Lab 5: Attack

Introduction

In this lab, you will be attacking programs by causing buffer overflows! In particular, you'll be making code-injection (CI) attacks (on a provided ctarget executable) and return-oriented-programming (ROP) attacks (on a provided rtarget program). Different phases of the assignment will focus on attacking particular functions in the code.

Getting Started

Get your team's target

Similar to the Bomb lab, each team will have their own targets to use. You'll again be downloading your custom target using links. To obtain your team's target, one (and only one) of the team members should follow these steps:

1. Connect to wilkes using ssh
2. Create a directory for your lab files and enter that directory with these commands:

   mkdir -p ~/cs105/lab5-attack
   cd ~/cs105/lab5-attack
   

3. Enter the command links http://wilkes:15513
4. Follow the prompts to download your target, and hit the 'q' key to exit links when you're done

(If you want more of a step-by-step guide to using links, refer back to the bomb lab page).

Lab Instructions Handout

Now you are ready to follow the instructions in the handout for this lab.

Due Date and Submission

Due: Friday November 13th, 1:15pm.

You can keep track of how you are doing by looking at the class scoreboard.

There is no explicit hand-in. However, please save your solutions for each phase just in case. Your targets will notify us automatically about your progress as you work on it.