From 7cf25face934b77826d157005071f811a64fd760 Mon Sep 17 00:00:00 2001 From: Niklas Johansson <niklas.johansson@gmail.com> Date: Wed, 27 Nov 2019 15:25:42 +0100 Subject: [PATCH] recommending using Firefox as the attack browser, fixes #6 --- TopDog.pdf | Bin 1674896 -> 1674968 bytes TopDog.tex | 2 +- 2 files changed, 1 insertion(+), 1 deletion(-) diff --git a/TopDog.pdf b/TopDog.pdf index 45808ed628c7ebf524e3d0eb03ab7264b385c54b..c5e5ecdaf5948bf2f50fb71c182d6c7511418823 100644 GIT binary patch delta 2282 zcmbO*H|@sUw1yVO7N!>F7M2#)7Pc1l7LFFq7OocV7M>Q~7QPn#7J(MQ7NHj57LhHY z|MoCj8XHe%+$*YG@7@2{jA!5T@E;n?)?ISja=vcsF8gI6a@owG@!XdO7G96~lG9Zy zm;e0k-C3mOw{fqEh-;9_{(h6we3GZ@Vm9vne_s0}tA~zu=rL};scSZOc}KloW4rd6 z{rm^Neiwed{pxbs);bZJ$8%n761kZ+zwp$B>FHBXgsjaB{G3yKYTn8E<nkG7PRge! zo^)Te|FnFU*QB$CD|cPCtQQcKT$|q}!_xoD|C-5q`KC1|<?qdze1pe&PyMUe3AG0= zmwl>}iQ%$*@IPLDen3T{>gUhR|1x}qsyBaMe(~p@_h<Dd{H*>L>NzuHMm-m=Va0~s z-?WoMUhmA%*r8LpjLU7OS6{@U6({SX`RvoW*-uOqo?M)?zvWM_uUYK<#VnnC8gt)D zL|>MAzOGy&;&Y|ZxyOvvLR+8zGdlkHcu9A?eXg1R=BeJg@^cn4w72k;J7;g;HTPg* z-*Re-My9IJtmzZJShRX{ZK=K9_Bor6eKYsJ*T;9o2q+(Y6ci+8RU&<caovkAzGfdc z)i3f2_1=GgwL<J;>+<K%9No^|RKD%PdH0pfs{C6^JsyAfrJL3}@97;E*E@wgrh6Z* z^!BSe@;{{h)Pwn%e7DNi3!ZyodS>sFue@s)xCBm(ILtlyXrr1ND|5BSwEfK6=PB|u z7p|N>rCN<q|G<avGlt6!3h{9jbR0i0>3_46c2vR6dY|Wa%%|r&6zV#5G`-qwRABYt z?sny6g+9kyxRk9gZ`t>I()39t_x7kuw&qHFQ7971Sb2iuF1PIQ>}KzUo7q;LRSsIX z+o0b3tnR{9Q7>F{gfEChJv4R-H-7#4MAe?#X1O!Ygqv`1=-Wu~2fvzqq~J?KC(q%h zJ-yA!C+1h`dUn;P`&!TQd-<}<XPq=(#b=I}?-#$`uet4TxA%qK$#dhs6nm9RuUx}A zb*qo<_KvzUN~KPppQ>qvx^7)_L6Nsh?f8k>lP5Ia+_K6$Um#VOVsdk~+L`{}4ek!& zy5APN`p(h}_<B|>)Lh%qxm-}qmo2$0qjU3OPwPXIHXc57+UoNAz<S~EYdkrn!PT0X z3opM=&Q)>0wdOEe<ov_S6-1TSsj@V1F;0Fox!vAO&Uc;TJ@ew8irnm7u1xK#Pt1Ap z<d4Z`HJ0u->|eQs*T~P7ZQxUKe=2hO&F+8p4PL&H3&nn{XyI3Rc;;&~$1B}+*>_%K z$<2M0xArXeo4%LZZ*$vNckkP+@qxEXezC*nyo?