Within your course repository, create a directory "hw5". Commit and push to your remote repository.

cd <path_to_repo>
mkdir hw5
touch hw5/app.py
touch hw5/screencast_url.txt
git add hw5
git commit -m "initial commit for hw5"
git push

In this homework, based on the lab exercises, you will create your own LangChain application to automate the identification, patching, and/or exploitation of vulnerable code or CTF levels.

• Automate the identification of vulnerabilities in known vulnerable code repositories (Copilot corpus | theZoo)
• Automate exploitation of CTF exercises (Github Secure Code Game, Overthewire CTFs, picoCTF, cs205 CTF, cs492 CTF, angr CTF)
• Automate exploitation of specific web vulnerabilities using custom tools (SSRF, Command injection, File-path traversal, Information disclosure, Deserialization, Insecure File upload, XXE)
• Automate exploitation of specific vulnerabilities in C (Use-after-free, Heap overflow, Integer overflow, Array out-of-bounds access, Buffer overflow)

Your development should be organized and incremental, with frequent commits into your git repository. Code should also be properly documented via Python docstrings. In addition, you must also ensure API keys do not show up in your source files, but rather are passed in via environment variables. Ensure your application code is pushed to your repository before class.

Screencast

Upon completing your application, via a narrated screencast of no longer than 5 minutes, you will perform a demonstration and source code walk-through of the application using the script below.

• Check out the application source code from your course repository.
• Demonstrate the application running showing both its capabilities as well as its limitations
• Perform a source code walk-through using your repository on Gitlab to explain how the application has been implemented.

Upload your completed screencast on MediaSpace. Ensure that it is published as "Unlisted". Then, update the file screencast_url.txt in the homework's directory to contain the URL that your unlisted screencast on MediaSpace is located. Push the changes that include the updated URL to your repository before class.

Rubric

We will be using your screencast and git repository to evaluate your homework.