secuimag3a

Based on a flaw or vulnerability either proposed by the instructor or chosen by you (which must be related to the proposed theme):

Specify which service or program is compromised, and what type of compromise it is
Explain the vulnerability, describe the mechanism used to exploit it
Does this flaw affect client machines or server machines?
Describe a typical information system architecture that could be involved in exploiting these flaws. This can take the form of a diagram describing:
    the services implemented,
    the affected machines (clients and servers),
    network equipment,
    interconnection networks.
Once this description is complete, and as a system administrator on a network containing potentially affected machines, what would you recommend in your report to:
    limit the impact of exploiting these flaws?
    prevent them from being exploited?
For this flaw, propose an experiment to demonstrate the vulnerability and its exploitation:
    By setting up a virtual machine (can be a Docker image) with the vulnerable service, the report will indicate how this machine was created
    By describing an exploitation procedure for the flaw while explaining its mechanism. This exploitation can use the Metasploit framework or exploits available on the Web (citing your sources)
Attach a glossary of terms used to the assignment
Attach all references used to the assignment
This work must be completed twice: once before the end of December and once in January. Peer evaluation is organized so that you can learn from each other's work. The grade takes into account the work done (by groups of 3), as well as the evaluations made by each person (done individually).