Nick name:

Student ID:

Group (6A/6B):

Primary school:

Secondary school:

Matriculation/Foundation:

Hometown:

About my parents:

Ambition:

Tagline:

Don't forget to upload your recent & DECENT photo !

Link 2: Lab (Exercise) Report

1- Be sure to click on the link, not the image.

2- Be sure to submit to the correct link: Link 1 for the written assignment, and Link 2 for the lab report.

3- Send only the FINAL version.

4- Use your official UiTM student email (Note: Help us, we will help you).

5- Strictly follow the naming convention.

Note: Multiple submissions will increase the similarity percentage.

Note:

1-Authenticate through official student's email.

2-Be sure to click on the link, not the image

In week 8

Week 11 - Lab activities concluded

Week 12-13 - Consultation

Week 14 - Final Submission

Week 10 - Final Submission

The code has buffer overflow issues because of the loops have extra loops. That's why the array a[0] show result which is random address. The `matrix` array is set to hold 100 elements (index 0 - 99), but the loop runs from 0 to 100, which means it tries to write to `matrix[100]` it should stop at matrix[99], so matrix[100] doesn't exist, causing undefined behavior. Same goes with the `row_ind` array. It's supposed to have 10 pointers (index 0 to 9), but the loop runs from 0 to 10, making `row_ind[10]` point to `matrix[100]`, which is also out of bounds. When the program tries to print the values, it ends up reading from these invalid spots, leading to weird output. To make sure it is not out of the bound, the loop conditions need to change from `<=` to `<`, so they stop just before out of bounds.

The code writes data beyond its allocated memory, causing buffer overruns due to incorrect loop bounds:

• Matrix Array: The loop runs from 0 to 100, but valid indices are 0 to 99. Accessing `matrix[100]` is out of bounds.

• Row Index Array: The loop runs from 0 to 10, but valid indices are 0 to 9. Accessing `row_ind[10]` is out of bounds.

row_ind is supposed to point to the start of each row in matrix, but the out-of-bounds loop causes row_ind[10] to point to matrix[100]. When the code runs `a[0]` gives a random number due to the buffer overrun. `a[10]` shows the value from the corrupted `matrix[100]`.

1. Double-Spend Attacks: Reverse transactions that they send, leading to double-spending of their coins.

2. Block Transactions: Prevent new transactions from gaining confirmations, effectively halting payments between users.

3. Forking: Fork or split the blockchain, leading to network disruptions and potential loss of trust in the blockchain system.

b)

1. Consensus Algorithms (Proof of Work and Proof of Stake):

   • Proof of Work (PoW): Miners solve difficult puzzles to add new blocks, making it hard to control the network.

   • Proof of Stake (PoS): Validators are chosen based on the amount of cryptocurrency they hold, reducing the chance of a single entity taking over.

2. Decentralization:

   • The network is spread across many nodes worldwide, so no single entity controls the whole system. This makes it tough for anyone to tamper with the blockchain.

3. Cryptographic Hashing:

   • Each block has a unique code (hash) linked to the previous block. Changing one block would require altering all subsequent blocks, which is nearly impossible. This keeps the blockchain secure and unchangeable.

Blockchain is gaining ground as a secure method for conducting transactions in numerous applications and industries.

a) What is the primary security issue with Blockchain ?

One of the primary security issues with blockchain technology is the 51% attack. This occurs when a single entity or a group of entities control more than 50% of the network's mining hash rate, computing power, or stake.

b) Explain THREE (3) security mechanism used in the blockchain to resolve the above issue.

• Chain Reorganizations: Blockchain protocols can detect and respond to unusual chain reorganizations. By monitoring the length and frequency of chain reorganizations, networks can implement rules to limit the acceptance of reorganized chains, thus mitigating the impact of a 51% attack.

• Checkpointing : Networks periodically save checkpoints to a secure, centralized database. Checkpoints provide a trusted reference point, preventing attackers from altering the blockchain history before the latest checkpoint, thereby reducing the feasibility of a 51% attack.

• Multi-Signature Transactions: Requires multiple signatures from different parties to validate a transaction. This approach distributes the authority to validate transactions among multiple nodes, making it significantly harder for a single entity to manipulate the blockchain, even if they control 51% of the network's hash rate.

The main security issue with blockchain is the 51% attack. This happens when a single entity or group controls over 50% of the network's mining power, allowing them to manipulate the blockchain by:

• Double spending: Reversing transactions to spend the same cryptocurrency twice.

• Blocking transactions: Preventing new transactions from being confirmed.

• Halting mining: Stopping other miners from adding new blocks to the blockchain.

  
  

b) Security Mechanisms in Blockchain:

1. Proof of Work (PoW)

PoW requires miners to solve complex puzzles to add new blocks, making it hard and costly for any single entity to control over 50% of the network’s power, thus preventing 51% attacks.

2. Proof of Stake (PoS)

PoS selects validators based on the amount of cryptocurrency they hold and are willing to "stake." Gaining majority control would require acquiring a significant amount of the cryptocurrency, making attacks financially impractical.

3. Decentralization

Blockchain is decentralized, with many nodes distributed globally. This means no single point of failure exists, making it hard for any malicious actor to compromise the network. Even if some nodes are attacked, the rest of the network continues to operate correctly.

The most security-affected problem in this blockchain is the so-called 51% attack. It is a scenario in which one or a few entities control more than 50% of the mining hash rate or network computational power. The majority control allows attackers to:

1. Revert transactions it sent while in the majority control, thereby double-spending the coins.

2. Prevent the confirmation from obtaining confirmations, effectively slimming down the payments network.

3. Stop other miners to mine, in a bid to gain monopoly over mining activities.

b) Explain THREE (3) security mechanisms used in the blockchain to resolve the above issue.

Proof of Stake (PoS):

PoS reduces the risk of a 51% attack by making it economically unfeasible for an attacker to gain majority control. Since validators are chosen based on their stake rather than computational power, acquiring a majority stake in a well-distributed network would be prohibitively expensive, thus preventing attackers from double-spending, blocking confirmations, or monopolizing the network.

Multi-Signature (Multi-Sig) Wallets:

While multi-sig wallets primarily protect individual accounts from theft and fraud, they also add a layer of security to the network. By requiring multiple approvals for transactions, multi-sig wallets can prevent unauthorized or malicious transactions, making it harder for an attacker to manipulate transactions even if they gain temporary majority control.

Byzantine Fault Tolerance (BFT):

BFT mechanisms ensure that the blockchain network can maintain consensus and continue functioning correctly even if some nodes are compromised or acting maliciously. This resilience helps protect against the effects of a 51% attack by ensuring that consensus can be reached without relying on the majority of nodes being honest, thus preventing attackers from reversing transactions, blocking confirmations, or monopolizing mining activities.

Together, these mechanisms enhance the security of blockchain networks and mitigate the risks associated with a 51% attack by making it more difficult and costly for attackers to gain and maintain majority control.

