<commit_before><div class="row">
    <div class="col-xs-12">
        <h1>Challenge: Session -Session Hijack</h1>

        <h3>Goal</h3>
        <p>
            Given that Mary, a VIP from a bank, has been login to the system.
            We are going to hijack her session and do things on behalf of her.
        </p>

        <ul class="nav nav-tabs" role="tablist">
            <li role="presentation" class="active">
                <a href="#guideline" aria-controls="guideline" role="tab" data-toggle="tab">Guideline</a>
            </li>
            <li role="presentation">
                <a href="#solution" aria-controls="solution" role="tab" data-toggle="tab">Solution</a>
            </li>
        </ul>

        <div class="tab-content">
            <div role="tabpanel" class="tab-pane active" id="guideline">
                <ul class="list-group">
                    <li class="list-group-item">
                        We have a dummy account where name and password are
                        both "<PASSWORD>".
                    </li>
                    <li class="list-group-item">
                        For each successful login, bank system will given us
                        an example of session ID.
                    </li>
                    <li class="list-group-item">
                        Cookies of this page is editable through browser's
                        console.
                    </li>
                    <li class="list-group-item">
                        Invalid cookie guess will deactivate current session
                        ID.
                    </li>
                </ul>
            </div>
            <div role="tabpanel" class="tab-pane" id="solution">
                <ul class="list-group">
                    <li class="list-group-item">
                        Get serveral session IDs pattern by loging in and out
                        with dummy account and check it on browser's console.
                    </li>
                    <li class="list-group-item">
                        After studying those session IDs, we know that session
                        ID is in format of "USERNAME:RANDOM_NUMBER".
                        RANDOM_NUMBER seems fall in a range of 1 to 10
                    </li>
                    <li class="list-group-item">
                        Brute force the session ID by typing follow command in
                        the brower's console.
                        <code>document.cookie = "SID=mary:GUESS"</code>.
                        Replace GUESS with digit from 1 to 10 and click
                        "Transfer money on behalf of Mary" button to verify.
                    </li>
                </ul>
            </div>
        </div>
    </div>
</div><commit_msg>Fix invalid description in the solution<commit_after><div class="row">
    <div class="col-xs-12">
        <h1>Challenge: Session -Session Hijack</h1>

        <h3>Goal</h3>
        <p>
            Given that Mary, a VIP from a bank, has been login to the system.
            We are going to hijack her session and do things on behalf of her.
        </p>

        <ul class="nav nav-tabs" role="tablist">
            <li role="presentation" class="active">
                <a href="#guideline" aria-controls="guideline" role="tab" data-toggle="tab">Guideline</a>
            </li>
            <li role="presentation">
                <a href="#solution" aria-controls="solution" role="tab" data-toggle="tab">Solution</a>
            </li>
        </ul>

        <div class="tab-content">
            <div role="tabpanel" class="tab-pane active" id="guideline">
                <ul class="list-group">
                    <li class="list-group-item">
                        We have a dummy account where name and password are
                        both "john".
                    </li>
                    <li class="list-group-item">
                        For each successful login, bank system will given us
                        an example of session ID.
                    </li>
                    <li class="list-group-item">
                        Cookies of this page is editable through browser's
                        console.
                    </li>
                    <li class="list-group-item">
                        Invalid cookie guess will deactivate current session
                        ID.
                    </li>
                </ul>
            </div>
            <div role="tabpanel" class="tab-pane" id="solution">
                <ul class="list-group">
                    <li class="list-group-item">
                        Get serveral session IDs pattern by loging in and out
                        with dummy account and check it on browser's console.
                    </li>
                    <li class="list-group-item">
                        After studying those session IDs, we know that session
                        ID is in format of "USERNAME:RANDOM_NUMBER".
                        RANDOM_NUMBER seems fall in a range of 1 to 10
                    </li>
                    <li class="list-group-item">
                        Brute force the session ID by typing follow command in
                        the brower's console.
                        <code>document.cookie = '"sid=mary:GUESS"'</code>.
                        Replace GUESS with digit from 1 to 10 and click
                        "Transfer money on behalf of Mary" button to verify.
                    </li>
                    <li class="list-group-item">
                        Answer is
                        <code>document.cookie = '"sid=mary:7"'</code>.
                    </li>
                </ul>
            </div>
        </div>
    </div>
</div>
{'fraction_non_alphanumeric': 0.09855272226051, 'fraction_numerical': 0.00430737422467264, 'mean_word_length': 1.1595982142857142, 'pattern_counts': {'":': 0, '<': 100, '<?xml version=': 0, '>': 100, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '2642945', 'n_tokens_mistral': 1472, 'n_tokens_neox': 1341, 'n_words': 461}