fb
$20 Bonus + 25% OFF
$20 Bonus + 25% OFF
Securing Higher Grades Costing Your Pocket? Book Your Assignment at The Lowest Price Now!
loader
Add File

Error goes here

Files Missing!

Please upload all relevant files for quick & complete assistance.

Stuck on Your Question?

Get 24x7 live help from our Top Tutors. All subjects covered.

loader
250 words

Error goes here

Files Missing!

Please upload all relevant files for quick & complete assistance.

Students Who Viewed This Also Studied

17 Pages
CIS2360 – Relational Database and Web Integration

Part 1 - Database Design (20%)From the problem statement below you should create a Logical design for the proposed database.Films are rented out in shops and there are several shops. Each shop has a n ...

Type

Programming

Subject

Webpage Design

41 Pages
KF7012 Implementing Object Orientated Design

Question: Learning Outcomes tested in this assessment (from the Module Descriptor): Knowledge & Understanding: 1.Demonstrate in-depth knowledge and understanding of current best practice in t ...

Course

KF7012

Type

Programming

Subject

Webpage Design

University

University of Northampton

29 Pages
COS30020 Web Application Development

Task 1 – Home Page This web page contains: Your name Your student SIMS number Your email address A statement: “I declare that this assignment is my individual work. I have not ...

Course

COS30020

Type

Programming

Subject

Webpage Design

University

Swinburne University of Technology

2 Pages
Management

You are required to write a critical commentary about your website design and development, testing and deployment techniques.Having created your website project, you should write an evaluative comment ...

Type

Assignment

Subject

Webpage Design

ISEC4001 Extended Cyber Crime and Security Enhanced Programming

Question

Answered

Your task is to produce a simple online shop web application that will allow users to buy and sell items (similar to gumtree). The application will involve a simple LAMP based stack which is one of the popular options for PHP based applications. Your website has to both be functional but also contain exploitable vulnerabilities which you must document and demonstrate how to successfully exploit.

There is no set theme regarding your web application, merely that it does what is re- quired. As such you are free to give your application its own name, logo etc. Just have some fun with it!

System Specifications

For this assignment you will be provided with a virtual machine that will already have a LAMP stack setup and ready for you. LAMP is a software stack commonly used for web applications that employ a PHP back-end. LAMP is defined as the following:

L: Linux

A: Apache Web Server M: MYSQL Database P: PHP

As third year students you should be strong enough programmers that learning a new language shouldnt be to much of an obstacle.

The application needs to allow the following features:

1 Create accounts

2 Additions of funds for users 3 Search for items by name

3 Search for items by name

 

4 Search for items by seller 5  Put item up for purchase

6 Purchase items using funds 7  Disable/lock regular users 8 Remove items up for sale

The application needs to support the following two types of users: 1 Regular user

2 Administrator user

Regular users need to be able to only perform operations 1-6 and administrators need to be able to perform all operations.

Users and items information will be stored in the database and must be edited when operations are done on the website. Your application should not be performing real money transactions. Instead just emulate such transactions with virtual funds. When an item is purchased, the funds are to be transferred from the buyer to the seller.

Virtual Machine

As noted above, you will be provided a virtual machine already configured for you to host the website on. The machine has the following version details

Linux Ubuntu Server 18.04 Apache 2.4.29

MySQL 14.14

PHP 7.2.19

The machine has been configured with a static IP address of 192.168.56.150 for a host only adapter. This can be changed by editing the configuration file in /etc/netplan/ to have a different address.

Credentials = student:CCSEP2019 (this is for everything)

The VM has also been setup to run a samba server that you can use to access the files from your main device, and also allows remote connection to the mysql database (i suggest using a tool such as MySQL Workbench).

Some extra resources has already been included in the VM for making the website easier to create if you wish to use them. These are:

bootstrap – A set of pre-made styling rules that make things look nice jquery – Makes basic javascript stuff easier

fontawesome – For a collection of glyphs (They’re pretty sweet) webfonts – a folder that fontawesome uses.

Required Exploits

While your web application needs to be perform the tasks noted above, it also needs to have vulnerabilities built into it. Note that these vulnerabilities must be apart of your functional implementation and as such a feature that is purely designed to be bad will not be counted as valid. ie. a button that runs ”DROP TABLES”

You are required to have at least 1 vulnerability in the following categories:

  • XSS - Reflected
  • XSS - Stored
  • SQL Injection
  • SQL Injection - Blind
  • Broken Access Control
  • Broken Cryptographic Algorithm
  • PHP File Include

Choose 2 more vulnerabilities from the following list to implement.