The main security concern with blockchain technology is the "51% attack." This happens when a single entity or group gains control of over half of the network's mining power. With this majority control, they can manipulate the blockchain, allowing for double-spending of coins and preventing new transactions from being confirmed.

b) Security Mechanisms in Blockchain

1. Proof of Work (PoW): This mechanism makes it difficult and costly to gain majority control of the network's mining power. Miners must solve complex mathematical problems to validate transactions and add them to the blockchain, requiring significant computational resources.

2. Decentralization: Blockchain networks are distributed across many nodes (computers), making it hard for any single entity to gain control. This distribution ensures that no single point of failure or central authority can manipulate the network.

3. Consensus Algorithms: These algorithms ensure that all network participants agree on the validity of transactions. Common algorithms like Proof of Stake (PoS) or Delegated Proof of Stake (DPoS) provide alternative methods to validate transactions without relying solely on computational power, enhancing the network's security against attacks.

The primary security issue with blockchain is the 51% attack. This occurs when a single entity or group of entities controls more than 50% of the network's mining power or computational resources. If attackers gain majority control, they can manipulate the blockchain by reversing transactions, double-spending coins, and preventing new transactions from gaining confirmations. This undermines the trust and integrity of the blockchain, compromising its decentralization and security.

b) Explain THREE (3) security mechanism used in the blockchain to resolve the above issue.

1. Proof of Work (PoW): PoW is a consensus mechanism that requires miners to solve complex mathematical puzzles to validate transactions and create new blocks. This process is computationally intensive and resource-demanding, making it difficult and costly for any single entity to gain control of the majority of the network's hashing power. PoW ensures that blockchain security is maintained through distributed computational effort, reducing the risk of a 51% attack.

2. Decentralization: By design, blockchain operates on a decentralized network where multiple nodes participate in validating and recording transactions. This distribution of power prevents any single entity from having excessive control over the network. The more nodes that participate, the harder it becomes for an attacker to achieve the majority needed for a 51% attack. Decentralization enhances security by ensuring that no central authority can manipulate the blockchain.

3. Proof of Stake (PoS): PoS is an alternative consensus mechanism that relies on validators holding and staking a certain amount of cryptocurrency to validate transactions and create new blocks. Validators are selected based on the amount of cryptocurrency they stake, reducing the energy consumption compared to PoW. PoS deters attacks by making it economically unfeasible for any single entity to amass enough stake to control the network, as they would need to own a majority of the cryptocurrency, which is both expensive and risky.

a) Primary Security Issue with Blockchain

The main security problem with blockchain is the 51% attack. This happens if someone controls more than 50% of the network’s power. They can then:

- Spend the same cryptocurrency twice (double-spending).

- Stop other people's transactions.

- Control which transactions are processed.

b) Three Security Mechanisms Used in Blockchain to Fix This Issue

1. Proof of Work (PoW)

Miners work through extremely challenging problems to add new blockchain blocks. One person cannot easily manage more than 50% of the network's power since solving these challenges takes a lot of time and effort.

2. Decentralization and Consensus

Blockchain records and verifies transactions using numerous computers, or "nodes," located all over the world. It is difficult for one individual to take control because it is divided among several nodes. The majority of nodes must concur on the network's current state for consensus techniques like Proof of Stake (PoS) to succeed.

3. Cryptographic Hashing and Immutability

Every block has an unique code, or hash, linked to the code of the block before it. Modifying one block's data also modifies all subsequent blocks, which is practically hard to do without the network noticing. This stop tampering and maintains the blockchain's security.

1. Mohamad Farhad Aidid bin Elias

2. Muhammad Danial bin Nan

3. Muhammad Azzem bin Halmi

AENY NATASHA BT MOHD HAIRIE KHOR

A4CDCS2306A

12 NOVEMBER 2024

A4CDCS2306A

2023388785

14 NOV 2024

1. Nur Farah Hanis Binti Aznan

2. Nurul Nabilah Binti Baharuddin

3. Ulfatunnoor Binti Azmy

1. AINA SYAZANA BINTI SHUHAIMI

2. KHALILAH BINTI RAMZI

3. NUR FARAH AIN BINTI MOHAMMAD FAIZAL

CDCS2306A

2023190003

Explain the security issues in terms of i)membership; ii)authentication; and iii)data on;

a)Public Blockchain:

1. Membership: Open to everyone without restrictions.

2. Authentication: Relies on pseudonymous identity, meaning users do not have to reveal their real-world identities

3. Data: Stored on a fully distributed ledger visible to all participants.

b)Private Blockchain:

1. Membership: Restricted to selected members, ensuring controlled access.

2. Authentication: No anonymity in private blockchains as members are typically known and authenticated.

3. Data: Stored on a partially distributed ledger with limited visibility.

Explain the security issues in terms of i) membership; ii) authentication; and iii) data on:

a) Public Blockchain:

Public blockchains such as Bitcoin, Ethereum are open to anyone by allowing decentralized and transparent access.

i) Membership: Open to Everyone

Since anyone can join the network, malicious actors can easily participate. This opens the blockchain to Sybil attacks, where attackers create multiple fake identities to influence or disrupt the system.

ii) Authentication: Pseudo-Anonymous Identity

Users are identified by cryptographic keys, not real-world identities. While this offers privacy, it also allows bad actors to operate without being easily traced.

iii) Data: Distributed Data

All data is stored publicly across all nodes, making sensitive information vulnerable if it is not encrypted or anonymized properly.

b) Private Blockchain

Private blockchains such as Hyperledger, Corda restricts access to selected members and are used by organizations for internal use cases.

i) Membership: Open to Selected Members

Though only selected members can join, the process of selecting and verifying members can be weak or prone to insider threats.

ii) Authentication: No Primary Authority

Without a single primary authority, consensus is decentralized among selected members. If an adversary gains control over a significant portion of the network such as collusion or internal breaches, they can manipulate the ledger.

iii) Data: Partially Distributed Data

Data is not fully public but distributed across authorized participants. This limited distribution can create vulnerabilities if an authorized participant mishandles or leaks sensitive information.

i) Membership:

• Open to everyone which means anyone can join the network without restriction.

ii) Authentication:

• It relies on pseudo-anonymous identity, meaning users interact with the network using cryptographic addresses without revealing personal information.

iii) Data:

• Data is stored on a decentralized ledger that is publicly accessible, making it transparent but potentially vulnerable to privacy concerns.

b) Private Blockchain

i) Membership:

• Open only to selected members who have permission to join the network.

ii) Authentication:

• There is no privacy in the private setting as all participants are usually known to the organization, making anonymity unnecessary.

iii) Data:

• Uses a partially distributed ledger where data access and modifications are restricted to authorized participants, offering more control and privacy.

a) Public Blockchain

1.Membership:

-Open to everyone, meaning anyone can join and participate in the network.

-No restrictions on who can validate transactions or create blocks, which increases inclusivity but raises risks of malicious actors joining.

2.Authentication:

-Users are pseudo-anonymous, relying on cryptographic keys (public and private keys) for identity and transaction signing.

-This anonymity can make tracking malicious activities challenging.

3.Data:

-Data is distributed across all nodes in the network, ensuring transparency.

