1
Week 8 Deliverables
Overview: This week, you have studied Web application vulnerabilities, password complexity, logs and
cryptographic algorithms. The Lab for this week demonstrates your knowledge of this additional
knowledge applied using Python functionality.
Submission requirements for this project include 2 files. (Zipping them into one file is acceptable and
encouraged):
ï‚· Python Web Application Code (Python code for all routes, templates, static files and other files)
ï‚· Word or PDF file containing your test, pylint results and Cryptographic results.
Python Applications for this lab: (total 100 points):
1. (50 points) In this exercise you will update your web site to include a password update form and
provide additional validation on the password check. Specifically you should create:
a. Password update Form – This Python form allows a previously registered user to reset their
password after they have successfully logged in.
. Authentication functions – These Python functions will check the following NIST SP 800-63B
criteria are met upon password update:
ï‚· Use the previous criteria for password length and complexity. (This work should already be
done.)
ï‚· Compare the prospective secrets against a list that contains values known to be commonly-
used, expected, or compromised (Provided as CommonPasswords.txt).
ï‚· If the chosen secret is found in the list, the application SHALL advise the subscriber that they
need to select a different secret.
c. Logger – Create a log to log all failed login attempts. The Log should include date, time and IP
address.
Hints:
1. Start early. This will take you longer than you think.
2. Leverage the File I/O, Flask and Data structures work previously performed in the class.
3. Use functions to enhance code reuse and modularity.
4. Use Python Lists or other data structures to store the Common Passwords and then appropriate
search functions to expedite comparisons.
5. Use comments to document your code
6. Test with many combinations.
7. Use pylint to verify the code style – the goal is a 10!
2. (30 points) Using the Decrypting Secret Messages sites found in this week’s readings, decrypt the
following messages.
a. - .... .. ... / ... -.. . ...- / ...-- ----- ----- / -.-. .-.. .- ...
... / .... .- ... / ... --- -- . / ... - .-. .- -. --. . / .-. . --.-
..- . ... - ... .-.-.-
2
. U28gdGhpcyBpcyBiYXNlNjQuIE5vdyBJIGtub3cu
c. --- Psuwb Ysm ----
W oa gc qzsjsf. Bc cbs qcizr dcggwpzm twuifs hvwg cih.
--- S
Ysm ---
Provide the decoded message along with the Cipher and any other parameters you used to solve each
puzzle.
Hints:
1. Use the rumkin site
2. You will need to experiment some to na
ow down the possible algorithms used. Some are more
obvious than others.
3. You will know when you have selected the co
ect Ciphe
3. (20 points) Document your results of the application running from your programming environment.
You should also include and discuss your pylint results for the application. Provide your test results for
each requirement in the Web application, associated functions and provide your resulting log files.
Discuss the log file and how it could be used to possibly detect patterns of abuse. Describe the results of
your NIST password complexity functions and how you tested each requirement. Include the Cipher tool
esults and write up in this document as well.
Any submissions that do not represent work originating from the student will be submitted to the
Dean’s office and evaluated for possible academic integrity violations and sanctions.
password
123456
XXXXXXXXXX
1234
qwerty
12345
dragon
aseball
football
letmein
monkey
abc123
mustang
michael
shadow
maste
jennife
111111
2000
jordan
superman
harley
1234567
hunte
trustno1
ange
uste
thomas
obert
socce
atman
test
pass
kille
hockey
george
charlie
andrew
michelle
love
sunshine
jessica
peppe
daniel
access
XXXXXXXXXX
654321
joshua
maggie
starwars
silve
william
dallas
yankees
123123
ashley
666666
hello
amanda
orange
iteme
freedom
compute
sexy
thunde
nicole
ginge
heathe
hamme
summe
corvette
taylo
austin
1111
merlin
matthew
121212
golfe
cheese
princess
martin
chelsea
patrick
ichard
diamond
yellow
igdog
secret
asdfgh
sparky
cowboy
camaro
anthony
matrix
falcon
iloveyou
ailey
guita
jackson
purple
scoote
phoenix
aaaaaa
morgan
tigers
porsche
mickey
maverick
cookie
nasca
peanut
justin
131313
money
samantha
steelers
joseph
snoopy
oome
whateve
iceman
smokey
gateway
dakota
cowboys
eagles
chicken
lack
zxcvbn
please
andrea
fe
ari
knight
hardcore
melissa
compaq
coffee
ooboo
johnny
ulldog
xxxxxx
welcome
james
playe
ncc1701
wizard
scooby
charles
junio
internet
mike
andy
tennis
anana
monste
spide
lakers
mille
a
it
ente
mercedes
andon
steven
fende
john
yamaha
diablo
chris
oston
tige
marine
chicago
angers
gandalf
winte
arney
edward
aiders
adboy
spanky
igdaddy
johnson
cheste
london
midnight
lue
fishing
0
hannah
slaye
XXXXXXXXXX
achel
edsox
thx1138
asdf
marlboro
panthe
zxcvbnm
arsenal
olive
qazwsx
mothe
victoria
7777777
jaspe
angel
david
winne
crystal
golden
utthead
viking
jack
iwantu
shannon
murphy
angels
prince
cameron
girls
madison
wilson
carlos
willie
startrek
captain
maddog
jasmine
utte
ooge
angela
golf
lauren
ocket
tiffany
theman
dennis
liverpoo
flowe
foreve
green
jackie
muffin
turtle
sophie
danielle
edskins
toyota
jason
sie
a
winston
de
ie
giants
packers
newyork
jeremy
caspe
u
a
112233
sandra
lovers
mountain
united
coope
drive
tucke
helpme
pookie
lucky
maxwell
8675309
ea
gators
5150
222222
jagua
monica
fred
happy
hotdog
gemini
love
xxxxxxxx
777777
canada
nathan
victo
florida
XXXXXXXXXX
nicholas
osebud
metallic
docto
trouble
success
stupid
tomcat
wa
io
peaches
apples
fish
qwertyui
magic
uddy
dolphins
ainbow
gunne
987654
freddy
alexis
aves
2112
1212
cocacola
xavie
dolphin
testing
ond007
membe
calvin
voodoo
7777
samson
alex
apollo
fire
teste
walte
eavis
voyage
onnie
ush2112
ee
apple
scorpio
jonathan
skippy
sydney
scott
ed123
powe
gordon
travis
eave
sta
jackass
flyers
232323
zzzzzz
steve
ebecca
scorpion
doggie
legend
ou812
yankee
laze
ill
unne
irdie
555555
parke
topgun
asdfasdf
heaven
vipe
animal
2222
igboy
4444
arthu
aby
private
godzilla
donald
williams
lifehack
phantom
dave
ock
august
sammy
cool
ian
platinum
jake
onco
paul
mark
frank
heka6w2
coppe
illy
garfield
willow
little
carte
albert
kitten
supe
jordan23
eagle1
shelby
america
11111
jessie
house
free
123321
chevy
white
oncos
horney
surfe
nissan
999999
saturn
ai
orne
elephant
marvin
action
adidas
qwert
kevin
1313
explore
walke
police
christin
decembe
enjamin
wolf
sweet
therock
king
online
ooklyn
teresa
cricket
sharon
dexte
acing
gregory
teens
edwings
dreams
michigan
hentai
magnum
XXXXXXXXXX
nothing
donkey
trinity
digital
333333
stella
cartman
guinness
123abc
speedy
uffalo