  • Server Misconfiguration
  • Unrestricted File Upload
  • Use of hard-coded passwords

ISEC4001 Extended Cyber Crime and Security Enhanced Programming

Answer in Detail

Solved by qualified expert

Get Access to This Answer

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Hac habitasse platea dictumst vestibulum rhoncus est pellentesque. Amet dictum sit amet justo donec enim diam vulputate ut. Neque convallis a cras semper auctor neque vitae. Elit at imperdiet dui accumsan. Nisl condimentum id venenatis a condimentum vitae sapien pellentesque. Imperdiet massa tincidunt nunc pulvinar sapien et ligula. Malesuada fames ac turpis egestas maecenas pharetra convallis posuere. Et ultrices neque ornare aenean euismod. Suscipit tellus mauris a diam maecenas sed enim. Potenti nullam ac tortor vitae purus faucibus ornare. Morbi tristique senectus et netus et malesuada. Morbi tristique senectus et netus et malesuada. Tellus pellentesque eu tincidunt tortor aliquam. Sit amet purus gravida quis blandit. Nec feugiat in fermentum posuere urna. Vel orci porta non pulvinar neque laoreet suspendisse interdum. Ultricies tristique nulla aliquet enim tortor at auctor urna. Orci sagittis eu volutpat odio facilisis mauris sit amet.

Tellus molestie nunc non blandit massa enim nec dui. Tellus molestie nunc non blandit massa enim nec dui. Ac tortor vitae purus faucibus ornare suspendisse sed nisi. Pharetra et ultrices neque ornare aenean euismod. Pretium viverra suspendisse potenti nullam ac tortor vitae. Morbi quis commodo odio aenean sed. At consectetur lorem donec massa sapien faucibus et. Nisi quis eleifend quam adipiscing vitae proin sagittis nisl rhoncus. Duis at tellus at urna condimentum mattis pellentesque. Vivamus at augue eget arcu dictum varius duis at. Justo donec enim diam vulputate ut. Blandit libero volutpat sed cras ornare arcu. Ac felis donec et odio pellentesque diam volutpat commodo. Convallis a cras semper auctor neque. Tempus iaculis urna id volutpat lacus. Tortor consequat id porta nibh.

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Hac habitasse platea dictumst vestibulum rhoncus est pellentesque. Amet dictum sit amet justo donec enim diam vulputate ut. Neque convallis a cras semper auctor neque vitae. Elit at imperdiet dui accumsan. Nisl condimentum id venenatis a condimentum vitae sapien pellentesque. Imperdiet massa tincidunt nunc pulvinar sapien et ligula. Malesuada fames ac turpis egestas maecenas pharetra convallis posuere. Et ultrices neque ornare aenean euismod. Suscipit tellus mauris a diam maecenas sed enim. Potenti nullam ac tortor vitae purus faucibus ornare. Morbi tristique senectus et netus et malesuada. Morbi tristique senectus et netus et malesuada. Tellus pellentesque eu tincidunt tortor aliquam. Sit amet purus gravida quis blandit. Nec feugiat in fermentum posuere urna. Vel orci porta non pulvinar neque laoreet suspendisse interdum. Ultricies tristique nulla aliquet enim tortor at auctor urna. Orci sagittis eu volutpat odio facilisis mauris sit amet.

Tellus molestie nunc non blandit massa enim nec dui. Tellus molestie nunc non blandit massa enim nec dui. Ac tortor vitae purus faucibus ornare suspendisse sed nisi. Pharetra et ultrices neque ornare aenean euismod. Pretium viverra suspendisse potenti nullam ac tortor vitae. Morbi quis commodo odio aenean sed. At consectetur lorem donec massa sapien faucibus et. Nisi quis eleifend quam adipiscing vitae proin sagittis nisl rhoncus. Duis at tellus at urna condimentum mattis pellentesque. Vivamus at augue eget arcu dictum varius duis at. Justo donec enim diam vulputate ut. Blandit libero volutpat sed cras ornare arcu. Ac felis donec et odio pellentesque diam volutpat commodo. Convallis a cras semper auctor neque. Tempus iaculis urna id volutpat lacus. Tortor consequat id porta nibh.

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Hac habitasse platea dictumst vestibulum rhoncus est pellentesque. Amet dictum sit amet justo donec enim diam vulputate ut. Neque convallis a cras semper auctor neque vitae. Elit at imperdiet dui accumsan. Nisl condimentum id venenatis a condimentum vitae sapien pellentesque. Imperdiet massa tincidunt nunc pulvinar sapien et ligula. Malesuada fames ac turpis egestas maecenas pharetra convallis posuere. Et ultrices neque ornare aenean euismod. Suscipit tellus mauris a diam maecenas sed enim. Potenti nullam ac tortor vitae purus faucibus ornare. Morbi tristique senectus et netus et malesuada. Morbi tristique senectus et netus et malesuada. Tellus pellentesque eu tincidunt tortor aliquam. Sit amet purus gravida quis blandit. Nec feugiat in fermentum posuere urna. Vel orci porta non pulvinar neque laoreet suspendisse interdum. Ultricies tristique nulla aliquet enim tortor at auctor urna. Orci sagittis eu volutpat odio facilisis mauris sit amet.