-However, since data is accessible to all, sensitive information may be at risk if not encrypted.

b) Private Blockchain

1.Membership:

-Open only to selected members, ensuring access is restricted to trusted participants.

-Membership is often managed by an organization or consortium.

2.Authentication:

-No anonymity, as participants are known and authenticated using pre-defined rules or permissions.

-This improves accountability and reduces the risk of malicious activities.

3.Data:

-Uses a partially distributed ledger, where data is shared only with authorized nodes.

-This setup enhances data privacy and control but may sacrifice some transparency compared to public blockchains.

• Membership: Public blockchains are open to everyone. Anyone can join the network and articipate in the blockchain activities without needing permission from any central authority.

• Authentication: In public blockchains, identities are pseudo-anonymous. Users are identified by their public keys rather than their real identities, which provides a level of privacy but not complete anonymity.

• Data: Data in public blockchains is stored on a distributed ledger. This means that all transactions are transparent and can be viewed by anyone on the network, ensuring data integrity and immutability.

  
  

b) Private Blockchain

• Membership: Private blockchains are open only to selected members. Access is restricted to a group of participants who have permission to join the network, ensuring controlled membership.

• Authentication: There is no privacy in private blockchains in the sense that the identities of the participants are known and verified. This contrasts with the pseudo-anonymous identities in public blockchains.

• Data: Private blockchains often use password-protected access to control who can view and interact with the data. This ensures that only authorized members can access sensitive information, providing enhanced security compared to public blockchains.

If you were absent, please do the following:

1. Obtain your Medical Certificate (MC).

2. Upload it to the Ufuture attendance system immediately.

3. If you receive your MC late, submit it along with any supporting documents to the designated Padlet's Medical Certificate section.

4. Then at our next (physical) meeting, show your proof of absence (in the Padlet page) so we can discuss your attendance record.

5. Include your full name, student ID, group (A4CDCS2302A/2B), and the date of your absence.

2x2= 2 G10-G11

6B 32/3 =10x3=30 G12-G21

1x2= 2 G22

Note:

1-Authenticate through official student's email.

2-Be sure to click on the link, not the image

CSC662_Group 4_Written Assignment_2023390047_AINA SYAZANA BINTI SHUHAIMI

CDCS2306A

2022663442

CDCS2306A

2022490404

Task 2 - THM{1nj3c710n_15_fun!}

Task 3 - THM{7h3r35_n07h1n6_h3r3}

Task 4 - THM{w34p0n1z3d_53w1n6}

Task 5 - THM{n07_4_m4l1c10u5_dll}

Task 6 -

1)Asynchronous Procedure Call

2)QueueUserAPC

3)n

Task 7 -

1)RtlCreateUserThread

2)y

3)write_hook_iter

Aisyah Nisar Binti Nisar Ul haq

2022697476

6b

https://drive.google.com/drive/folders/1_ZykAQm0mllyqcg64w4Evmejhbblsyn1

Task 3

1) 2021-09-24

2) 2

3) 2

Task 4

1) filetype:xls site:clinic.thmredteam.com

2) passwords site:clinic.thmredteam.com

Task 5

1) shodan myip

Task 6

1) recon-ng -w clinicredteam

2) 2

3) migrate_hosts

4) Censys Inc

Task 7

1) NIST NVD

2) MISP Project

https://drive.google.com/drive/folders/1zSXxw_OQCEKo0M2LOqorAg8PaOkeaKZe?usp=sharing

Answer:

Task 8

USB Delivery

Task 9

THM{b4dbc2f16afdfe9579030a929b799719}

51000

Task 3

0xC544

Task 4

THM{70_D373C7_0r_70_N07_D373C7}

Task 5

6.354

Task 6

THM{N0_1MP0r75_F0r_Y0U}

Task 7

THM{08FU5C4710N_15 MY_10V3_14N6U463}

1. 4

2. Obfuscating Layout

Task 3

1. Data Splitting

2. Data Procedurization

Task 4

1. THM{koNC473n473_4Ll_7H3_7h1n95}

Task 5

1. Code Stubs

2. Obfuscating Controls

Task 6

1. T

Task 7

1. THM{D3cod3d!!!}

Task 8

1. THM{Y0Ur_1NF0_15_M1N3}

Windows Defender

av-victim

THM{H3ll0-W1nD0ws-Def3nd3r!}

Task 3:

530949

5A4D

12E4

7

.flag

THM{PE-N3w-s3ction!}

Task 4: THM{y0ur-1s7-5h311c0d3}

Task 6: nay, nay, yea

Task 7: nay, nay, yea

Task 9: yea, yea, yea

Task 10: nay, yea

https://drive.google.com/drive/folders/1z9c5_rDBCMcASNnfGm-CjUCCWHom1_-b?usp=drive_link

Answer :

Task 2

Password cracking

Task 3

netscreen:netscreen

Task 4

Question 1: 81

Question 2: crunch 5 5 -t "THM^^" -o tryhackme.txt

Task 5

Question 1: sha-1

Question 2: sunshine

Question 3: 1337

Task 6

Az"[0-9][0-9]" ^[!@]

Task 8

Question 1: THM{d0abe799f25738ad739c20301aed357b}

Question 2: !multidisciplinary00

Question 3: THM{33c5d4954da881814420f3ba39772644}

Question 4: THM{f8e3750cc0ccbb863f2706a3b2933227}

Task 9

THM{a97a26e86d09388bbea148f4b870277d}

https://drive.google.com/file/d/1K590ob3qqkUYTcUd1cM3rE2Kow8jnVfb/view?usp=drivesdk

Answer:

Task 2

social engineering

spear- phishing

Task 3

OSINT

anchor text

Task 4

SSL/TLS Certificates

DNS

GoPhish

Task 5

p4$$w0rd!

Task 6

nay

Task 7

old

typosquatting

Task 8

macros

Task 9

CVE-2021-40444

Task 10

THM{I_CAUGHT_ALL_THE_PHISH}

1. NUR MUNIRAH BINTI NAZAM

2. SITI AISYAH BINTI SAMSUDIN

3. NUR HIDAYATUL SYAMIMI BINTI SUHAIMI

Team Members:

1. Aisyah Maisarah Binti Supian

2. Fatin Humaira Binti Roslizam

3. Nur Adlina Sakinah Binti Salihuddin

i) Controllers

ii) 4726

Task 3:

i) 3

ii) 104

Task 5:

i) PSEtwLogProvider

ii) m_enabled

Task 6:

i) 779f245b

ii) c21400

Task 7:

i) 2

ii) 4104

Task 8:

i) 4103, 4104

ii) EnableScriptBlockLogging

Task 9:

i) Module Logging

ii) Microsoft.Powershell.Utility

https://drive.google.com/file/d/1XiqViZvT8ohTDxuv0xSwAJFS2GpYa5k8/view?usp=sharing

Answers:

Task 4

Y

thmredteam.com

Task 5

6

thmadmin@thmredteam.com

Task 6

N

PowerView.ps1

17337

Task 9

13337

THM{S3rv1cs_Is_3numerat37ed}

THM{DNS-15-Enumerate!}

Aisyah binti Rosli

2022675124

29/5/2025

1 - Pktmon.exe

2 - T1127.001

3 - execute

Task 4

1 - enc_thm_0YmFiOG_file.txt

2 -THM{ea4e2b9f362320d098635d4bab8a568e}

Task 7

1 - THM{23005dc4369a0eef728aa39ff8cc3be2}

Team members:

1. Nur Aifaa binti Mohamad Fadzli

2. Sharifah Shazea binti Syed Ali

3. Maisarah binti Tobroni

Task 2

AMSI

Task 3

AMSI RESULT DETECTED

Task 4

N

Task 5

THM{p0w3r5h3ll_d0wn6r4d3!}

Task 6

THM{r3fl3c7_4ll_7h3_7h1n65}

Task 7

cmd

powershell

.\bypass.ps1 THM{p47ch1n6_15n7_ju57_f0r_7h3_600d_6uy5}

https://drive.google.com/file/d/178I3l_cX3U3RdhSO7YVkldYT72bBEosa/view?usp=drivesdk

Answer:

Task 2

1. Administrators

2. aye

Task 3

1. ZuperCkretPa5z

2. 098n0x35skjD3

3. THM{WHAT_IS_MY_PASSWORD}

4. CoolPass2021

Task 4

1. THM{TASK_COMPLETED}

Task 5

1. THM{AT_YOUR_SERVICE}

2. THM{QUOTES_EVERYWHERE}

3. THM{INSECURE_SVC_CONFIG}

Task 6

1. THM{SEFLAGPRIVILEGE}

Task 7

1. THM{EZ_DLL_PROXY_4ME}

Team members:

1. Nia Insyirah Binti Muhammad Hafiz.

2. Nurnisa Aqifah Binti Ridzuan.

3. Nur Haura' Binti Mansor.

2022622574

A4CDCS2306A

24/6/2025

https://drive.google.com/drive/folders/1ysSPQSxt1hLZQTWHj0Kiw9n_URa-974p?usp=sharing

Task 1

Intrusion Prevention System

Intrusion Detection System

Task 2

signature-based

anomaly-based

signature-based

Task 3

10.14.17.226

Task 4

-g 161

ncat -lvnap 23

-ff

-sF

-w

Task 5

Y2F0IC9ldGMvcGFzc3dkCg==

ncat -l 8080

-----BEGIN CERTIFICATE-----

-----END PRIVATE KEY-----

redteamnetsec

Task 6

HTTP SOCKS4

Task 8

jitter

https://drive.google.com/file/d/1AhFxOnRE3bW4uNnG_e8ymqCyTjtCRBOF/view?usp=sharing

Task 8

LAPsReader

THMLAPSPassw0rd

bk-admin

Team Members:

1. NUR DINIE SYAFIQAH BINTI ABD MAJID

2. NUR SHAZWINA BINTI SHAHARUDIN

3. MUNIFA MAHAMMAD NOOR

1) 23

2) 443

3) 8080

4) 5161

Task 2

1) Packet-Filtering Firewall

2) Next-Generation Firewall

Task 3

1) 44

2) 0

3) 200

4) 800

5) 10.10.13.37

5) Fujitsu General Ltd

6) -S 10.10.0.254

7) -g53

Task 4

1) 28

2) 36

3) 56

4) 148

Task 5

1) No answer needed

2) 3

3) 0

Task 6

1) 21

Task 7

1) THM{1298331956}

Task 8

1) thmredteam

Task 9

1) 7

1) E4syPassw0rd

2) jfxKruLkkxoPjwe3

3) THM{RunA5S4veCr3ds}

group of interconnected problems that, together, form a larger, more complex challenge.

2. HANI DAYANA BINTI AZRUL HISYAM

3. ADIBAH HUSNA BINTI ZOKARNAIN

Answer:

Lateral Movement and Pivoting

TASK 3: THM{MOVING_WITH_SERVICES}

TASK 4: THM{MOVING_WITH_WMI_4_FUN}

TASK 5: THM{NO_PASSWORD_NEEDED}

TASK 6: THM{NICE_WALLPAPER}

TASK 7: THM{SIGHT_BEYOND_SIGHT}

THM{FORWARDING_IT_ALL}

https://drive.google.com/drive/folders/17zRTKgqv3lrQyQVN819sQOJEA2tB5joo?usp=sharing

Answer:

Task 2

private key

Task 3

Ubuntu

20.04.6

randa

6667

inspircd

THM-24765

Task 4

Microsoft Windows Server 2019 Datacenter

10.0.17763

30

22

sshd.exe

Task 5

THM{DNS_ZONE}

THM{829738}

THM{SNMP_SERVICE}

Task 6

PsLoggedOn

2024786397

CDCS2306A

24/10/2025

Ahmad Azfar Hakimi bin Mohammad Fauzy

2024544727

CDCS2306A

2/1/2026

1. Authentication 

2. Access Control

b) From a computer security perspective, discuss ONE (1) advantage and TWO (2) disadvantages of integrating the open-source security mechanisms. (6 marks)

One (1) Advantage:

1. Rapid Discovery and Remediation of Vulnerabilities: The primary security strength of UNIX lies in its open-source implementation. Because the source code is publicly accessible, it allows for widespread peer review, meaning security flaws and vulnerabilities are often discovered and fixed early by the community rather than remaining hidden. 

Two (2) Disadvantages:

1. Inconsistent Code Quality: A significant weakness of the open-source model is that it can result in a less professional code base. Since contributions may come from various developers with varying levels of expertise, the rigorous standards seen in closed, strictly managed proprietary environments might not always be met, potentially introducing security gaps. 

2. Lack of Advanced Security Features (Design Philosophy): The design philosophy of this product is to omit several key security features recommended by modern security models. For example, standard UNIX implementations often lack Mandatory Access Control (MAC), detailed Access Control Lists (ACLs), and data labeling, forcing administrators to rely solely on basic permissions which may be insufficient for high-security environments. 

Nick name: Pya

Student ID: 2023406592

Group (6A/6B): 6A

Primary school: SK. Sungai Karangan

Secondary school: SMK. Pekula Jaya

Hometown: Sungai Petani, Kedah

About my parents: Both teachers.

Ambition: Secure job placement right after internship in IT dept at Maybank HQ.

Tagline: ‘mustahil Allah membawa mu sejauh ini untuk gagal‘. therefore, keep going and don’t give up on your dreams.

Nick name: WAL

Student ID: 2023436838

Group (6A/6B): 6A

Primary school: SK JENERI

Secondary school: SMK JENERI

Hometown: SIK

About my parents: i love them

Ambition: to be a Millionaire

Tagline: 1% Better Every Day

Nick name: Ayesha

Student ID: 2023415242

Group (6A/6B): 6B

Primary school: SK Taman Mutiara

Secondary school: SMS Tun Syed Sheh Shahabudin

Matriculation/Foundation: Kedah Matriculation College

Hometown: Kulim, Kedah

About my parents: both retired

Tagline: go with the flow

Full name: Aimi Nur Syakila Binti Nazri

Nick name: Aimi

Student ID: 2023217564

Group (6A/6B): 6B

Primary school: SK Pinang Tunggal

Secondary school: SMK Pinang Tunggal

Matriculation/Foundation: Kolej MARA Kulim

Hometown: Sungai Petani, Kedah

About my parents: Supportive, understanding, lovely.

