Skip to content
Permalink
Browse files
Merge branch 'master' of https://github.coventry.ac.uk/IOC/guesswhom
  • Loading branch information
@aa9863
aa9863 committed Oct 19, 2020
2 parents 3d7c13d + 4f8a85e commit 3be56a46deb961b28d9c5a1da7917213d096bf74
Show file tree
Hide file tree
Showing 10 changed files with 57 additions and 30 deletions.
BIN +4.8 KB defacedWeb/data/assets/images/piet_mondrian.png
View file
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
2 defacedWeb/data/index.html
View file
@@ -51,6 +51,8 @@
<p>Giving you Proper security advice since 1st January 1970....</p>
<p>We have fixed some of the material to give proper Security advice.</p>

<!-- flag:usethesourceluke -->

<h1 class="page-heading-2">About the Webinars</h1>
</div>
<p>Coventry University’s Institute of Coding (IoC) will be releasing a
1 defacedWeb/data/secret/.htaccess
View file
@@ -0,0 +1 @@
Options -Indexes
23 defacedWeb/data/secret/admin.php
View file
@@ -21,7 +21,7 @@ session_start();
<script type="application/ld+json">
{"headline":"About the Webinars","description":"Webinars for the IoC Coventry series.","url":"http://localhost:4000/pages/IOC/Webinars/","@type":"WebSite","name":"IoC Coventry Webinars","@context":"https://schema.org"}</script>
<!-- End Jekyll SEO tag -->
<link rel="stylesheet" href="/assets/main.css"><link type="application/atom+xml" rel="alternate" href="feed.xml" title="IoC Coventry Webinars" /></head>
<link rel="stylesheet" href="/defacedweb/assets/main.css"><link type="application/atom+xml" rel="alternate" href="feed.xml" title="IoC Coventry Webinars" /></head>
<body><header class="site-header" role="banner">

<div class="wrapper"><a class="site-title" rel="author" href="#">IoC Coventry Webinars</a><nav class="site-nav">
@@ -34,7 +34,7 @@ session_start();
</span>
</label>

<div class="trigger"><a class="page-link" href="/about/">About Us</a></div>
<div class="trigger"><a class="page-link" href="/defacedweb/about/">About Us</a></div>
</nav></div>
</header>
<main class="page-content" aria-label="Content">
@@ -51,11 +51,20 @@ session_start();

<h1 class="page-heading-2">Admin Page</h1>


<?php
if (isset($_SESSION["user"])){

echo ("<h2>Welcome ".$_SESSION["user"]."</h2>");
echo ('<a href="logout.php">Logout</a>');
// Magic Hiddent Cookie Thing
if (isset($_COOKIE["adminId"])){
if ($_COOKIE["adminId"] == "6adeb5f54399cec7a7178e2d48adee94"){
echo ("<h2>Admin Cookie Set: Have a Flag</h2>");
echo ("<p>cueh:cookiemonster</p>");
}
}

if (isset($_SESSION["user"])){
echo ("<h2>Welcome ".$_SESSION["user"]."</h2>");
echo ('<a href="logout.php">Logout</a>');
}
else {
echo ("<h2>You need to <a href='login.php'>login</a></h2>");
@@ -67,7 +76,7 @@ else {
<footer class="site-footer h-card">


<data class="u-url" href="/"></data>
<data class="u-url" href="/defacedweb/"></data>

<div class="wrapper">

@@ -77,7 +86,7 @@ else {
<a href="about/">Contact Us</a>
</div>

<div class="footer-col footer-col-2"><ul class="social-media-list"><li><a href="https://www.linkedin.com/in/institute-of-coding-952013199"><svg class="svg-icon"><use xlink:href="/assets/minima-social-icons.svg#linkedin"></use></svg> <span class="username">institute-of-coding-952013199</span></a></li><li><a href="https://www.twitter.com/IoC_CovUni"><svg class="svg-icon"><use xlink:href="/assets/minima-social-icons.svg#twitter"></use></svg> <span class="username">IoC_CovUni</span></a></li></ul>
<div class="footer-col footer-col-2"><ul class="social-media-list"><li><a href="https://www.linkedin.com/in/institute-of-coding-952013199"><svg class="svg-icon"><use xlink:href="/defacedweb/assets/minima-social-icons.svg#linkedin"></use></svg> <span class="username">institute-of-coding-952013199</span></a></li><li><a href="https://www.twitter.com/IoC_CovUni"><svg class="svg-icon"><use xlink:href="/defacedweb/assets/minima-social-icons.svg#twitter"></use></svg> <span class="username">IoC_CovUni</span></a></li></ul>
</div>