(5ZzVhPS*~ws()|>`FgIzJwMY1g z)~o!puZFK!AR0WquwF!@ebxcd_E`tS+GiaQ-#+Vr#Op)MCZ>kdJDMdGK#c9Hn<d*> zgUrm_3``v@E!`|Eoh;2Ajhrk^EnF;|9Nk<@9bHU}E$kF*2r7x?()UTtOE1Y#Ff=kW zo^H5-Rij>Ys%K7UsLZkR|G(b7)Vc4vd;IO|MkNbM78PwQS+J$mXv@+q4(b|n7p$G| z;t)&w*1!uV4oQ^j@o{plyD?+N3h6ALo=)k*kJQx55>?zDZ!pk{nUzr=Z@&M}{`Yf! z-`o4V=6~^=;&=O}7|&-nU10V!=E<3<CA;Tp$=v%miQ~Kj*ZO)<{aziWkcS-emZ*t8 z-um#P%NF)24`dHt_Mh5hv`3=9zWbCT>%GEzslq$OLmutz*xq=iK_`y?p4BF<Cm;MC z-gSD%e6_;4!hB+7Ky$fRKJUu@b%(9nw|D6@RPFg(p?!jFgM2<yzGNkX%#qzq+gof{ zq&`mjkf$))!T6rhJ*7>o^&5^9wv@}><cc`AL*l*ECf+TN-yV#1C~NTBBebV7Mckrm zJAXdkP2RWztB=igm1EYaUei0@QI1`waE(li>$e8simesl6ZS6PUoZLIXp=n8gRKvI zmHnF>ZR{@iEBZ5TQ&MyOCsZWS^I#&ceWwlYxd$I7{ZlFu*^s(%lVPI``wfeE5x>p) z_Ang#AolUt1gQ(t-m=bGBtO?BtnstQ-U}i|>|Z|rnsM4=?aRm|Vousimd-YRZp5`A zth{e}Vz*>i{iZM4wNeXWn{KtLab^icDX%ci=vdGe!2aZH>hUiUv4U3^-!3>A^NyKU z!^Gv(WO4r@Cv}DM4>c5yK4f`eaDBtF;~ZP%7rbI#^+jhQ*WPEdqD}J!1TH$PJ0w~B zcYbEWTfQd>Ju|YSC%T_uV&qIY@p@z7Dn+eJavenp-w!X@`D0?e+-x&xji94y>{j|` zX7HMxnr$k5GwA5M_R7r<B~P+?`{%As`hIxP(&@icPr50vH*&Oudat*=$gq(^`p9iY zX3c<<m*$s0ZF&BB+P=Nkt~YNy5pG-itM~nrP=+c+z0F@<pMN?v`pe7btBe%5GkSN( zU1{{{-uELq_(lH?#y9Nj2NdfsaFo=D>fEYYbkg^M!Uf4?%&VA7qQ0y-75Q=QlxL-l zdD=gJY+S-O&#Zf2rNYX$?^vZS1iDT?`qyFkdCv>k7r&Q(b(t@k|82!1ua43aFTPy7 zXp}RPKmOVZzivnEpD(me1}>QF=6*V}pz*)##y9idXLF@{?qSet@;vQpbD5#t{Y-tP zV6pTO<AiHP{qHPR*HuRZTgW}Ctm}8Sf7aG<T(|hYZEqa&^@FMgyz82z6GYcADm}Pa zaek`6eU{VH{?>jM4qNl;<vXbjA3y4zw*3=cbaz$!-|kc5jdQnGy`Hxu^5HxFbD!eV z%07Jc|5UPZiSGX|{3nx6=kH&<if2l*S3uTJ`Fd>=hjljG&q{Bm==`toW?pi#oVn=< zcSB62(UYxPSx&y@Q}CU)r$Xsz=M;74eK$Yt|F`&l_QqM$?E*`0WX1h<4PAXT=l#AP zf~)UFgkDYCdfzVOYF_D0kI?q3cmMf@F2DM7erRc=qV@8wk}9T0?rRJF$L?vFZIL)v zc$$hP>l(*Hrcx?3B~HewYuuc^tJLH>eOD>*Iutl-g9@j3-XY%E1xwY|xE;z;`5Lyv g{Lz{Z3-0~p{~qSwJ3XyWQjycrf=gA^)!&T^00U`2r~m)} delta 2192 zcmcaHH*Lb)w1yVO7N!