Cybersecurity/Capture the Flag exercise for students

Michael Pawlik

Well-known member
Mar 31, 2022
4
11
Central Mississippi
I've been wanting to put together a cybersecurity or capture the flag challenge, or even better find something already created, to allow students to put into practice what they have learned. However, I'm not sure where to begin. The system would have to be virtual to allow the use of certain tools and I would like it to be a multi-user challenge.
Is this something that you have tried? Were you successful? Is there something that has already been created, as I don't want to "recreate the wheel" or spend a lot of money?

Thank you for your input.

MP
 

Michael Pawlik

Well-known member
Mar 31, 2022
4
11
Central Mississippi
I would say you need to ping on @Allen Stubblefield for that one. I know he does that sort of thing for his students.

/r
I was going to ask during one of the A+ TTT sessions but it seemed out of place (at the time, @Allen Stubblefield has piqued my interest in the area and getting it on his radar is a good idea.
I was at a bSides conference here in Central Mississippi when some students brought in a CtF on a Raspberry Pi (or arduino; it had a small router and battery pack attached via electrical tape) and I sure wish I would have asked more questions then.
Thanks for the reply.
 
  • Like
Reactions: Joel M
I've been wanting to put together a cybersecurity or capture the flag challenge, or even better find something already created, to allow students to put into practice what they have learned. However, I'm not sure where to begin. The system would have to be virtual to allow the use of certain tools and I would like it to be a multi-user challenge.
Is this something that you have tried? Were you successful? Is there something that has already been created, as I don't want to "recreate the wheel" or spend a lot of money?

Thank you for your input.

MP
Check out these cyber ranges ...

https://www.virginiacyberrange.org/

https://www.uscyberrange.org/ (if it looks just like Virginia that's because it kind of is)

https://www.rangeforce.com/ and


There are others including some that only cater to businesses and governments. The Virginia / US cyber range is a good reputable organization that has a library of exercises that an instructor can go through and introduce to their classes.
 

Jarrel

Well-known member
  • Feb 17, 2020
    148
    244
    Australia
    www.jarrelrivera.com
    You can create 3 VMs.
    - a windows server
    - a windows client (preferably Win 7 or older, as they got more vulnerabilities)
    - a Kali Linux machine (for attacking)

    Connect the 3 VMs together, so as to create a single LAN, then explore the tools :)
     
    Check out:


    I use this one in my program as a starter for Sec+ level stuff: