![Page 1: Project 2 Section - crypto.stanford.edu · • Download VM • VirtualBox: In Preferences->Network->Host-only Networks, add a new network (vboxnet0) if it doesn’t exist • Start](https://reader035.vdocuments.site/reader035/viewer/2022071108/5fe2cdaa399d6e0671499daf/html5/thumbnails/1.jpg)
CS 155
![Page 2: Project 2 Section - crypto.stanford.edu · • Download VM • VirtualBox: In Preferences->Network->Host-only Networks, add a new network (vboxnet0) if it doesn’t exist • Start](https://reader035.vdocuments.site/reader035/viewer/2022071108/5fe2cdaa399d6e0671499daf/html5/thumbnails/2.jpg)
• Project 2:• Setup• Ruby on Rails primer• Tips for part A
![Page 3: Project 2 Section - crypto.stanford.edu · • Download VM • VirtualBox: In Preferences->Network->Host-only Networks, add a new network (vboxnet0) if it doesn’t exist • Start](https://reader035.vdocuments.site/reader035/viewer/2022071108/5fe2cdaa399d6e0671499daf/html5/thumbnails/3.jpg)
• Bitbar
• Ruby on Rails App
• New users get 200 bitbars
• Can transfer bitbarsto other users
![Page 4: Project 2 Section - crypto.stanford.edu · • Download VM • VirtualBox: In Preferences->Network->Host-only Networks, add a new network (vboxnet0) if it doesn’t exist • Start](https://reader035.vdocuments.site/reader035/viewer/2022071108/5fe2cdaa399d6e0671499daf/html5/thumbnails/4.jpg)
Part A: Attacks
Due May 11
Part B: Defenses
Due May 18
![Page 5: Project 2 Section - crypto.stanford.edu · • Download VM • VirtualBox: In Preferences->Network->Host-only Networks, add a new network (vboxnet0) if it doesn’t exist • Start](https://reader035.vdocuments.site/reader035/viewer/2022071108/5fe2cdaa399d6e0671499daf/html5/thumbnails/5.jpg)
• Download VM
• VirtualBox: In Preferences->Network->Host-only Networks, add a new network (vboxnet0) if it doesn’t exist
• Start the VM. • proj2 directory has starter code
![Page 6: Project 2 Section - crypto.stanford.edu · • Download VM • VirtualBox: In Preferences->Network->Host-only Networks, add a new network (vboxnet0) if it doesn’t exist • Start](https://reader035.vdocuments.site/reader035/viewer/2022071108/5fe2cdaa399d6e0671499daf/html5/thumbnails/6.jpg)
![Page 7: Project 2 Section - crypto.stanford.edu · • Download VM • VirtualBox: In Preferences->Network->Host-only Networks, add a new network (vboxnet0) if it doesn’t exist • Start](https://reader035.vdocuments.site/reader035/viewer/2022071108/5fe2cdaa399d6e0671499daf/html5/thumbnails/7.jpg)
Route Map To Controller:bitbar/config/routes.rb
User Controller:bitbar/app/controllers/user_controller.rb
User Profile View:bitbar/app/views/user/profile.html.erb
![Page 8: Project 2 Section - crypto.stanford.edu · • Download VM • VirtualBox: In Preferences->Network->Host-only Networks, add a new network (vboxnet0) if it doesn’t exist • Start](https://reader035.vdocuments.site/reader035/viewer/2022071108/5fe2cdaa399d6e0671499daf/html5/thumbnails/8.jpg)
![Page 9: Project 2 Section - crypto.stanford.edu · • Download VM • VirtualBox: In Preferences->Network->Host-only Networks, add a new network (vboxnet0) if it doesn’t exist • Start](https://reader035.vdocuments.site/reader035/viewer/2022071108/5fe2cdaa399d6e0671499daf/html5/thumbnails/9.jpg)
![Page 10: Project 2 Section - crypto.stanford.edu · • Download VM • VirtualBox: In Preferences->Network->Host-only Networks, add a new network (vboxnet0) if it doesn’t exist • Start](https://reader035.vdocuments.site/reader035/viewer/2022071108/5fe2cdaa399d6e0671499daf/html5/thumbnails/10.jpg)
