Advanced Cybersecurity-3rd & 4th Periods Assignments

Here is some summer fun for you.

FYI

If you are one of the people listed below whose screenname isn't your real name, let me know who you are so I can give you credit for participating.

Happy Star Wars day.   Log into Code.org using Google and complete the Star Wars Hour of Code lesson.

Here are the list of awards for CyberStart America participants.  Those of you who reached 20,000 points should be receiving an e-mail on FRIDAY inviting you to apply for the scholarships and awards.  I will make time in class for you to do this!  Read through the whole page because many of you will qualify  in more than one category.  There are awards for Cyber Patriot, pico, WiCyS, etc.

I'm seeing a lot of missing assignments still, so tomorrow will be a make up day to get all that work in.

CyberStart America ends on Wednesday!  We are the #2 school in the state for SCHOLARSHIP eligibility!!  If you haven't made 20K points yet, there is still time.   Let's finish strong!!!

I have ESXi installed on both of the servers, so we need to start working on creating VMs.  There should be a copy of Server2016 under Documents\VirtualMachines on ehscyber.  It may need to be unzipped in some cases.  If you feel comfortable, you can begin cloning that original VM and going into the Server Role tool and creating a variety of machines for the network.  Top priority will be a DNS server if someone wants to tackle that.

If you DO NOT feel comfortable to engage in this process, pull up CyberStart or NCL and work on those competitions.  The NCL team game starts this afternoon and ends Sunday, so you have a small window to compete.  CyberStart ends in 5 days so this is your last chance to work your way into the scholarship zone.

To those of you who complete assignments as I post them, thank you.  I appreciate your dedication.

To the rest of you - time has run out.  Please stop e-mailing and asking for extra chances.

The NCL team game starts on Friday.  CyberStart ends on April 27th.  Please work today to try and improve your situation in those two opportunities.

My son was still spiking a fever and having stomach issues, so I needed to stay home with him again today.  I should be there tomorrow.  Hopefully Asher brought the UPS in from the Media Center yesterday.  In the meantime, this is a good current event for you to review.  I'm adding the EdPuzzle and Tallin Manual for you to look over again as a refresher.  If you get through this stuff, feel free to continue figuring out the architecture for our sandbox -- I think we can use VMWare VSphere as the hypervisor.  If not, there are some other open-source options.  I also want to host Metasploit on one of the servers, so if you want to familiarize yourselves with that it would be helpful.  Be ready to roll up your sleeves when I get back.

My son is sick so I will not be there today.  You should notice I have unboxed one of the servers I bought.  It does not have an operating system loaded, but we are going to set up hypervisors on them and create a sandbox network.  I have a copy of Server 2019, but we will also need to use as much open source software as possible.  I will need your help designing and setting up the network.  I also have three VPN routers and several switches to help create the illusion.  I also have some old soho routers and a working Windows 7 machine in addition to the several Windows 10 and Raspberry Pi systems, so we can imitate quite a bit.  Today I would like you to research and sketch out a plan to employ all these items.  Since we will be isolated from the internet, we will need to create our own DNS, DHCP, CA, etc. so you will need to take that into account as well.

If you want to try the picoCTF, I'll give you extra credit if you join my picoExtraCredit classroom using join code:  

CfZ9NWGFJ    Let me know that you have joined and what your username is so I can track your progress.  1st year IDT or AP CSP students need to reach 500 points to earn the extra credit.  3rd year Advanced Cyber students need at least 1,000 points individually to earn the extra credit.  You have until March 29 to gain points.  Good luck!

My daughter came home sick last night so I won't be in today. 

If you have access to a computer in your split classroom, work on either CyberStart or picoCTF.  If you are stuck using your phone, read the attached article and answer the questions in Quia.  If you don't have either (not sure how you are reading this) then I will push paper copies to the teachers for you to do the old school way.

CSP students check out the TED talks linked below if you can.

