like what if a T rex was quadruped with accessory bone-sword arms that didn't touch the ground and also a massive and very long prehensile tail and face spikes.

big thank you to Sue the Trex for being my bad photoshop model!!!!

also i couldn't resist making this meme:

#I have seen a variety of different depictions of it and I have loved every one of them though!!#there are many ways to envision the Bone Beast #bone construct #lab 2 #gideon the ninth #im here to play with jpgs like dolls honestly #winnowing/response #x #just made this guy my new header image btw <3 i love him actually #my son #this actually took like. 2 hours..#also just realized i forgot to discuss the one that killed everyone #i imagined bone tenacles like that jo-anns halloween octopus but with a t rex head

Lab #2: Introduction to HTML

HTML is a format that tells a computer how to display a web page. The documents themselves are plain text files with special "tags" or codes that a web browser uses to interpret and display information on your computer screen. HTML stands for HyperText Markup Language. An HTML file is a text file containing small markup tags. The markup tags tell the Web browser how to display the page. An HTML file must have an htm or html file extension.

Example of HTML codes:

<html>

<head>

<title> My first Webpage. </title>

<\head>

<body>

This is my first homepage. <b>This text is bold </b>

</body>

</html>

Result:

Questions:

1. Explain the HTML code above.

The code starts with <html> and ends with </html>.

The tag <head> contains the information of the code such as the title of the webpage, the code for the appearance of the webpage which is the CSS, the font you want to use in the webpage, and so on. This information is not visible to the users. It ends with </head>.

<title> tag is for the name of the webpage which in this case is My first Webpage. It ends with </title>.

Next is the <body> tag. Users can see the output from code in <head> tag and information in this tag. In this text, the information displayed is “This is my first homepage. This text is bold”.

As we can see, the sentence “This text is bold” is in bold. This is due to tag <b> which is used in bold words. The tag ends with </b> or else, the whole following text would be in bold.

It is important to end the tag with backslash “\” in front of the name of the tag (<\tagname>). Without this, the html will not work perfectly.

2. Why the use of HTM or HTML Extension?

HTM and HTML extensions are the same HTM files. The difference between them is that HTM is used as an alternative to .HTML for a few operating systems and servers which cannot support four-letter extensions. Nevertheless, in today’s architecture, operating systems can accept long file names and four-letter file extensions.

3. How to View HTML Source?

HTML source code of a page can be viewed by clicking CTRL + U. If you want to see only certain element or codes, you can right-click and click on inspect element.

#lab 2 #introduction to html

Advanced Static Analysis #2

The second part of the Lab from Chapter 5

8. What is happening at the area of the code that references \cmd.exe /c?

The second level from the top contains the cmd.exe string. The second level determines whether to use cmd.exe or command.exe. I’m not sure why that matters. The green CommandLine is a variable within the stackframe. EBP seems to point to the end of the stack frame.

The recv call in pink stands out and seems to be opening up a socket. Perhaps the malware is trying to start an internet connection to the practical malware URL?

9. In the same area at 0x100101C8, it looks like dword_1008E5C4 is a global variable that decides which path to take how does the malware set dword_10008E5C4?

Look into DATA XREF reveals it takes a OS version information return value from a subroutine.

10. A few hundred lines into the subroutine at 0x1000FF58. A series of comparions use memcmp to compare strings. What happens if the string comparison to robotwork is successful?

Memcmp compares characters in two buffers. Returns 0 if they are identical. Finally found the comparison to robotwork:

We get extended information about the operating system. The program then calls RegOpenKeyA. We query about the work time. Create a string with atoi and sprintf containing the information we queried. Then finally close the key,

11. What does export PSLIST do?

With a simple navigation to PSLIST through the export window. We determine that it takes in 3 ints and a char. It calls a subroutine to check OS version. It will then send over processes that matches the string passed.

12. Use the graph mode to graph the cross-reference from sub_100004E79. Which API function could be called by entering tis function?

Based on the functions that it calls and the knowledge we know of this malware we can say it sends a message.

13. How many API functions does Dllmain call directly?

Dllmain calls stnicmp, strlen and CreateThread directly.

14. At 0x10001358, there is a call to Sleep (an API function that takes one parameter contained the number of millisecond to sleep). How long would it take before the program executes?

You can change hexadecimal to decimal by pressing the values and pressing H! That’s handy! We add 13 onto the address so it points to 30 then we multiply by 1000 to get 30,0000 milliseconds which is 30 seconds.

Reflections

I missed a crucial part of the work times analysis. The registry is opened and the query gains the information. Afterwards, the information is sent over the internet!

I missed a subroutine between the query and close. The subroutine opens a socket and sends data! I learnt a great deal from the practical exercises. However, It was extremely time consuming crawling through the functions. I’ll definitely look more into reverse engineering once the course is over!

#something aweosme #IDA #lab 2

Lab 2 Houdini vs Margery

It’s frightening what people used to believe in. To think, there was a time, that a movement like Spiritualism could have millions of followers in America!

The situation

Houdini has set out to disprove the mystics once and for all. He correctly assumed that after his death the mediums would claim that they could communicate with his spirit. Further advancing their course and twisting Houdini’s words.