>F7M2#)7Pc1l7LFFq7OocV7M>Q~7QPn#7J(MQ7NHj57LhHY z|MoCjm>ErH+$*YG?^}G?Kw$6l@E02A16<{&<rFqIekx4hdg5~Wpy!k$S2i}Uz3_5> z`qHVvyM1;Z(atR2`ukpV>tx%9PYyTP|Na-Jp?L6-i?mYF!5%G7MG<Y?n=<03{oO6< zuIuj8ySGm4bhc)Pz?m%FlUeR8k0rD{6gxF_PkTFtxfgk_fBko7`OW&Nr$lQHzj^&e zOJ5{b_EK1_O=|e21+ni}n=v1L{O|U?(C_P;a$lCe_dB`fmhQa!CZQkdj$HlqruI6Y zW@`6+`TV>KJ08#a{n4rZMXZtZ_Rq)jKHNNiHGRdOmH(WK*YRANALPs@_(!io@Z1{N z*==oGw;g#hhjTL1M%Tzo?L2jNq{Qn37BA2f-tu4gRe9~Fm9yD&HMY3EzEUnYt5>@1 zw4~JD-?e4U$61qv%Kgtio^f9Ol4hOVx-j#_*C#0CvmbBZW97L1_Lw4%u$m+DH34N) z?Uba?h9Y<8I;%OG`|jm@{hLQDPx{gH>r3ZxDnAwSGL#dTr6%1F&QlfW>m+_=Mv|O( z{T7DnO8X1Ga>#{*%(YqNo8_=tuArJ}`ogOX$N4vA^;}WzXya?w`|_n>wH516zWpoz zha6o0dB&EN@0I6ju9Dp-^3)~l!Xh1$Zw1Fg_oaIV9$a`|{e1p{wb34j6Jt*8e3F;> zfZO6vlj$*|ibn?-_zNXNKG|!nN!%ImxyaA=>kp=S(dlAK&djX6#^%R<?{~ogBfiX; z5f4jVuj*a@KPBqosol$!7H{Nhmh*9J*5Q52u(!cN&bmhA)xCvVTvJ}%Jdl;Ka*El? zQ@tU}th;tT`Ir-{`qJ-(?lBI5&hN(UrTrcJ>-v`*eJTF=<@Kd0t3o1Ng_bXEUtxaq zrQx3Z)S8WlRyo(tjM`Nkdg09nuIUXLRd065l~3wRT)pzz4pT{IZeK-{Y1_`_UKEzz zRC4)X!uPj2tK?%gAD;WeXGz(qB&HRbGeTLnH7(F+4ADJ&MbH1?Pv5gAyty6c?qn(b zCGwDes{3^BNz1Prr0qE{%P-L6AqR(cCYRKoO5sQE3?oBia_$$NoE^XJ*0r~CK8>@V zb8KEeyFO%*=;^gHJ|+v<2ON2z_usy;;0pJ?MaG)G^CtyndL}$|NqF4NII*;U<LwXc zj@vWvyWI`j$5wAPzfe<0JE3U(19_3tcb#?yo!xV9y;wb?=JpTMA3hZoX@77)wEe*W zvGxZC#J4{<Ao1o9vw@+}^z+S<3LwVzPtB6;tU>0ErY5H5mPVGwF6K@ahGxbtP8Q~F zCgv_iM&<^lh8A`THUyQ#a_Re|=B1ZpC>R<U8cjFcz^YNNI@LQPG+d(fdwsG0nbUWk z%&ML|`^SmHGp4URe$3{K_haQw!$9H55}z-rgl4d_{+=~$ThN;YBI!=s1q#%rI4ykZ z;=Pb#t_VB38H-gxP=>X}+|r<o&ue|`{%!qc_kG^x@4vp6o!j|8=v)oo6UW?BJ5S8i zep$9V)MD3bRl#|UB60QFaZ-^iD-Idjc>3xc%Rc<LGechEpmpQ&`C6>06^3&E#illM z?U}siv{;e-iX+vs`NA_9Ln~}6q)%i`I4XT;cdrdY)`zx_d5Xmf{pEc5vMc-79k%Y@ z-lo$~wTHW6^$E5DfqbES)=CbUW4pVy_t-E=eVq0&PieM;@jb44LYr9YHykN!DQCXP z6>)BdM84onwp$;+J=9gOc2JMwyl1nCTjscRL%Hlt-nhf756*U;$DmWargy&UJQkh8 