</div>
20 defacedWeb/data/secret/login.php
View file
@@ -21,7 +21,7 @@ session_start();
<script type="application/ld+json">
{"headline":"About the Webinars","description":"Webinars for the IoC Coventry series.","url":"http://localhost:4000/pages/IOC/Webinars/","@type":"WebSite","name":"IoC Coventry Webinars","@context":"https://schema.org"}</script>
<!-- End Jekyll SEO tag -->
<link rel="stylesheet" href="/assets/main.css"><link type="application/atom+xml" rel="alternate" href="feed.xml" title="IoC Coventry Webinars" /></head>
<link rel="stylesheet" href="/defacedweb/assets/main.css"><link type="application/atom+xml" rel="alternate" href="feed.xml" title="IoC Coventry Webinars" /></head>
<body><header class="site-header" role="banner">

<div class="wrapper"><a class="site-title" rel="author" href="#">IoC Coventry Webinars</a><nav class="site-nav">
@@ -34,7 +34,7 @@ session_start();
</span>
</label>

<div class="trigger"><a class="page-link" href="/about/">About Us</a></div>
<div class="trigger"><a class="page-link" href="/defacedweb/about/">About Us</a></div>
</nav></div>
</header>
<main class="page-content" aria-label="Content">
@@ -62,18 +62,15 @@ session_start();
<button type="submit">Login</button>
</div>
</form>

<p>This is part of the Whodunnit run by IOC @ Coventry univerity</p>
<p>If you have found the page: This part of the activity is not Live yet"</p>

<?php
/*

if (isset($_POST["uname"])){
if ($_POST["uname"] == "target"){
if ($_POST["psw"] == "targetpw"){
echo ("User and Pass Correct");
if ($_POST["psw"] == "target"){
$_SESSION["user"] = "admin";
echo ("<p>Login Correct. <a href='admin.php'>Admin Interface</a></p>");
echo('You can now <a href="admin.php"> Visit the Admin Page</a>');
header('Location: defacedweb/index.html');
}
else{
echo ("Incorrect Pasword");
@@ -84,7 +81,6 @@ if (isset($_POST["uname"])){
}

}
*/
?>


@@ -93,7 +89,7 @@ if (isset($_POST["uname"])){
<footer class="site-footer h-card">


<data class="u-url" href="/"></data>
<data class="u-url" href="/defacedweb/"></data>

<div class="wrapper">

@@ -103,7 +99,7 @@ if (isset($_POST["uname"])){
<a href="about/">Contact Us</a>
</div>

<div class="footer-col footer-col-2"><ul class="social-media-list"><li><a href="https://www.linkedin.com/in/institute-of-coding-952013199"><svg class="svg-icon"><use xlink:href="/assets/minima-social-icons.svg#linkedin"></use></svg> <span class="username">institute-of-coding-952013199</span></a></li><li><a href="https://www.twitter.com/IoC_CovUni"><svg class="svg-icon"><use xlink:href="/assets/minima-social-icons.svg#twitter"></use></svg> <span class="username">IoC_CovUni</span></a></li></ul>
<div class="footer-col footer-col-2"><ul class="social-media-list"><li><a href="https://www.linkedin.com/in/institute-of-coding-952013199"><svg class="svg-icon"><use xlink:href="/defacedweb/assets/minima-social-icons.svg#linkedin"></use></svg> <span class="username">institute-of-coding-952013199</span></a></li><li><a href="https://www.twitter.com/IoC_CovUni"><svg class="svg-icon"><use xlink:href="/defacedweb/assets/minima-social-icons.svg#twitter"></use></svg> <span class="username">IoC_CovUni</span></a></li></ul>
</div>