Houdini decided the only way that was to create a code with his wife. That way the mediums couldn’t make false claims without his wife verifying that that it was from Houdini.

The solution must be able to differentiate between a real and fake medium.

Our solution

The solution that my group decided on was the idea of using timestamps between conversations. This will prevent a replay attack. This method was similar to the idea of a challenge response. The issue is the challenge must involve each time.

The code must have some qualities sin order to be successful. It must be repeatable and it must be there has to be a way to authenticate the message that was sent.

We were then introduced to the idea of an asymmetric cryptosystem! I’ll make a separate blog to go into depth about RSA and how the system works.

#lab 2 #houdini

Lab Assignment 1 (Jan 6th)

Title of Game: 7 UP 7 D0WN

Group members: Denisa Patron Vivien Hung, Aubrey Garcia

Rules of game:

The goal of 7 UP 7 DOWN is to get rid of all the cards in your deck. (Point A: Having a full deck. Point B: No longer holding any cards)

Each person receives 7 cards from the deck

Each turn, someone must roll the die to see if the turn will be determined by odd or even. Odd means only odd card numbers must be played, and an even card means only even numbers must be played. If the die lands on an even number (2, 4, 6), the play of the game is even. If odd (1, 3, 6), the play of the game is odd. In this game, Jack is 13, Queen is 14, King is 15 and Ace is 1.

Each player places ONE card face down, at the same time. Once everyone has placed down their card, they will reveal at the same time.

Whoever played the highest odd/even card can drop an extra card (to get rid of more cards in hand). If cards of the same number are played, then the card with the higher suit wins (diamonds < clubs < hearts < spades).

Whoever plays the lowest card must pick up a card from the deck.

Repeat from step 2 until someone has no more cards. The one with no more cards is the winner.

When prototyping our game, we encountered many problems. We found ways to fix them to make the game more enjoyable.

Bugs in initial prototype:

Rolling to decide the order of play did NOT work, everyone got confused.

Number of cards given was too many (Originally the number was 12)

People who weren’t able to play a card (due to not having an even card when it was odd card play) didn’t know what to do

Seeing what other people played changed the competition aspect of the game

Patches for latest prototype:

No more deciding who goes first, everyone plays their card face down then reveals their card at the same time.

Lowered card amount to 7

Added rule of loser picking up a card.

Playtesting Other Games:

The game I play-tested did not have a name when we first played it, but the rules were simple and pretty fun. I enjoyed their game a lot, the rules of the game felt very new and original to me.

What I recall from the game was that you start off with 0 cards, and the goal is to have 5 cards in your hand. The rules were very simple, you first must draw a card. Then you could either skip your turn, or play a card. There is a hierarchy to the game, and if you play a high card, other player must put down a card that is lower than the card played. For example, if you play a Jack, everyone must place a card lower than that down (From 10->Ace). So it’s best when you are able to get high cards. The game was confusing at first because we, the players, were confused as to how drawing/skipping a turn worked, and if it was by round. Did we all pick up a card at the same time, then sequentially place down/skip our turn?

We needed quite of a bit of clarification with the rules, but once things were cleared up, the game was very enjoyable, although it did end pretty quickly because the goal is to get only 5 cards. Other players did not notice someone had more than three cards, and everyone is trying to hoard as many cards as they can rather than play cards, which lead to the quick win. When we discussed this with the group who created the game, they said during their playthrough, they almost went through the whole deck of cards before someone won. They said it really just depends on you, the player, being aware of how many cards is in each persons hand. I really enjoyed the game, I do wish I got to play with it a little bit longer so I could have a better grasp of it. We were still able to give some feedback on clarifying the rules of the game.

#lab 2 #denisa patron #assignment 1

Lab 2, Part 2 --- February 10, 2016

1. Le miel --- honey 2. Le fromage --- cheese 3. Le lait --- milk 4. Le pain --- bread 5. Le beurre --- butter 6. Les oeufs --- eggs 7. Le confiture --- jam 8. Le thé --- tea 9. Le yaourt --- yogurt 10. Les fruits --- fruits

#french 2 #lab 2 #part 2

Lab 2, Part 1 --- February 10, 2016

1. La petit dejeuner classique est un café avec au lait et sucre, et tartine avec beurre et marmalade. 2. La petit dejeuner à l’américaine est un verre de jus d’orange, yaourt avec cereal, et cafe ou thé. 3. Émilie mange yaourt nature et des fruits parce que elle fait attention aux calories. 4. Pour boisson, Thomas préfère le chocolate chaud. 5. Non, Raphael ne mange pas oeufs.

Questions (answered above):

1. Qu’est qu’on mange si on a un petit déjeuner “classique”? 2. Qu’est-ce que c’est qu’un petit déjeuner << à l’américaine >> 3. Qu’est-ce qu’Émilie mange et pourqui? 4. Pour boisson, qu’est-ce que Thomas préfère 5. Raphael aime-t-il manger des ceufs le matin?

#french 2 #lab 2 #part 1

Audio Lab 2

2 le formage

4 le pain

5 le beurre

6 le œufs

7 la thé

10 les fruits

#Lab 2 #Audio Lab