Ambition: Data Analyst

Tagline: Keep moving, trust Allah's plan.

Nick name: Husna

Student ID: 2023443672

Group (6A/6B): 6A

Primary school: SK Sri Aman

Secondary school: SMKA (P) Al - Mashoor

Matriculation/Foundation: Kedah Matriculation College

Hometown: Kedah

About my parents: Both are my constant source of love and support.

Ambition: Data Analyst

Tagline: Allah’s plan is always better than our own.

Nick name: ain

Student ID: 2023261558

Group (6A/6B): 6A

Primary school: SK LUMUT

Secondary school: SM TEKNIK ALOR SETAR

Matriculation/Foundation: Kedah Matriculation College

Hometown: kedah

About my parents: very supportive

Ambition: web developer

Tagline: smile !

Nick name: Farah

Student ID: 2023414894

Group (6A/6B): 6B

Primary school: SK Seri Perdana

Secondary school: SMK Mergong

Matriculation/Foundation: Kolej Matrikulasi Kedah

Hometown: Alor Setar, Kedah

About my parents: supportive,lovely

Ambition: Data Analyst

Tagline: Be kind to everyone

Nick name: Idham

Student ID: 2023436146

Group: 6A

Primary School: SK Hulu Bernam

Secondary School: SMS Tengku Abdullah

Foundation: UiTM Kampus Dengkil

Hometown: Hulu Bernam

About my parents: Supportive,caring, loving

Ambition: To build and grow a tech company that creates meaningful solutions.

Tagline: Just because something is hard doesn't mean it's impossible

Nick name: Hanis

Student ID: 2023189475

Group (6A/6B): 6A

Primary school: SK Bukit Beruntung

Secondary school: SM Sains Hulu Selangor

Hometown: Perak

About my parents: They always support my decisions and give me independence

Ambition: System analyst

Tagline: Trust the process

Nick name: Bal

Student ID: 2023214118

Group (6A/6B): 6B

Primary school: SK Jalan Matang Buluh

Secondary school: SMK Syed Sirajuddin

Matriculation/Foundation: Perlis Matriculation College

Hometown: Kangar, Perlis

About my parents: They are everything to me

Ambition: Data Analyst

Tagline: Be confident with what you are doing

Nick name: Mas

Student ID: 2023298332

Group: 6A

Primary school: Sk Kayang

Secondary school: SMK Dato Sheikh Ahmad

Hometown: Perlis

About my parent: give me this happy life

Ambition: lead a peaceful life

Tagline: Everything happens for a reason

Nick name: Baqih

Student ID: 2023276892

Group (6A/6B): 6B

Primary school: Sekolah Kebangsaan Penghulu Abu Bakar

Secondary school: Sekolah Menengah Baling

Matriculation/Foundation: Kolej Matrikulasi Kedah

Hometown: Baling

About my parents: My backbone

Ambition: Pursue career related to my academic background

Tagline: No script, just life

Nick name: Fatini

Student ID: 2023214508

Group (6A/6B): 6A

Primary school: SK Sungai Puyu

Secondary school: SMK Datuk Onn

Matriculation/Foundation: Kolej Matrikulasi Pulau Pinang

Hometown: Pulau Pinang

About my parents: They understand and support me.

Ambition: Build a career in IT field

Tagline: Put Your Trust in Allah

Nick name: Dinie

Student ID: 2023406328

Group (6A/6B): 6A

Primary school: SK Sungai Buaya

Secondary school: SMK Bandar Sungai Buaya

Hometown: Selangor

About my parents: Caring

Tagline: pull them to their grave

Nick name: Fidah

Student ID: 2023402586

Group (6A/6B): 6A

Primary school: SK SRI JAMIL

Secondary school: SMK RAJA MUDA

Diploma: Diploma Information Technology (Digital Technology)

Hometown: Muar Johor

About my parents: They very supportive

Ambition: Software Developer

Tagline: Trust the process and think positive

Nick name: elll

Student ID: 2023410718

Group (6A/6B): 6A

Primary school: SK Pulau Mertajam

Secondary school: SM Sains Kepala Batas

Matriculation/Foundation: Matriculation (KMPP)

Hometown: Pulau Pinang

About my parents: one holds me, one watches over me

Ambition: data analyst

Tagline: still i rise

Nickname: Wafiaq

Student ID: 2023226262

Primary School: SK Pinang Tunggal

Secondary School: SMKA Al Irshad

Foundation: UiTM Dengkil

Hometown: Sungai Petani, Kedah

About Parents: My mum is a teacher, my father was a teacher (now retired)

Ambition: Live peacefully

Tagline: Kipidap

Nick name: farisha

Student ID: 2023415882

Group (6A/6B): 6A

Primary school: SK Sungai Tiang Baroh

Secondary school: SMK Tun Abdul Razak

Matriculation/Foundation: Perak Matriculation College

Hometown: Perak

About my parents: Very supportive and a reason for me to keep living and breathing

Ambition: Data Analyst

Tagline: Every failure is a stepping stone for us to grow up

Nickname : zol

Student Id : 2023239866

Primary school: Sk permatang damar laut

Secondary school: Smk bukit jambul

Foundation: Kolej Matrikulasi Pulau Pinang

Hometown: Bayan Lepas, Pulau Pinang

About parents: theyre cool

Ambition: Data Analyst

Tagline : hip hip hooray

Nick name:Yaya

Student ID:2023690726

Group (6A/6B):6A

Primary school: SK CHANGKAT JERING

Secondary school:SMK DOKTOR BURHANUDDIN

Matriculation/Foundation:STPM

Hometown:Taiping

About my parents:Supportive

Ambition:Web Developer

Tagline:Life must go on

Nick name: alliyaa

Student ID: 2023218308

Group (6A/6B): 6A

Primary school: SK Sungai Dedap

Secondary school: SMKA Yan

Matriculation/Foundation: Kedah

Matriculation College

Hometown: Kedah

About my parents: My biggest motivation and inspiration

Ambition: Software developer

Tagline: Keep moving forward

Nick name: Alya

Student ID: 2023298356

Group (6A/6B): 6A

Primary school: SK Pengkalan

Secondary school: SMKA Kerian TMUA

Matriculation/Foundation: Kolej Matrikulasi Perak

Hometown: Ipoh Perak

About my parents: A very good parents

Ambition: AI engineer

Tagline: Al-Quran di dada

Nick name: Hawa

Student ID: 2023415642

Group (6A/6B): 6B

Primary school: Sekolah Kebangsaan Kuala Dipang

Secondary school: Sekolah Menengah Kebangsaan Kampar

Matriculation/Foundation: Matriculation Perak

Hometown: Malim Nawar, Perak

About my parents: Supportive

Ambition: Full-Stack developer @ Business Owner

Tagline: “D.U.I.T.”

