<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
One of the project ITS is involved in is maintenance of NASA deep-space communications software. The source code is housed on a virtual machine in the ITS data center. The code is the property of various NASA centers, and we are required to keep it safe from
unauthorized access. The software is also export controlled, which means we have a legal liability if we do not properly restrict access.
<div class=""><br class="">
</div>
<div class="">The server in question is <a href="https://inb.ocp.ohio.edu/" class="">https://inb.ocp.ohio.edu/</a> (132.235.67.10). The code management platform is a product called RedMine. I need for you to do appropriate port scanning and penetration testing.
You will need to select tools, run them against the server, and interpret results.</div>
<div class=""><br class="">
</div>
<div class="">Note:</div>
<div class="">- I cannot give you credentials on the server, you will need to do all probing from the outside.</div>
<div class="">- The server should respond to SSH and web requests; the web server should only every return a home page with a login option for unauthenticated access.</div>
<div class="">- Your scanner and the server will be on the same side of the firewall, so you may find problems that (hopefully) will not be visible outside the lab. That is intentional, those flaws still need to be fixed.</div>
<div class=""><br class="">
</div>
<div class="">You should plan on using the same workspace for collaboration as the analysis branch - see my previous message on that subject.</div>
<div class=""><br class="">
<div apple-content-edited="true" class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
Hans Kruse, Professor and Director<br class="">
J. Warren McClure School of Information and Telecommunication Systems<br class="">
Adjunct Associate Professor of Electrical Engineering and Computer Science<br class="">
367 Schoonover Center, Ohio University, Athens, OH, 45701<br class="">
740-593-4891 voice, 740-593-4889 fax</div>
</div>
<br class="">
</div>
</body>
</html>