![Page 11: Project 2 Section - crypto.stanford.edu · • Download VM • VirtualBox: In Preferences->Network->Host-only Networks, add a new network (vboxnet0) if it doesn’t exist • Start](https://reader035.vdocuments.site/reader035/viewer/2022071108/5fe2cdaa399d6e0671499daf/html5/thumbnails/11.jpg)
![Page 12: Project 2 Section - crypto.stanford.edu · • Download VM • VirtualBox: In Preferences->Network->Host-only Networks, add a new network (vboxnet0) if it doesn’t exist • Start](https://reader035.vdocuments.site/reader035/viewer/2022071108/5fe2cdaa399d6e0671499daf/html5/thumbnails/12.jpg)
![Page 13: Project 2 Section - crypto.stanford.edu · • Download VM • VirtualBox: In Preferences->Network->Host-only Networks, add a new network (vboxnet0) if it doesn’t exist • Start](https://reader035.vdocuments.site/reader035/viewer/2022071108/5fe2cdaa399d6e0671499daf/html5/thumbnails/13.jpg)
http://blog.bigbinary.com/2013/03/19/cookies-on-rails.html
![Page 14: Project 2 Section - crypto.stanford.edu · • Download VM • VirtualBox: In Preferences->Network->Host-only Networks, add a new network (vboxnet0) if it doesn’t exist • Start](https://reader035.vdocuments.site/reader035/viewer/2022071108/5fe2cdaa399d6e0671499daf/html5/thumbnails/14.jpg)
”Transfer 10 bitbars to attacker”
Victim’s bitbar cookies sent as auth!Victim logs in to Bitbar
Victim visits attacker website
![Page 15: Project 2 Section - crypto.stanford.edu · • Download VM • VirtualBox: In Preferences->Network->Host-only Networks, add a new network (vboxnet0) if it doesn’t exist • Start](https://reader035.vdocuments.site/reader035/viewer/2022071108/5fe2cdaa399d6e0671499daf/html5/thumbnails/15.jpg)
![Page 16: Project 2 Section - crypto.stanford.edu · • Download VM • VirtualBox: In Preferences->Network->Host-only Networks, add a new network (vboxnet0) if it doesn’t exist • Start](https://reader035.vdocuments.site/reader035/viewer/2022071108/5fe2cdaa399d6e0671499daf/html5/thumbnails/16.jpg)
![Page 17: Project 2 Section - crypto.stanford.edu · • Download VM • VirtualBox: In Preferences->Network->Host-only Networks, add a new network (vboxnet0) if it doesn’t exist • Start](https://reader035.vdocuments.site/reader035/viewer/2022071108/5fe2cdaa399d6e0671499daf/html5/thumbnails/17.jpg)
Attacker’s Profile
User1’s Profile User 2’s Profile
User Bitbars
Attacker 10
User1 50
User2 100
User Bitbars
Attacker 11
User1 49
User2 100
User Bitbars
Attacker 12
User1 49
User2 99
Views
Views
![Page 18: Project 2 Section - crypto.stanford.edu · • Download VM • VirtualBox: In Preferences->Network->Host-only Networks, add a new network (vboxnet0) if it doesn’t exist • Start](https://reader035.vdocuments.site/reader035/viewer/2022071108/5fe2cdaa399d6e0671499daf/html5/thumbnails/18.jpg)
![Page 19: Project 2 Section - crypto.stanford.edu · • Download VM • VirtualBox: In Preferences->Network->Host-only Networks, add a new network (vboxnet0) if it doesn’t exist • Start](https://reader035.vdocuments.site/reader035/viewer/2022071108/5fe2cdaa399d6e0671499daf/html5/thumbnails/19.jpg)
![Page 20: Project 2 Section - crypto.stanford.edu · • Download VM • VirtualBox: In Preferences->Network->Host-only Networks, add a new network (vboxnet0) if it doesn’t exist • Start](https://reader035.vdocuments.site/reader035/viewer/2022071108/5fe2cdaa399d6e0671499daf/html5/thumbnails/20.jpg)