Nick name: Mior

Student ID: 2023644136

Group (6A/6B): 6B

Primary school: SK KG. DATO SERI KAMARUDDIN

Secondary school: SMK KG. DATO SERI KAMARUDDIN

Matriculation/Foundation: Matriculation, KMPK

Hometown: Manjung, Perak.

About my parents: my father is retired navy, my mother is housewife.

Ambition: Software Developer

Tagline: Do something today that your future self will thank you for.

Nick name: Anis

Student ID: 2023225736

Group (6A/6B): 6B

Primary school: SK Petani Jaya

Secondary school: SMK Ibrahim

Matriks / Foudation: Kolej Matrikulasi Kedah

Hometown: Sungai Petani, Kedah

About my parents: both are very kind and lovely

Tagline: no one besides Allah can rescue a soul from hardship

Nick name: Fahmi

Student ID: 2023644132

Group(6A/6B): 6A

Primary School: SK Taman Sri Gombak 2

Secondary School: SMK Hillcrest

Matriculation/Foundation: Penang Matriculation College

Hometown: Selangor

About my parents: Lovely

Ambition: A successful CS graduate

Tagline: just do it

Nick name: Irwan

Student ID: 2023851774

Group (6A/6B): 6A

Primary school: SK Temin

Secondary school: SMK Toh Muda Abdul Aziz

Hometown: Sungai Siput, Perak

About my parents: Love them

Ambition: A quiet and comfortable life

Tagline: nothing last forever we can change the future

Full Name: Muhammad Aqiel bin Zulkifli

Nickname: Aqiel

Student ID: 2023690614

Primary School: SK TIWA

Secondary School: SMK TIWA

Foundation: Matrikulasi Gopeng, Perak

Hometown: Batu Gajah, Perak

About Parents: My mother is a housewife, my father works as a firefighter stationed at Gopeng, Perak

Ambition:

Tagline:

Nick name: haziq

Student ID: 2023217818

Group (6A/6B): 6B

Primary school: SK AYER PUTEH

Secondary school: SMK KEPAL BATAS

Matriculation/Foundation: FOUNDATION IN ENGINEERING IN UITM DENGKIL

Hometown: Kepala Batas Kedah

About my parents: Both are primary school teachers. Loving and supportive in anything i want to pursue

Ambition: data analysts

Tagline: be nice to everyone

Nickname: Nish

Student ID: 2023261622

Primary School: SK Kalumpang

Secondary School: SMK Khir Johari

Foundation: UiTM Dengkil

Hometown: Hulu Selangor, Selangor

About Parents: My mom is a security guard, my father is a technician.

Ambition: Data Engineer/Data Scientist

Tagline: No one can use you if you’re useless

Nick name: Fikri

Student ID: 2023670854

Group (6A/6B): 6B

Primary school: SK Sungai Batu

Secondary school: MRSMBP

Hometown: Penang

About my parents: Great individuals

Ambition: ¿

Tagline: Adapt or Die

Full name: Nur Arina Aimy binti Ramli

Nick name: Arina

Student ID: 2023690076

Group (6A/6B): 6B

Primary school: SK Pinang Tunggal

Secondary school: SMK Datuk Haji Abdul Kadir

Matriculation/Foundation: Penang Matriculation

Hometown: Kepala Batas, Penang

About my parents: Both teachers

Ambition: AI Engineer

Tagline: Ayat 1000 Dinar

Nickname: Azreen

Student ID: 2023298982

Group: 6A

Primary school: SK Tasik Puteri 2

Secondary school: SMK Bandar Tasik Puteri

Matriculation: Melaka Matriculation College

Hometown: Rawang

About my parents: They are everything

Ambition: To become a successful person

Tagline: keep praying until its come true

Nick name: Sarah

Student ID: 2023492258

Group (6A/6B): 6A

Primary school: SK Air Merah

Secondary school: SMK Air Merah

Matriculation/Foundation: Penang Matriculation College

Hometown: kedah

About my parents: supportive, loving and caring

Ambition: data analyst

Tagline: be kind and trust Allah

Nickname: ALIP

Student ID: 2023813988

Primary School: SK ALL SAINT'S

Secondary School: SMK BUKIT JANA

Foundation: FORM 6 SMK KING EDWARD VII

Hometown: TAIPING, PERAK

About Parents: My mum is a teacher, my father was a teacher.

Ambition: AI ENGINEER

Tagline: Allah ada tanpa tempat.

Nick name: Ain

Student ID: 2023663678

Group (6A/6B): 6B

Primary school: SK Sungai Choh

Secondary school: SMK Sungai Choh

Matriculation/Foundation: Perak Matriculation College

Hometown: Rawang, Selangor

About my parents: A great parents and very hardworking

Ambition: To get a stable job after internship

Tagline: Keep moving forward

Full name: NUR IMAN HUMAIRA BINTI MOHAMAD HASDI
Nick name:IMAN
Student ID: 2023414866
Group (6A/6B): 6B
Primary school: SEK KEB JALAN BARU
Secondary school: SMKA AL-IRSHAD
Matriculation/Foundation: FOUNDATION at UiTM Dengkil

Ambition: AI developer
Hometown: MELAKA

Nickname : Malfi

Student ID: 2023443918

Primary School : SK Methodist

Secondary School : SMK PANGLIMA BUKIT GANTANG

Foundation : UITM DENGKIL

Hometown : Parit Buntar, Perak

About Parents : both teacher

Ambition : Cloud Engineer

Tagline : Everything is ok 👌

Nick name: Sha

Student ID: 2023699684

Group (6A/6B): 6B

Primary school: Sjk(C) Chung Hua, Parit

Secondary school: Mrsm Parit

Matriculation/Foundation: Perak Matriculation College

Hometown: Seri Iskandar, Perak

About my parents: caring

Ambition: Data Analyst

Tagline:

Nick name:Apip Hensem

Student ID:2023268374

Group (6A/6B):6B

Primary school:SK Bandar Baru Sungai Lalang

Secondary school:SMK Amanjaya

Matriculation/Foundation:STPM

Hometown:Sungai Petani ni boss🔥

About my parents:my everything❤️

Ambition:Navy Officer🌊

Tagline:Nakal Berakal

Nick name: Mim

Student ID: 2023415442

Group (6A/6B): 6A

Primary school: SK Sungai Pasir

Secondary school: SMK Sungai Pasir

Hometown: Penang

About my parents:Lovely

Ambition: Software Eng

Tagline: Sometimes we win, sometimes we lose. always trying..

