Spider Inductions '23 Onsites - Day 1

NOTE

We value your attempts. Try to do as much as possible. Happy learning !!!

Application & API Pentesting

Brute Force

An important part of securing your applications is having strong passwords. A weak password can be susceptible to brute force attacks which are when common passwords are directly fed into a website's login page.

Your task is to log in to the admin account with the help of tools such as Burp-Suite and Hydra to execute a brute-force attack.

Website link

Reverse Inductions

Endpoint analysis is an important step in a penetration testing process that identifies all available endpoints of the target API. The Spider inductions portal interacts with a REST API to perform operations on the participants' data.

You are assigned the task to reverse engineer the API and identify all accessible endpoints. You should also figure out the request and response schema. Submit your report as a postman collection.

Spider Inductions Portal Link

Web 2 Applications

From Web to Mobile: BizToc App

Transform the current BizToc website into an appealing mobile app. The goal is to efficiently manage on-screen data and easy accessibility.

NOTE:

You can choose between designing or developing, and you can select your preferred tech stack.

Website link: https://biztoc.com/

Good luck 💻 !

Drudge Report Revamp

Revamp the Drudge Report website to improve user experience and modern aesthetics.

NOTE:

You can choose between designing or developing, and you can select your preferred tech stack.

Website link

Good luck 🚀 !

IKEA Store Owner Admin Panel Design

Task Description:

Your task is to design a focused and efficient store owner admin panel for IKEA, consisting of essential functions such as inventory management, sales analytics, staff administration, and product management. This admin panel will help store owners oversee and enhance these aspects of their IKEA store.

Requirements:

1. Inventory Management:

Design an interface for tracking and managing inventory levels. Include features for adding new products, updating stock quantities, and setting alerts for low-stock items.

2. Sales Analytics:

Create visual representations of sales data, offering insights into sales trends, top-selling products, and revenue. Ensure that the data is presented in an easily digestible format.

3. Staff Administration:

Develop tools for store owners to manage their staff. This should include adding and removing staff accounts, assigning roles, and viewing employee performance metrics.

4. Product Management:

Design a section for adding, updating, and categorizing products in the store. Include options for adjusting prices, descriptions, and availability.

Website link: https://www.ikea.com/in/en/

Good luck Designing 🔨 !

StudySpot Finder App

Task Description:

Your task is to create a concept and design the user interface for the StudySpot Finder App. This app is intended to help students find suitable places to study or work, utilizing IoT data from various locations. Your design should focus on delivering a seamless and user-friendly experience for students.

Requirements:

1. Room Information Display:

• Create a screen to display real-time room data, including temperature, humidity, occupancy count, and lock status.
• Design an interface that effectively communicates the room conditions at a glance.

2. Community Messages:

• Design a platform for users to post and read community messages about room conditions, cleanliness, and maintenance.
• Focus on making the message board engaging and organized.

Provide a brief explanation of your design choices, rationale behind visual elements, and user experience considerations.

We look forward to seeing your creative approach to the StudySpot Finder App 📱!

Password Safe

Design a password safe to store users' passwords to other applications and subscriptions. The following features can be implemented:

• Login system to authorize users
• Feature to add and update passwords
• Feature to view the password of an application/service/subscription
• Integrate the application with an API to check the strength of the password entered
• Implement a feature to share passwords securely

File Sharer

Develop a portal where users can upload files. Uploaded files can be accessed and downloaded using a link associated with it. Access to files should be modifiable by the file owner. Admin should be able to set file access.

1. Public
2. Private
3. Share with certain groups of users

Project Tracker

Design a project tracker that can help the user keep track of the status of the project that he/she has undertaken individually or along with a team. The following features can be implemented:

1. Enable the user to create new projects and add team members. The creator of the project must become the team leader.
2. The application must create a profile for the team members added.
3. Let the users search for a project based on a unique project name.
4. Allow only the team members to view the details of a project. Validate the user before displaying the details.
5. Only the team leader must be allowed to edit project details.
6. Facilitate the team leader to set milestones and mark them when completed

Site Monitor

Build a service that periodically checks for the response time of the URLs provided to it. In case of downtime, the admin should be alerted with an email notification.

Web Automation

Site Docs Summarizer

You have to build a Chrome extension that can be used to summarize all the links that lead to any document (.pdf, .doc, .xls, etc.) within a URL, and when a user clicks on the extension popup, it should show all the links along with the summary of the content within them.

● For the summarization part you are not required to create your own summarization pipleine, Instead Hugging Face provides something called Inference APIs. These are API endpoints for any particular model made available by Hugging Face. All you need to do is review the docs, figure out how to send proper Requests and get the summarized content.

For example, you could use something like the Document Summarizer model with its Inference API (by going to "Use via API" at the bottom) The above is just an example. You can use any model, and it's Inference API for this.

Decentralized Applications

Decentralized Fundraising DApp

Build a decentralized fundraising platform on the Ethereum blockchain to enable individuals or organizations to raise funds for their projects or causes. The DApp should allow users to create fundraising campaigns, contribute to existing campaigns, and track the progress of each campaign.

Decentralized Chat App

Create a decentralized chat app that relies on peer-to-peer communication without depending on a central server.

• Allow the users to chat personally with other users.
• Implement a group chat feature.