Fluent Essays

Urgent needed within a few hours MAX 10 HOURSINM443 Cryptography MSc in Cyber Security MSci in Computer Science with Cyber Security Resit Coursework Ethical Hacking Description Access the Cyber Security laboratory by following the instructions in the coursework manual file and act as an ethical hacker for a company. Note that an ethical hacker is an expert who attacks a security system on behalf of its owners, seeking vulnerabilities that a malicious hacker could exploit. You are challenged to identify flaws in a potential SQL database server by breaking its crypto components and retrieve an encrypted credit card secret code of an e- commerce company. The crypto algorithm used to encrypt the credit card secret code is the RSA, but with weak security parameters. More information on the scenario and the detail steps you need to follow consult the Coursework Manual file found in MOODLE. Output/Report Structure It is expected to document in detail your methodology and work plan to achieve your goals. Your submitted report should have the following structure and include the following information: 1. Network discovery In this section identify the system (e.g., IP addresses of the devices that exist in the network, services running, OS software installed etc.) you will attack. Create a map of the network in a diagram form with your findings. [10 marks] 2. Breaking the system (2000-3000 words) In this section discuss your attacking methodology. For example, a) Perform a dictionary attack in the admin password to gain access to the SSH server. Justify your answer. Clever solutions will earn full marks (e.g., in real- life environment your dictionary password/username files are very large.) [20 marks] b) Cryptanalyze (by hand only) the encrypted email to gain useful information. Provide details. Clever solutions will earn full marks (e.g., let’s assume you don’t have access to online resources.). Justify your answers. [20 marks] c) Brute force the admin account in the SQL server to access your database folder. Clever solutions will earn full marks (e.g., assume the database is huge). [20 marks] d) Retrieve the credit card secret code from the accessed folder and calculate the decryption RSA key (i.e., private key d). You will need the RSA encryption key (i.e., public key e) and you can calculate it using Shamir’s secret sharing scheme (more details are found in the Coursework Manual). [20 marks] e) Decrypt credit card’s secret code using the SageMath tool. Clever solutions will earn full marks (e.g., discuss in the report how would you decrypt the code if you didn’t had access to RSA tools). [10 marks] Justify your answers: In order to justify your finding in the coursework report take screenshots from your steps. 3. Concluding Remarks Conclude your work and describe what you have achieved. Grading Criteria Your maShared Coursework in Cyber Security Instructions Manual CybSec is an e-commerce company who sells products online. To support online payments, CybSec has designed a network infrastructure illustrated in Figure 1. This infrastructure includes an OuterFirewall, which controls incoming/outgoing traffic, a DeMilitarized Zone (DMZ), where services are running, an InnerFirewall, which controls incoming/outgoing traffic within the internal network of the company. Figure 1. Network Infrastructure of CybSec Company In DMZ, several services run (SQL, Mail, Web etc.). Customers are accessing the Web service to search for a product to buy. Upon decision, they enter personal information (name, home address and card number) to buy products. Personal information is stored in an SQL database. Goal: Retrieve the credit card secret codes / owners’ names from the SQL database. Assumptions: You are an investigator/ethical hacker and your operating system (OS) is Kali Linux. What to do: Follow the steps provided to achieve your goals. Appendixes contain information for Linux and penetration testing commands that you can use to achieve your goal. How to access Investigators’s machine: • Use VPN to access City’s network (https://securevpn.city.ac.uk/?src=connect you need to sign into the page using your city credentials. • Once connected with the VPN, download and install VMware Horizon View Client which is found here: (https://nsq968ap.enterprise.internal.city.ac.uk/) • Click on add server • In a text box, enter ‘cybersecvdi.city.ac.uk’ and click on connect • Enter your City’/s credentials (for username make sure to use the format: ‘enterprise\yourusername, e.g. enterprise\absc853). If you don’t enter enterprise\ before username authentication against your account won’t work • Double click win10-pool to load your Windows 10 environment. • Double click the Investigator icon and connect to Kali Linux operating system. • Login to Kali Linux OS • You are now in the Investigator’s machine. This is your environment to perform attacks. Attacking the system by finding SSH admin’s credentials: 1) Use Linux Terminal (similar to CMD in Win) to enter penetration testing commands. 2) Investigate which network your Linux host belongs to (“Ifconfig”). 3) Discover your network and services running (“nmap”). 4) To access the discovered services found in DMZ, you will need to “guess” admin’s password. Check if you can perform dictionary attack on the SSH service and grant access (“hydra”). Dictionary files are located at “/root/users.txt” for username and “/root/pass.txt” for passwords. 5) Establish remote connection to the DMZ server using SSH and the credentials found in step 4. Attacking the system by finding admin’s credentials in the SQL service: 6) After remote login to the DMZ server explore the folders to find anything useful to attack to the SQ