Full name: Muhammad Syamil bin Shamsuddin

Nick name: mil

Student ID: 2023472374

Group (6A/6B): 6B

Primary school: SK Jalan Pegoh

Secondary school: SMK Kampung Pasir Puteh

Matriculation/Foundation: Diploma Teknologi Maklumat

Hometown: Ipoh

About my parents: Kind but scary

Ambition: Web Developer / Data Analyst

Tagline: Be kind and thoughtful

Nick name: Irdina

Student ID: 2023820172

Group (6A/6B): 6A

Primary school: SK Sri Gedong

Secondary school: SM Teknik Alor Setar

Matriculation/Foundation: Kedah Matriculation College

Hometown: Sungai Petani, Kedah

About my parents: loving and supportive

Ambition: web developer

Tagline: trust yourself and rise.

Nick name: Akmal

Student ID: 2023415444

Group (6A/6B): 6B

Primary school: SK Seri Makmur

Secondary school: SBPI Sabak Bernam

Hometown: Selangor

About my parents: I love them so much

Tagline: Ada titik titik di ujung doa 🤲🏻

Nick name: enul

Student ID: 2023837366

Group (6A/6B): 6B

Primary school: SK Tasek Apong

Secondary school: SMK Ibrahim

Matriculation/Foundation: Kedah Matriculation College

Hometown: Kedah

About my parents: My biggest supporters

Ambition: Data Analyst

Tagline: Grace in heart, strength in soul

NickName: Haikal

StudentID: 2023699086

Group(6A/6B): 6B

Primary school: SK Seri Makmur

Secondary School: SMK Sungai Besar

Matrikulasi: KMS

Hometown: Sungai Besar, Selangor

AboutMyParent: Amazing,Strong,Confident,Calm

Ambition: Be Succesfull

Tagline: Believe and trust

Nick name: Fatin

Student ID: 2023698676

Group (6A/6B): 6A

Primary school: Sk Bintong

Secondary school: SMK Putra

Matriculation/Foundation: STPM

Hometown: Kangar, Perlis

About my parents: loving and my backbone

Ambition: web developer

Tagline: small step, big dream

Nick Name: Am

Student ID: 2023663574

Group (6A/6B): 6B

Primary School: SK Kedawang

Secondary School: SMK Kedawang

Matriculation/Foundation: Form 6, SMK Tunku Putra

Hometown: Langkawi

About My Parents: My mom is a housewife and my dad is a retired police. Both of them are supportive.

Ambition: Teacher

Tagline: Trust in Allah plan. The best place to seek help is always Him. InshaAllah.

Full name: Muhammad Izzan Syahmi bin Burhanshah

Nick name: Izzan

Student ID: 2023239776

Group (6A/6B):6B

Primary school:SK Sungai Pasir Kechil

Secondary school: Jenan

Matriculation/Foundation:PASUM

Hometown: Sungai Petani, Kedah

About my parents:Healthy

Ambition: Network Engineer

Tagline: e.g. is exempli gratia

i.e is id est

Nickname: Iman

Student ID: 2023813842

Group: 6A

Primary school: SK Desa Pahlawan

Secondary school: SMK Bandar Puteri Jaya

Hometown: Sungai Petani, Kedah

About my parents: Lovable parents

Ambition: To be succesful

Tagline: Enjoy your life

Nick name: Syafa

Student ID: 2023299292

Group (6A/6B): 6A

Primary school: Sekolah Kebangsaan Kampung Soeharto

Secondary school: MRSM Muar

Matriculation/Foundation: Foundation in Science, UiTM

Hometown: Hulu Selangor, Selangor

About my parents: good

Ambition:

Tagline: Make it happen

Nick name: Sarah

Student ID: 2023214478

Group (6A/6B): 6A

Primary school: SK Titi Serong

Secondary school: SMK Seri Perak

Matriculation/Foundation: Perak Matriculation College

Hometown: Perak

About my parents: Everything for them

Ambition: Double rich

Tagline: Just breathe

Nick Name: Eryka

Student ID: 6A

Primary School: SK Jimah Baru

Secondary School: SMK RLKT Lasah

Matriculation: Perak Matriculation College

Hometown: Ipoh

About My Parent: Loving

Ambition:

Tagline: Just Do It

At least we could finish before the subscription ends. All modules are complete, certificates have been generated, and the slides are prepared.

Nick name: Ainaa

Student ID: 2023226298

Group (6A/6B): 6B

Primary school: SK Bertam Perdana Secondary school: SMK Dato' Kailan Matriculation/Foundation: Penang Matriculation College

Hometown: Pulau Pinang

Nick name: Amri

Student ID: 2023406272

Group (6A/6B): 6B

Primary school: SK Tunku Abdul Rahman Putra

Secondary school: SMK Datuk Syed Ahmad

Matriculation/Foundation: Kedah Matriculation

Hometown: Kuala Nerang Kedah

About Parents: My father is still working, while my mother is retired

Ambition: Software Developer

Tagline: Respect your parent

Nick name: Jal

Student ID: 2023299198

Group (6A/6B): 6B

Primary school: SK Sungai Pasir

Secondary school: SMK Sungai Pasir

Hometown: Kedah

About my parents: Malay and Muslim

Ambition: Data Analyst

Tagline: Always Zero Float

Video - https://drive.google.com/file/d/1nodYzTy4ejdOC1CJcEnwO-MfqyFv0_rn/view?usp=drivesdk

Flag code - https://drive.google.com/file/d/1kf27zlm_-QdbvkCcslpfFEcPlTz_aZ88/view?usp=sharing

https://canva.link/ltkikun30zewdgy

Video Demo:

https://drive.google.com/file/d/10777DdEXWDhty1jMDSahRxs9pdyaNba-/view?usp=drivesdk

Answer:

Task 2:
1. Social engineering
2. Spear-phishing

Task 3:
1. OSINT
2. anchor text

Task 4:
1. SSL/TLS Certificates
2. DNS
3. GoPhish

Task 5:
1. p4$$w0rd!

Task 6 :
1. Nay

Task 7 :
1. old
2. Typosquatting

Task 8 :
1. Macros

Task 9 :
1. CVE-2021-40444

Task 10:
1. THM{I_CAUGHT_ALL_THE_PHISH}

Nick name: Hazim

Student ID: 2023444038

Group (6A/6B): 6B

Primary school: SK Haji Hussin Dol

Secondary school: SMK YAN

Hometown: Kedah

About my parents: My support system

Ambition: living simply

tagline:

Video Demo:

https://drive.google.com/file/d/1kGuM1ZS4UwZ1hY5RZmnV4rVmFyrtlIVy/view?usp=drivesdk

Answer:

Task 2:

1. TryHackMe_Wireshark_Demo

2. 58620

3. f446de335565fb0b0ee5e5a3266703c778b2f3dfad7efeaeccb2da5641a6d6eb

Task 3:

1. eXtensible Markup Language

2. 05/13/2004

3. 47

4. 424

5. 9a01a-4696-7e354b00

Task 4:

1. r4w8173

2. 911cd574a42865a956ccde2d04495ebf

3. PACKETMASTER

4. 1636

Task 5:

1. http

2. 1089

3. 3

4. Blad3

https://drive.google.com/file/d/13IvukD-JAyQILo4czOtSE2sdy53MSotH/view?usp=sharing

