Cyberstart Intern Base Level 1

Learning Target:​
I can get a feel for what it's like to work in cyber security.

I can experience challenges of various difficulties and disciplines as I visit multiple branches of the Cyber Protection Agency.

Dropdown

First and foremost, remember that with webpages there's information ​

Select answer

what we see in the browser; code that we can ​

Select answer

. In this instance, however, it may be something hidden amongst the ​

Select answer

on the page that we're looking for - as the briefing notes, the information visible on the page is ​

Select answer

to us.

Dropdown

Real-world Uses

It may seem a little silly to hide information by having the same color text as the background, but this is a ​

Select answer

and heavily used technique even today. A good portion of ​

Select answer

emails evade spam filters this way, and it's even been used to trick search engine bots into giving sites higher rankings in search results, in what's known as "Google bombing", which pushes spam and malicious sites to be more ​

Select answer

than more legitimate sites.

Drag and Drop

The key point to note here is that what you ​

Placeholder

isn't all a computer will see - there's usually a lot of extra information for computers to work with, and it's that hidden ​

Placeholder

that can lead to all kinds of unseen ​

Placeholder

and trickery!

Drag these tiles and drop them in the correct blank above

see

data

bypasses

Multiple Choice

According to the speaker, a way to select all of the text on the page is by using...

• Ctrl + Alt + Delete

• Ctrl + A

• Ctrl + T

• Shift + T

Dropdown

Mixed Up Messages

We are told a group of ​

Select answer

is communicating via a social media site, using ​

Select answer

messages. One in particular, we believe, contains an ​

Select answer

secret and we need to find out what it is.

Dropdown

Interestingly, this is actually a tactic that cyber ​

Select answer

use in real life! They'll use real ​

Select answer

and hide information in ​

Select answer

form in plain site.

Dropdown

Real-world Uses

Until recently when machine learning and artificial intelligence got a whole lot smarter, computers have generally found understanding our natural language hard. Think about it - swap a few letters around, especially near the start of a word and a ​

Select answer

just doesn't understand what the word could be. Over the decades, programmers have written ever more sophisticated techniques to help software to "unjumble" letters, but it still can be hard for computers to ​

Select answer

.

Multiple Choice

The Agent in the video went to Google to help break the code. What did he type in Google?

• Help me break a code.

• Encryption Breaker

• Code Decipher

• Reverse Text

Dropdown

Social Engineering

Permission has been granted to try and log into the Chirp social media account of a ​

Select answer

who goes by the name of D4YDR3AM. Luckily for us, they've been ​

Select answer

with their personal information. We know their dog's name is ​

Select answer

and they were born in ​

Select answer

. Can you use what we know about them to guess their password and get us into their account?

Dropdown

We know their dog's name, ​

Select answer

, and that the hacker was born in ​

Select answer

. We need to use these pieces of personal information to try and guess the user's ​

Select answer

. This challenge is based on something that unfortunately happens a lot in real life: using ​

Select answer

information to craft a password.

Drag and Drop

Real-world Uses

People generally pick bad ​

Placeholder

. They're often too short and based on readable ​

Placeholder

. So an attacker could use programs to try brute forcing a huge variations of login ​

Placeholder

, perhaps be lucky enough to guess the right credentials and so gain access.

Drag these tiles and drop them in the correct blank above

passwords

words

attempts

security questions

Dropdown

Users also share too much about ​

Select answer

online - family name, age, location, favourite sports team, pet names and more. ​

Select answer

can use this to tailor and so filter down the list of words their brute forcing software will try. There's even software out there for hackers that will "profile" users to ​

Select answer

a list of words, so hackers can automate the initial process of targeted password attempt lists and so have a list of smarter login attempts produced more efficiently! ​

Select answer

continue to be one of the greatest entry points for malicious actors.

Multiple Choice

What was the first password guessed by the Agent in the video?

• Barkley93

• 93Barkley

• 1993Barkley

• Barkley1993

Drag and Drop

Lazy Locked In

Briefing: The agency recently purchased a home hub for the office to automate appliances like lights and thermostats. But recently, we've been receiving complaints about irregular temperature ​

Placeholder

and lights unpredictably turning on and off.

We've found where you can access the home hub settings along with the sign in details, but it turns out you can only submit the form and sign in from a ​

Placeholder

laptop. We need you to figure out how we can ​

Placeholder

this restriction so we can adjust the settings and restore normality in the office!

Drag these tiles and drop them in the correct blank above

changes

technician's

bypass

ignore

enhance

install

Dropdown

As the briefing also notes, the username and password are already provided for this challenge. The problem is, we can't click the "​

Select answer

" button to complete the login. We can click the Open Devtools button in the top-right of the ​

Select answer

. This will open the inspector to the right side of the window. We can see an ​

Select answer

comment - content that is visible amongst the code itself, but hidden from display on the webpage: "Developer notes: This will be disabled if page not accessed from technician's laptop". Underneath this we can see another element, and notably, a disabled attribute on it: <input ... value="Enter" disabled="">.

If we click the disabled attribute and hit the Delete key on your keyboard, we can ​

Select answer

it from the element entirely. When removed, hit the "Enter" key on your keyboard to save the changes to the element. Now, we're able to click the "Enter" button on the Homehub login, and receive the flag for the challenge.

Match

Match the following

[e-mail]

time4hackattack

Barkley1993

value="Enter" disabled>

• [e-mail]

• time4hackattack

• Barkley1993

• value="Enter" disabled>