CSCI 7000 - Ethical Hacking - Fall 2013

Homework #1

Due: Sep 30th, 2013 at 11am



For all homework submissions, you must show your method as well as your solution. A one-sentence answer, even if correct, is unlikely to earn many points.

1. What are the kernel versions and distros (plus versions) of BT5R3, elra*, and moxie? (Tell me how you found out!)

2. Use ssh to open a port on moxie that serves a shell on bt. Connect to the port on moxie from another machine and show that you can log in to bt. Explain what you had to do to accomplish this.

3. Try the same steps from problem 2, but from one of the elras. Figure out why it doesn't work and tell me.

4. Debug this problem:

moxie$ /bin/nc.openbsd -l localhost 8888
elra-02$ nc moxie 8888
Why does the OpenBSD netcat not work with the version on the elras?

5. Write a program that reads 4 unsigned ints sent in host byte order from hitchens.cs.colorado.edu port 1234 adds them up, and sends them back to that port. (This is a little-endian machine. Recall that "network order" is big-endian.)
When you successfully accomplish this task, you will get a username and password as output. Write these down and save them somewhere safe. You will possibly need them later.
Also, you turn these in as the answer to this problem.
If the service goes down (ie, you cannot connect to port 1234) let me know so I can restart it.

6. Find a Sayler 6-Collision in md5. A "Sayler 6-Collision" is a pair of distinct inputs whos md5sum matches in the first 6 and last 6 printed characters. For example this is a Two-Ended Collision.

$ md5sum file1
d41d8ce1987fbb152380234511f8427e  file1
$ md5sum file2
d41d8cd98f00b204e9800998ecf8427e  file2
Do not run your search code on moxie. Use your own computer or a lab computer. Turn in your code with your solution.

Extra Credit: Find a Sayler 10-collision; that is, two inputs that match in the first 10 and last 10 printed characters. You will probably have to be a lot more clever here. (http://people.scs.carleton.ca/~paulv/papers/JoC97.pdf could help. My solution using their technique takes 200 core-hours to complete.)