diff --git a/slides/sql-xss-csrf.html b/slides/sql-xss-csrf.html index c0daa09..34f7c19 100644 --- a/slides/sql-xss-csrf.html +++ b/slides/sql-xss-csrf.html @@ -588,7 +588,7 @@

A clever hacker tries to clear his/her record...

- Enter the script manually, and make sure it works - *Then*, encode the script using URL-encoded text - There are online utilities to do this, such as the one at https://meyerweb.com/eric/tools/dencoder/ -- Pass that to the script +- Pass that to the web page - Note that trying to edit the Javascript code through the URL-encoded text won't work! diff --git a/uva/daily-announcements.html b/uva/daily-announcements.html index 7e80595..531eeac 100644 --- a/uva/daily-announcements.html +++ b/uva/daily-announcements.html @@ -73,25 +73,26 @@

-

Networking Problems

Networking Problems

xkcd # 2259

+

Voting Software

Voting Software

xkcd # 2030

-## Lecture 22: Fri, Oct 13th +## Lecture 23: Mon, Oct 16th - Office hours are underway and listed on the [Canvas landing page](https://canvas.its.virginia.edu/courses/79086) - My Wednesday office hours are now 1-2 (instead of 9-10) - Canvas now has anonymous feedback! - Homeworks - - [Homework 6: Fuzzing](../hws/hw-fuzzing-tabbed.html) is out, and due next Tuesday, October 17th -- [The midterm](../exams/midterm-f23.pdf) was yesterday + - [Homework 6: Fuzzing](../hws/hw-fuzzing-tabbed.html) is out, and due tomorrow (Tuesday, October 17th) + - Homework 7 (SQL, XSS, CSRF) will be out Wednesday, and due next Tuesday +- [The midterm](../exams/midterm-f23.pdf) was last Wednesday - Average was 38.3/48 (79.9%) with a stdev of 6.5 (13.6%) - - We'll go over it today + - Regrades are now open (as of last night), and will stay open for a week or so - Grading - Grades returned: HW 1 (Rational Paranoia), HW 3 (RSA), HW 4 (Hashing), Quiz 1 - [Homework 5: Networks](../hws/hw-networks-tabbed.html) requires human grading, so will take some time - - Still being graded: HW 2 (Ethics), but that's mostly done + - Still being graded: HW 2 (Ethics), HW 5 (Networks) - Everybody has to sign the Ethics Honor Pledge; the link is on the [Canvas landing page](https://canvas.its.virginia.edu/courses/59093) -- Today we will start on [SQL, XSS, & CSRF](../slides/sql-xss-csrf.html) +- Today we will continue with [SQL, XSS, & CSRF](../slides/sql-xss-csrf.html), starting on slide 4.11
@@ -101,26 +102,25 @@

Networking Problems

Voting Software

xkcd # 2030

+

Networking Problems

Networking Problems

xkcd # 2259

-## Lecture 23: Mon, Oct 16th +## Lecture 22: Fri, Oct 13th - Office hours are underway and listed on the [Canvas landing page](https://canvas.its.virginia.edu/courses/79086) - My Wednesday office hours are now 1-2 (instead of 9-10) - Canvas now has anonymous feedback! - Homeworks - - [Homework 6: Fuzzing](../hws/hw-fuzzing-tabbed.html) is out, and due tomorrow (Tuesday, October 17th) - - Homework 7 (SQL, XSS, CSRF) will be out Wednesday, and due next Tuesday -- [The midterm](../exams/midterm-f23.pdf) was last Wednesday + - [Homework 6: Fuzzing](../hws/hw-fuzzing-tabbed.html) is out, and due next Tuesday, October 17th +- [The midterm](../exams/midterm-f23.pdf) was yesterday - Average was 38.3/48 (79.9%) with a stdev of 6.5 (13.6%) - - Regrades are now open (as of last night), and will stay open for a week or so + - We'll go over it today - Grading - Grades returned: HW 1 (Rational Paranoia), HW 3 (RSA), HW 4 (Hashing), Quiz 1 - [Homework 5: Networks](../hws/hw-networks-tabbed.html) requires human grading, so will take some time - - Still being graded: HW 2 (Ethics), HW 5 (Networks) + - Still being graded: HW 2 (Ethics), but that's mostly done - Everybody has to sign the Ethics Honor Pledge; the link is on the [Canvas landing page](https://canvas.its.virginia.edu/courses/59093) -- Today we will continue with [SQL, XSS, & CSRF](../slides/sql-xss-csrf.html), starting on slide 4.11 +- Today we will start on [SQL, XSS, & CSRF](../slides/sql-xss-csrf.html)
diff --git a/uva/index.html b/uva/index.html index 438c287..e56ad80 100644 --- a/uva/index.html +++ b/uva/index.html @@ -158,7 +158,7 @@

Course calendar

M,W,F Network fuzzing Cryptocurrency - +Mon: finished SQL/XSS/CSRF 10 diff --git a/uva/index.md b/uva/index.md index 6cd8a34..e284811 100644 --- a/uva/index.md +++ b/uva/index.md @@ -85,7 +85,7 @@ Course calendar | 6 | Sep 25 | M,W,F | Hashing | [Networking Overview](../slides/networks.html#/), [Web Security](../slides/web-security.html#/) | Mon: overview to 5.2; Wed: finished overview, finished policy, web security to 4.8; Fri: web security to 6.10 | | 7 | Oct 2 | W,F | Networks | [Web Security](../slides/web-security.html#/), [Anonymity](../slides/anonymity.html#/) | Mon: fall break; Wed: web security to 7.7; Fri: web security to 8.14 | | 8 | Oct 9 | M,W,F | (midterm week) | [SQL, XSS, and CSRF](../slides/sql-xss-csrf.html#/), midterm | Mon: finished web security, review session; Wed: midterm; Fri: SQL/XSS/CSRF to 4.11 | -| 9 | Oct 16 | M,W,F | Network fuzzing | [Cryptocurrency](../slides/cryptocurrency.html#/) | | +| 9 | Oct 16 | M,W,F | Network fuzzing | [Cryptocurrency](../slides/cryptocurrency.html#/) | Mon: finished SQL/XSS/CSRF | | 10 | Oct 23 | M,W,F | SQL/XSS/CSRF | [Rootkits](../slides/rootkits.html#/), [Stuxnet](../slides/stuxnet.html#/) | | | 11 | Oct 30 | M,W,F | Cryptocurrency | [Viruses](../slides/viruses.html#/)| | | 12 | Nov 6 | M,W,F | Networks | [Buffer Overflows](../slides/buffer-overflows.html#/) | |