zH8L^I-x`7|wpN5s+`E8(z2tkYP4YYswmvwk;NR?MV|T${xt$?eaI#{(q$QKv#}jSy zo#rv7f2{DV=d@(Iu_@x_43~NAITrqFYG*sdu{^Huu6XRhn{oOZv+u=zKgHDtS(n6R zNX=yZRatvRbjh_ZGC|x6MK4`CJG)qtHDY!3-03U2CBvAveTkmV*dr-ce<rl|wc#$M z70kCBC+~doTq+==V~V=|yeBPw4)YEdI&>Y@ypXsqF}7bY%iiHCd&tX3CDE$0rrWdb zDJU#zjA`Bc?AQK_47X)ZI7*ma-=@_+gOy3>#Dwd~!Xbx4me>kBJ@Bqwv-smSx!H!& z8bL?Z*sb)>%;GgaHQQLac3sz9{?GMk%9|%~Pn&ly@aVgCRd4<8-jjMA_?QGavZuw> zuVPFRH0#{X%oeoZ#HIJkpJtvn*Qrg<@7lESsCrMt*=qaKs~NsH#iYF~k3Xrs{l)A2 z&{PM}1*VUx0@$^5f4$51U1<M^tw2DA$=yNu!pG1JFMbC5<}tN5o->dQkX>+j(e$h5 z>bu@AGg;4F5`A*9`XsB0TROj98hhrJ>tAT-)7qu;j@_!(uQ{%}Zs&6KUu!B>yNiZ9 zt#Ni+-rqM(@N~_`Wp1TWJW(eP%c~r3@RO3&O+VoJul&lYe>Dp<=cs;U+QG6+$NFaw zvy7bKa@RAt0_U47Pv_k)4f}ktV_AXCk<WkR+Ux4i@Cy1zJo~p?Dwf6kK&k=ry2jZF zyla@19^9-rKULs9lXlqG-}ltlM19@7*EHer<J;3}|Ezz~c6HBR@u~VuyYs(3RG*aA zTFpQA>Av%C9vyf8RI+i2?)NwRCzDRU<yoo4{B(iPl&E*t#ibO&=dpg?m18um`fDSb z$K>~HEGNYoc7Cc)Igy>sIqABr!z`Q1k1nT#HT~OaHb1TV?X~}U(ogeiA+lTlSoeo+ zjjBt3f3!dHZCYID?5q1CLayeOO6vB#->}R2_A0Bj=jvCkI?WX-y2@j@x<cI<uJ7(2 zh4LP?l=?+XS|YN6jWc_~hl`wNr)-eoygT{BUe3FdFKBYQXC9iQ5+l8X(>&+U)L9#( nI9E@+68-RT{Txv_m3Q^8=J<6_U)Lw8$Z2HGrK;-c@5TiH4dncy diff --git a/TopDog.tex b/TopDog.tex index 802c1d3..02c4980 100644 --- a/TopDog.tex +++ b/TopDog.tex @@ -554,7 +554,7 @@ The web server will then process the request and reply with a HTTP response. Since you clicked \texttt{step}, ZAP will capture this request as well and show it to you, just like in \cref{fig:response}. Now, click the \texttt{play} button which will deactivate the break point entirely and send the response back to the -attack browser. +attack browser. We recommend using Firefox as your attack browser. ZAP has many more features, but for this lab you only need to concern yourself with the break/step/play features. Note that the web browser will be stuck on -- GitLab