Click on the link below to start the game

Women of the NCL Webinar
March 15, 3 - 4 pm ET (12 -
1 pm PT)











 














The National Cyber League is delighted to
host a female-forward, ‘Women of the NCL’ webinar event to celebrate,
motivate, and encourage women in our cyber community. Witness the stories
of inspiring women as they share their journeys to becoming cybersecurity
professionals.



The webinar will have a female-lead panel representing women from
industry and academia as well as current and former NCL players. Share
the event with a friend and learn about our ‘Refer-a-Friend’ promotion
for attendees only. 



We're excited to have you join us! Register today.

You can post the .pdf here

Complete the lab.

Try this out and see how you do

This is a task you may need to complete on the certification exam.

Please knock out this lab on Asymmetric cryptography using the same tools as yesterday.

The Carnegie Mellon University is sponsoring a three-week long CTF.  If you would like to get practice working with CTF challenges I will offer you extra credit.  If you decide to do this, you need to register with the picoCTF website, register for the event, and join the picoExtraCredit classroom using code:  

CfZ9NWGFJ

Answer the following questions about the CTF.

Here are the directions, team assignments, and some tips for the CTF tomorrow.  REPORT DIRECTLY TO YOUR ASSIGNED LAB AT THE BEGINNING OF 3RD PERIOD TOMORROW.  We will set up name cards for the teams so you can all sit together.  Sign in and make sure your VMware and internet are working.  The event should start promptly at 10, so be ready to go.


IF YOU ARE ABSENT FOR SOME REASON, YOU CAN CONNECT REMOTELY AND STILL PARTICIPATE WITH YOUR TEAM.  YOUR TEAMMATES CAN SET UP A GOOGLE MEET OR USE SOME OTHER METHOD TO COMMUNICATE WITH YOU.

In preparation for the CERTS CTF next week, if you have gotten through Level 2 in Moonbase on CyberStart America, try one of the links below to test your skills:

Use the Windows SERVER image to complete this lab.

I will be out again today, so if you are somewhere without a computer, work on this soft skill exercise.  Instead of typing it out just use notebook paper to complete it.  Don't worry if you do not have a lot of things to write down.  This is a good thinking exercise for you to go through, especially if you plan to apply for work-based learning or college.  You can see what types of things you need to work on.

Here's a good exercise for you to do while I'm out today.  Fill out the form from your point of view.  Consider how this impacts the work environment.

Here is some light reading for you to be familiar with.  Generally speaking, you need to recognize these different pieces of legislation and what they cover because they affect the way data is maintained.

Look over the GDPR case study and compare to the NIST guidance.  Depending on what sector of the economy you would be working in, these can all impact the way you conduct day-to-day operations.

TEMPEST is an NSA program that dictates the minimum security practices for Sensitive Compartmented Information Facilities (SCIF) and other government facilities that process sensitive information.  The program information is classified, however, you can learn about many of the practices through other means and there is an expectation on the CompTIA Security+ Examination that you will have a basic understanding of what TEMPEST is even if you do not know the exact specifications.  The links below will give you some additional insight on the program and the attached checklist should give you some clues as to what the program covers.

Watch these videos and compare the security and operational features of the data centers to the descriptions in your textbooks.  

Those of you taking the exam 3rd & 4th periods -- the exam will be open for 24 HOURS starting at 09:00 TODAY and ending at 09:00 TOMORROW.  You MUST complete it before then.  The Secret Word is GRINCH.  You have 1 attempt to score as many points as you can.  The questions with higher point values are significantly more difficult.

The semester exam will be a CTF-style exam with anything from NCL or CyberStart through HQ level 8 as fair game.  Here is a practice version for you to try.  If you plan to exempt, I will probably have another teacher sign off on your forms tomorrow if I am not back at school by then.

Work hard today to score as many points as you can.  Make good use of the Field Manual, internet searches, and each other.  I'll post one last grade for your progress and then we will begin reviewing for the semester exams.

I will be out today.  Continue working through the CyberStart challenges. I will put up review material for the exam later today.

