It's amazing platform... I remember opening one of beginner-friendly boxes “Lame” - I was completely bewildered at first. But as I read about SMB vulnerabilities I finally understood. What I love is the way they make learning into a kind of puzzle(Learning Module) - it’s immersive, gamified, you really earn every increment of progress. Well worth a look if you like the "learning by doing" approach... Parrot OS web based makes it super convenient: no setup stress
Inquiring Minds Want to Know about Cyber Ranges
- Thread starter Stephen Schneiter
- Start date
I'm using HTB myself, to prep for their CPTS exam and for OSCP+. I haven't used it to support a class though.
The Virginia Cyber Range is a Commonwealth of Virginia initiative with a mission to enhance cybersecurity education for students in the Commonwealth’s public high schools, colleges, and universities. Governor McAuliffe proposed the Virginia Cyber Range in the spring of 2016 as part of his vision to boost Virginia’s cybersecurity industry through strategic educational investments. https://www.virginiacyberrange.org/
I've also heard good things about https://www.cloudrangecyber.com/ but this seems a corporate training solution. They have a number of courses targeted at different cyber roles.
I liked the Cyber Skyline challenges that were at conference. The only downer was when they did the CTF last year, they reused the challenges from two years ago, or when I said, "oh, this looks familiar..." a few times.
/r
We tried TryHackMe as a supplement to our Security+ course material. The student's were not required to complete the exercises for a grade, but were encouraged. We found TryHackMe to be a bit difficult for beginners. I've heard the HackTheBox is even more difficult.
Our students managed to make it through a few of the TryHackMe exercises, but most just found the answers on "cheat sites" or YouTube videos. Basically, TryHackMe lacked actual instruction in most exercises - the students were just thrown "in the deep end" to capture the flag or whatever.
Now if we had a class on CYSA+ or Pentest+, this would be a better tool as a backup with classroom instructor-led lectures on the hacking methods, walk-throughs, demos, etc.
Our students managed to make it through a few of the TryHackMe exercises, but most just found the answers on "cheat sites" or YouTube videos. Basically, TryHackMe lacked actual instruction in most exercises - the students were just thrown "in the deep end" to capture the flag or whatever.
Now if we had a class on CYSA+ or Pentest+, this would be a better tool as a backup with classroom instructor-led lectures on the hacking methods, walk-throughs, demos, etc.
TryHackme and HackTheBox are good.
There's also the practice CTF boxes from picoCTF by Carnegie Mellon University.
picoCTF - CMU Cybersecurity Competition
picoCTF is a free computer security education program with original content built on a capture-the-flag framework created by security and privacy experts at Carnegie Mellon University.
www.picoctf.org
We don't have an internal cyber range, as the maintenance ain't something we can afford since Broadcom bought VMware; and there are now rumours in Reddit that Broadcom now plans to buy Proxmox