Tellus molestie nunc non blandit massa enim nec dui. Tellus molestie nunc non blandit massa enim nec dui. Ac tortor vitae purus faucibus ornare suspendisse sed nisi. Pharetra et ultrices neque ornare aenean euismod. Pretium viverra suspendisse potenti nullam ac tortor vitae. Morbi quis commodo odio aenean sed. At consectetur lorem donec massa sapien faucibus et. Nisi quis eleifend quam adipiscing vitae proin sagittis nisl rhoncus. Duis at tellus at urna condimentum mattis pellentesque. Vivamus at augue eget arcu dictum varius duis at. Justo donec enim diam vulputate ut. Blandit libero volutpat sed cras ornare arcu. Ac felis donec et odio pellentesque diam volutpat commodo. Convallis a cras semper auctor neque. Tempus iaculis urna id volutpat lacus. Tortor consequat id porta nibh.

19 More Pages to Come in This Document. Get access to the complete answer.

MyAssignmenthelp.com is diligent to fulfil students needs in the best possible manner by providing both thesis writing services and thesis editing services. We boast separate teams of thesis writing experts and editors who handle the students requests like can anyone do editing of my thesis online or can someone write my thesis online. Thus, we have gained the status of being the most efficient and reliable thesis help provider company in USA.

More ISEC4001 ISEC4001 Extended Cyber Crime and Security Enhanced Programming: Questions & Answers

Q

CIS2360 – Relational Database and Web Integration

Part 1 - Database Design (20%)From the problem statement below you should create a Logical design for the proposed database.Films are rented out in shops and there are several shops. Each shop has a name, an address, and a phone number. For each employee we must keep the following information: the s ...

View Answer
Q
icon

We aren't endorsed by this University

KF7012 Implementing Object Orientated Design

Question: Learning Outcomes tested in this assessment (from the Module Descriptor): Knowledge & Understanding: 1.Demonstrate in-depth knowledge and understanding of current best practice in the design and development of Object Orientated systems Intellectual / Professional skills & abi ...

View Answer
Q
icon

We aren't endorsed by this University

COS30020 Web Application Development

Task 1 – Home Page This web page contains: Your name Your student SIMS number Your email address A statement: “I declare that this assignment is my individual work. I have not workedcollaboratively nor have I copied from any other student’s work or from any other sourc ...

View Answer
Q

Management

You are required to write a critical commentary about your website design and development, testing and deployment techniques.Having created your website project, you should write an evaluative commentary (1000 words) on your project. Your commentary should critically explore the work you have done t ...

View Answer

Content Removal Request

If you are the original writer of this content and no longer wish to have your work published on Myassignmenthelp.com then please raise the content removal request.

Choose Our Best Expert to Help You

expert
student rating student rating student rating student rating student rating
Sara Haney

Ph.D in Economics from the Bloomsburg University of Pennsylvania

950 - Completed Orders

Hire Me
expert
student rating student rating student rating student rating student rating
Amrin Fong

Pursuing PhD in Marketing with Specialization in E-Commerce

2789 - Completed Orders

Hire Me
expert
student rating student rating student rating student rating student rating
Roger Camden

MSc in Civil Engineering

1330 - Completed Orders

Hire Me
expert
student rating student rating student rating student rating student rating
Bacon Low

I have received my Master's degree in English literature from the University of Strathclyde.

500 - Completed Orders

Hire Me

Still in Two Minds? The Proof is in Numbers!

33845 Genuine Reviews With a Rating of 4.9/5.

student rating student rating student rating student rating student rating
21 Jan 2022

Maths

Home Work: 0 Pages, Deadline: 4 days

Great work it was clear and concise and on time, representative was supportive with all my needs.

flag User ID: 4***77 United States

student rating student rating student rating student rating student rating
21 Jan 2022

Statistics

Home Work: 1 Page, Deadline: 3 days

It was so perfect except for the late start and responsiveness.And I got the correct answer through a new program, but it was too sudden in a situatio ...

flag User ID: 8***13 Seongnam-si, Greece

student rating student rating student rating student rating student rating
21 Jan 2022

Management

Essay: 1 Page, Deadline: 17 hours

thank you for sending me my assignment at time. great staff and good customer service

flag User ID: 7***52 Seongnam-si, Canada

student rating student rating student rating student rating student rating
20 Jan 2022