Answers

1. THM{2673a7dd116de68e85c48ec0b1f2612e}

2. THM{c8eeb0468febbadea859baeb33b2541b}

https://padlet.com/pissta/csc662-computer-security-gh6taptt7so

Video Demo:

https://drive.google.com/drive/folders/1nGLeGaHYBVfuV8Clb1vyCz4jQtzXGINf?usp=sharing

Answer:

Task 2

THM{PRINT_STATEMENTS}

Task 3

THM{ADDITI0N}

THM{SUBTRCT}

THM{MULTIPLICATION_PYTHON}

THM {EXPON3NT_POWER}

Task 4

THM{VARIABL3S}

Task 6

THM{IF_STATEMENT_SHOPPING}

THM{MY_FIRST_APP}

Task 7

THM{L00PS_WHILE_FOR}

Task 8

THM{BITC0IN_INVESTOR}

Task 9

THM{F1LE_R3AD}

VIDEO - https://drive.google.com/drive/folders/15nxcmbIeu8NUhmKj-M69dNwuGvvlnRpp?usp=sharing

Task 2

administrators

aye

Task 3

ZuperCkretPa5z

098n0x35skjD3

THM{WHAT_IS_MY_PASSWORD}

CoolPass2021

Task 4

THM{TASK_COMPLETED}

Task 5

THM{AT_YOUR_SERVICE}

THM{QUOTES_EVERYWHERE}

THM{INSECURE_SVC_CONFIG}

Task 6

THM{SEFLAGPRIVILEGE}

Task 7

THM{EZ_DLL_PROXY_4ME}

Task 1:

py2exe

Task 2:

1. DNS

2. sys.argv

Task 3:

1. 4

2. private.html

3. apollo.html

4. surfer.html

5. LOUSYRABBO

Task 4:

1. scapy

2. ip_range

3. inteface

Task 5:

1. SSH

2. socket

3. sys.stdout.flush()

4. 3

5. 2100

Task 6:

1. request.get()

2. Lateral Movement

Task 7:

1. cd13b6a6af66fb774faa589a9d18f906

2. rainbow

3. redwings

Task 8:

1. pip3

2. keyboard.play(keys)

Task 9:

1. tiffany

2. trustno1

3. THM-737390028

Answers

Task 2

P

A

A

Task 3

20180705

namecheap.com

cloudflare.com

Task 4

THM{a5b83929888ed36acb0272971e438d78}

Task 5

remote

Task 6

United States

8080

80

Task2

flag1: THM{FLAG_BACKED_UP!}

flag2: THM{IM_JUST_A_NORMAL_USER}

flag3: THM{TRUST_ME_IM_AN_ADMIN}

Task3

flag5: THM{NO_SHORTCUTS_IN_LIFE}

flag6: THM{TXT_FILES_WOULD_NEVER_HURT_YOU}

Task4

flag7: THM{SUSPICIOUS_SERVICES}

flag8: THM{IN_PLAIN_SIGHT}

Task5

flag9: THM{JUST_A_MATTER_OF_TIME}

Task6

flag10: THM{NO_NO_AFTER_YOU}

flag11: THM{LET_ME_HOLD_THE_DOOR_FOR_YOU}

flag12: THM{I_INSIST_GO_FIRST}

flag13: THM{USER_TRIGGERED_PERSISTENCE_FTW}

Task7

flag14: THM{BREAKING_THROUGH_LOGIN}

flag15: THM{THE_LOGIN_SCREEN_IS_MERELY_A_SUGGESTION}

Task8

flag16: THM{EZ_WEB_PERSISTENCE}

flag17: THM{I_LIVE_IN_YOUR_DATABASE}

https://canva.link/kqutli2p1tkzr7z

Video Demo:

https://drive.google.com/drive/folders/1tvwi4ZpqpRBu-GHLCGmDpFlJYyfVkyjP?usp=sharing

Answer:

Task 2:

1. Active Directory

2. ⁠Domain Controller

   
   

Task 3:

1. Domain Admins

2. TOM-PC$

   
   

Task 4:

1. THM{thanks_for_contacting_support}

2. Delegation

Task 5:

1. 7

2. ⁠Yay

   
   

Task 6:

1. SYSVOL

2. Yay

   
   

Task 7:

1. Nay

2. Ticket Granting Ticket

3. ⁠Nay

   
   

Task 8:

1. Tree

2. ⁠A trust relationship

Nick name: Zaim

Student ID: 2023406226

Group (6A/6B): 6A

Primary school: SK Bandar Tasik Puteri

Secondary school: SMK Bandar Tasik Puteri

Hometown: Selangor

About my parents:Lovely

Ambition: Software Eng

Tagline: follow the flow

Nick name: Zaim

Student ID: 2023406226

Group (6A/6B): 6A

Primary school: SK Bandar Tasik Puteri

Secondary school: SMK Bandar Tasik Puteri

Hometown: Selangor

About my parents:Lovely

Ambition: Software Eng

Tagline: follow the flow

Task 2

1 - DNS

2 - SSH

3 - 6

4 - Open

Task 3

1 - RST

2 - SYN

Task 4

1 - open

2 - Domain

Task 5

1 - 4

2 - 4

Task 6

1 - closed

2 - snmp

Task 7

1 - -p5000-5500

2 - --min-parallelism=64

3 - -T0

• 4

• N

• 4

• Y

task 3

• ARP REQUEST

• ARP RESPONSE

• 1

• router

• computer5

• N

task 4

• 10.10.12.8

• 6400

task 5

• 1

task 6

• -PP

• -PM

• -PE

task 7

• TCP SYN PING

• TCP ACK PING

• -PS23

task 8

• -R

Google Drive Link: https://drive.google.com/drive/folders/1DipOGU7gteRWmbPM6zJtYt0vulhNaQaQ?usp=drive_link

Consist of:

• Text File (Answer Sheets)

• Demo Video (Walkthrough)

• Slide Presentation

• Certificates

Members:

1. Nurhawa binti Shamsudin (2023415642) - 6B

2. Nur Shaheen Nabila binti Sahidi (2023699684) - 6B

3. Nur Amsyar Maisarah binti Md. Radzi (2023663574) - 6B

ANSWER:

TASK 3

1) wade7363

2) 3.13.0-24-generic

3) Ubuntu 14.04 LTS

4) 2.7.6

5) CVE-2015-1328

TASK 5

1) THM-28392872729920

TASK 6

1) 3

2) THM-402028394

3) sudo nmap --interactive

4) $6$2.sUUDsOLIpXKxcr$eImtgFExyr2ls4jsghdD3DHLHHP9X50Iv.jNmwo/BJpphrPRJWjelWEz2HH.joV14aDEwW1c3CahzB1uaqeLR1

TASK 7

1) gerryconway

2) Password1

3) THM-3847834

TASK 8

1) 6

2) view

3) THM-9349843

TASK 9

1) 4

2) THM-383000283

3) 123456

TASK 10

1) /home/murdoch

2) THM-736628929

TASK 11

1) 3

2) 3

3) THM-89384012

TASK 12

1) THM-42828719920544

2) THM-168824782390238