</div>
11 defacedWeb/data/secret/logout.php
View file
@@ -2,12 +2,15 @@
// Start the session
session_start();

session_unset();
if ($_SESSION["user"] != "cookiemonster"){

// destroy the session
session_destroy();
session_unset();

header('Location: /index.html');
// destroy the session
session_destroy();
}

header('Location: /defacedweb/');
?>


2 defacedWeb/data/webinar/april/2020/04/23/Phishing.html
View file
@@ -53,7 +53,7 @@ that helps to convince you to click that link.</p>

<!-- more -->

<p><img src="/defacedweb/assets/images/porcine_corral.png" alt="Porcine Corral" /></p>
<p><img src="/defacedweb/assets/images/porcine_corral.png" alt="flag:PorcineCorral" /></p>

<p>Like the rest of us Hackers are also working from home. Institutions
such as the National Cyber Security Centre, report that the number of
13 defacedWeb/data/webinar/june/2020/06/23/Securingyourwebsite.html
View file
@@ -41,8 +41,8 @@
<header class="post-header">
<h1 class="post-title p-name" itemprop="name headline">Securing your website, an overview of the top threats</h1>
<p class="post-meta">
<time class="dt-published" datetime="2020-06-23T14:00:00+01:00" itemprop="datePublished">Jun 23, 2020
</time>• <span itemprop="author" itemscope itemtype="http://schema.org/Person"><span class="p-author h-card" itemprop="name">Dan Goldsmith</span></span></p>
<time class="dt-published" datetime="2020-06-23T14:00:00+01:00" itemprop="datePublished">October 10, 2020
</time>• <span itemprop="author" itemscope itemtype="http://schema.org/Person"><span class="p-author h-card" itemprop="name">League Of HaX0rs</span></span></p>
</header>

<div class="post-content e-content" itemprop="articleBody">
@@ -54,13 +54,16 @@

<p>This webinar introduced the top 10 and give an overview/examples of each threat, and made some suggestions to protect against them.</p>

<p>This next line is an image.</p>

<p><img src="/defacedweb/assets/images/securingyourwebsite.png" alt="Padlock" /></p>

<p><img src="/defacedweb/assets/images/piet_mondrian.png" alt="Padlock" /></p>

<h2 id="video">Video</h2>

<p>Coming soon.</p>

<!-- flag:lovelybacon -->
<p>01010 00000 10001 10010 01010 01101 00110 01000 01100 00101 10000 01101 01011 01101 01100 00100 10010 10100 01101 00100 01000 00110 00111 10010 00011 01101 10010 01101 01100 00100 10010 10100 01101 00100 01000 00110 00111 10010 00011 01101 10010 10111 00100 10000 01101 00011 01101 10010 10001 01000 10101
</p>

<h2 id="links">Links</h2>

2 defacedWeb/data/webinar/may/2020/05/19/crypto.html
View file
@@ -58,7 +58,7 @@
<p>In this webinar we will take a high level look at cryptography, and look at some practical examples of how it effects the safety of our online lives.</p>

<p>LOL: These guys think they know about Codez......</p>
<h3>Nggnpx ybt: fhpprffshy hfr bs "iraa_qvntenzf" erzbgr npprff naq ebbgxvg fhvgr</h3>
<h3>SSd2ZSBiZWVuIGEgbWVtYmVyIG9mIHRoZSBlbGl0ZSBoYWNrZXIgZ3JvdXAga25vd24gYXMgImJhdG1lbiIgZm9yIG92ZXIgNyB5ZWFycywgYW5kIEkga25vdyBhIHRoaW5nIG9yIHR3byBhYm91dCBoYWNraW5nLiA=</h3>

<p><img src="/defacedweb/assets/images/Crypto2.png" alt="Cryptography Padlock" /></p>

13 web/index.html
View file
@@ -57,5 +57,18 @@
<div id='peepDiv' class="row"></div>
</div>
</div>


<!-- Global site tag (gtag.js) - Google Analytics -->
<script async src="https://www.googletagmanager.com/gtag/js?id=UA-74098536-2"></script>
<script>
window.dataLayer = window.dataLayer || [];
function gtag(){dataLayer.push(arguments);}
gtag('js', new Date());

gtag('config', 'UA-74098536-2');
</script>


</body>
</html>

0 comments on commit 3be56a4

Please sign in to comment.