If you haven't already created an account, pleas do so.  Then,  edit your profile to reflect your name in some fashion and join the Advanced Cyber group using this code:  grant-massive-reported

Work through these two labs to get an understanding of some of the web attacks you have reviewed in the Power Point lessons.  You should have a clean Windows 10 VM called Windows 10 Pro ehscyber somewhere on your computer (you may need to search for it).  The password is Ev@nsKn1ghts!.  

Take the quiz at the link below.  You may use any tool you find to help you solve the puzzles EXCEPT another person.

Happy Friday.  Let's see if you can apply the stuff from the Power Points.

These should be fairly familiar to you.

The link below is a comprehensive FAQ for the team game.  Make sure you get a prior approval for 6th and 7th tomorrow!

NCL Team Game Setup Deadline is Nov 4


Team Game Setup Start Time: Nov 5, 1 pm ET (10 am PT)
End Time: Nov 7, 9 pm ET (6 pm PT)

Compete with the other members of your team against all the other teams in NCL!

Each team may have up to 7 players and do not need to be from the same school. Team Game roster sign up

Read more about our NCL Fall 2021 Season Updates. NCL Swag Shop is Open!
Get ideas for prizes, incentives, and gifts.Shop Now! Enumeration & Exploitation Pro Tip: 
If gdb and assembly aren't your strong suit, use the powerful decompiler in Ghidra. Learn more about the National Cyber League at:cyberskyline.com/events/ncl/info View this email in your browser
You are receiving this email because you have signed up for or indicated interest in the National Cyber League.



Cyber Skyline
1531 Rockville Pike #1010Rockville, MD 20852
Add us to your address book

Want to change how you receive these emails?
You can update your preferences or unsubscribe from this list.

When you are ready.  This quiz has 10 questions and is timed for 10 minutes.  You will have ONE try at this quiz, so please study first.

Same drill as before.  Let's shoot for Nov 2 for the quiz.

Take a screen shot of any solved puzzles to earn extra credit!

Here are the first of a series of NICERC Attack topics that match the SY0-601 objectives.  Many of these are very simple and should only be reviews.  Go through the slide decks and accompanying quizzes to make sure you understand each topic.  On Friday I will give you an assessment.

Take the below quiz over Attacks 1.1 - 1.9

Individual game starts at 1:00 today!

This should reinforce your use of web exploitation tools.  Take good notes!

Here is some practice on SQL Injection.  Keep notes so you can use them during the competition next week.

While we wait for the results of the placement round, I want to have you review some of the skills you may need for the individual round.  I'll give you your access codes in class today.  I'll be grading these labs based on your flag submissions, so please don't skip those.

The Pre-Season opens next Monday, Oct 11 at 1:00 pm and runs until Oct 18 at 9:00 pm.  You will have that space of time to score as many points as you can.  Your grade will be dependent on your final bracket:
Gold 100
Silver 90
Bronze 85

Do your best to score as many points as possible.  Your goal is to make it to the top bracket!
Gold 100
Silver 90
Bronze 85

Score more points in the Preseason!  I'm going to give you daily formative grades for your work.

Read the articles below and answer the Quia quiz questions in the related links.

This should be pretty easy -- just 5 questions.  Use the files below to answer questions.  

 Keep working on Cyberskyline.  I'll post the next summative assessment soon.

This assessment has 10 questions randomly-selected from Open Source, Cryptography, and Password Cracking.  You have 1 hour and 30 minutes to answer all of the questions.  You may use any tools you wish to complete the tasks.  You may pause your progress and complete it at another time.  Each student will receive 8 randomly-selected questions.  There are also 2 common questions, so please do not reveal answers to one another.  Unless otherwise specified, all answers are English words, so if your solution is unreadable, it is wrong.

CHECK YOUR GRADES!


If you have any assignments marked as missing, or you have low quiz / test scores, now is the time to do or redo those.  You will find most retake quizzes in Quia on your class webpage.

Hey folks, sorry to do this, but my daughter came into the bathroom this morning at 6:30 and started vomiting, so I'm home with her again.