Healthcare

Essay: 6 Pages, Deadline: 14 days

Order delivered on time great customer service great communication very helpful and fast response. Great results.

flag User ID: 5***06 United Kingdom, Great Britain

student rating student rating student rating student rating student rating
20 Jan 2022

Management

Assignment: 10 Pages, Deadline: 2 days

good work, expert very helpful great communication. had great results with this work. thank you.

flag User ID: 5***06 United Kingdom, Great Britain

student rating student rating student rating student rating student rating
20 Jan 2022

Assignment

Essay: 1.7 Pages, Deadline: 18 hours

Thank you for your prompt reply and response to my inquiry. I think it will work for me.

flag User ID: 8***83 United Kingdom, United States

student rating student rating student rating student rating student rating
20 Jan 2022

Supply Chain

Home Work: 1.4 Pages, Deadline: 3 days

Well organized and information is up to the mark. I\'ll definitely share this platform with my frds also for assignment help

flag User ID: 8***02 United Kingdom, Canada

student rating student rating student rating student rating student rating
20 Jan 2022

Marketing

Assignment: 4 Pages, Deadline: 2 days

Good work, one of the tutor did my assignment wrong and the admin assign a new tutor and did the assignment again with priority and for free

flag User ID: 4***30 United Kingdom, Australia

student rating student rating student rating student rating student rating
20 Jan 2022

Geography

Essay: 2 Pages, Deadline: 8 days

thanks its good poster i still did not get the poster i hope to get the poster

flag User ID: 2***0 United Kingdom, Saudi Arabia

student rating student rating student rating student rating student rating
20 Jan 2022

It Write Up

Assignment: 3 Pages, Deadline: 23 hours

good service, with nice APA style and fast respone chat. The writing is completed before time

flag User ID: 6***06 Bien Hoa, Vietnam

student rating student rating student rating student rating student rating
20 Jan 2022

Healthcare

Assignment: 1 Page, Deadline: 4 days

won\'t be graded till I hand in the rest of the work this was just a segment of my assignment I need help with and am very plesased with the outcome

flag User ID: 8***83 United Kingdom, Great Britain

student rating student rating student rating student rating student rating
20 Jan 2022

Psychology

Assignment: 3.2 Pages, Deadline: 7 days

I like the work because you guys completed the work within the time limit even if it has lot of reading.

flag User ID: 8***70 Surrey, Canada

student rating student rating student rating student rating student rating
20 Jan 2022

Psychology

Assignment: 4 Pages, Deadline: 6 days

I like to give you my assignment due to good quality of work and you follow the all instruction .

flag User ID: 8***70 Surrey, Canada

student rating student rating student rating student rating student rating
20 Jan 2022

English

Essay: 2 Pages, Deadline: 10 days

It was good enough to pass the course. I like the way of your work. I want to give more work to you guys.

flag User ID: 8***70 Surrey, Canada

student rating student rating student rating student rating student rating
20 Jan 2022

English

Essay: 3.2 Pages, Deadline: 4 days

This is good content that you have provided in the assignment thank you for your valuable help.

flag User ID: 8***70 Surrey, Canada

student rating student rating student rating student rating student rating
20 Jan 2022

English

Essay: 2.6 Pages, Deadline: 2 days

I like the work due to accuracy and timely manner. I pass the course due to your help

flag User ID: 8***70 Surrey, Canada

student rating student rating student rating student rating student rating
20 Jan 2022

Nursing

Case Study: 3 Pages, Deadline: 3 days

Requested in short time frame. Assignment was completed within less than 2 days. Made a 90!

flag User ID: 8***49 Surrey, United States

student rating student rating student rating student rating student rating
19 Jan 2022

It Write Up

Assignment: 6 Pages, Deadline: 7 days

good timing , all requirements included , formatting as asked , quick responding .

flag User ID: 3***51 Muscat, Oman

student rating student rating student rating student rating student rating
19 Jan 2022

Physics

Home Work: 4 Pages, Deadline: 11 days

Excellent customer service! Really helpful!! Wanted assignment done in 8days and they managed to complete it within 1 day! And was a excellent standar ...

flag User ID: 8***25 United Kingdom, Great Britain

student rating student rating student rating student rating student rating
19 Jan 2022

Statistics

Programming: 12 Pages, Deadline: 19 days

I passed sucessfully thank you very much for your helpI really appreciate it...Continue doing your good work

flag User ID: 5***27 United Kingdom, Great Britain

5% Cashback

On APP - grab it while it lasts!

Download app now (or) Scan the QR code

*Offer eligible for first 3 orders ordered through app!

screener
ribbon
callback request mobile
Have any Query?