Please complete the Edpuzzle below.  I have cut this video down to trim some of the spurious commentary and hopefully just left the meat.  Please watch and answer the questions.  When you are finished, go back to the Gym and work on completing Open Source, Cryptography, and Password Cracking sections if you have not already done so.  I would like to include those grades in your progress reports.


If you need to use the Kali VMs, the login passwords should be root / toor  OR kali / kali depending on which version you launch.

As an introduction, try to complete the Open Source module during class today.  If you finish it, move on to Cryptography

I am interested in starting student chapters for two professional Computer Industry (specifically Cybersecurity) organizations:  Women in Cybersecurity (WiCyS) and the International Consortium of Minority Cybersecurity Professionals (ICMCP).  As the names imply, they are specifically designed to connect and assist professionals who are women or who identify as minorities.  WiCyS already has a student chapter process set up, we would just need to apply.  ICMCP does not; however, if there is interest, I will coordinate with the Atlanta chapter to see if we can be an affiliate.  Both organizations offer scholarships and mentor programs for students who are serious candidates to enter the computer industry.  This would also be a great opportunity for those of you looking to get a leadership position for a college resume since we will need to develop a charter and appoint officers.


If you are interested in being a member of either of these organizations, please respond to this post.

If you got the Acknowledgement form I gave you on Monday signed by your parents, please turn it in to the sub and I will get them to the front office.  If you lost it or didn't get one, there should be some extras on the teacher desk without the computer on it.

We will be able to register for the NCL competition starting Monday.  Once you get in, you will have access to the Gymnasium.  It is similar to what you experienced with picoCTF last year; however, there are guided areas for you to go through.  I will be grading your completion of each area, so I want to take this lull to get you prepped for the activities.  Below are links to two videos that take you through all of the different tasks you will need to do.  Some of them will be very simple and familiar to you.  If you want to skip through those parts that is fine with me.  I want you to take notes and pay attention to the tasks you do not know how to do well or at all.  I will not lie and tell you the presentations are exciting.  You have to intrinsically find the motivation to get through them.  But this is a great opportunity to use your time to pick up the skills you need.  If you have questions, please post them to this thread so everyone can see the answers -- if you have a question, I doubt you'll be the only one.  

The rubber meets the road on Monday!  Last night NCL did a crowdcast on password cracking which they posted to their youtube channel below.  If you finish with the other videos I gave you yesterday, go ahead and dig through the youtube channel to find topics that interest you / that you need more help with.  See you Monday!

This lab is from the introductory material and takes you through certification and post-high school education options you might consider.  I would like you to complete the lab to help educate yourself on the different opportunities.   When you are done, you can do the other activity on FBLA that I'm having the other classes do (posted separately).  

1.  Before you start this assignment, make sure you have posted a screenshot of your score report from the Ubuntu image to yesterday's assignment.  If you did not finish that, please do that first.


2.  This assignment was designed by the FBLA sponsors in the county to familiarize you with our pathway's Career Technical Student Organization (CTSO) - Future Business Leaders of America (FBLA).  If you want to qualify for membership in the National Technical Honor Society (NTHS) or be awarded higher diploma seals at graduation, you need to be an ACTIVE member of FBLA.  FBLA is a national organization that offers scholarships through various regional, state, and national competitions.  There are a number of Information Technology (IT) competitions to choose from, or you could pick something not related to IT.  Please carefully consider joining FBLA as you do this assignment.  If you decide to join, I have attached the membership form link below to make it easier for you.

I want to test these Cyber.org lessons they've developed.  These are the first two in a malware series.  The second one asks you to set up a phishing scam using Ubuntu.  Since we are not in a closed range, I want you to be careful as you do it.  You can attempt to phish each other, but don't go after a whole mailing list.  

Follow the directions for the attached lab and upload your completed work.

During the year we will expose you to tools and techniques that could potentially allow you to penetrate security protocols on computer systems.  For this reason, you need to act responsibly and within the bounds of the law.  Please read the attached document, sign and date, and have your parents also sign and date.

1.  Finish your Quia pretest!  www.quia.com/web


2. Work on the Cyber Patriot XIV Exhibition Round image.

Take this test and post your results.