Live data from Hacker News

Virtual Cybersecurity Escape Room

eloeffler.gitlab.io

71–80 of 95 posts

Re: Virtual Cybersecurity Escape Room

#71
Solid prototype! As others have pointed out the clicking is a bit janky on Firefox but the exploratory aspect and world building is well done.

One thing I noticed is that the real online banking window displays "UPC Bank" in the title bar (just like the fake one). I guess that's a mistake since that was one of the main giveaways that it was fake.

Re: Virtual Cybersecurity Escape Room

#72
Concept reminds me of the hacking minigame from ‘Enter the Matrix’ on PlayStation 2. The game presented you with a DOS prompt and a few simple commands; you had to unlock new commands and uncover hidden information by exploring the file structure and inferring from the output of commands available to you.

Made a very positive impression on a much younger me. The DOS prompt on my parents’ PC had always been a bit scary, since I didn’t really know what I was doing and was worried I might mess something up. The game was a (very limited) sandbox in which I could mess around without consequences:

https://www.ign.com/wikis/enter-the-matrix/Hacking

Re: Virtual Cybersecurity Escape Room

#73

Earlier quoted context omitted.

There's a hint in the desk drawer (you need to zoom in even further to see it) that is a reminder to change the passcode. Similar to a TODO comment... it just never got done.

Is it really a reminder to change the drawer passcode, or rather a password hint for the computer in case Anne ever forgets?

The bottom drawer is a reminder for the top drawer lock, the top drawer is for the computer.

Re: Virtual Cybersecurity Escape Room

#75

Hi, I'm the maintainer and put together the code for this first working prototype of the digital version of the game. Thanks already for your feedback! I will gladly provide hints here if you get stuck :) Many thanks also to atum47, whose FOS, Fake Operating System I've used for the game. You can find it here: https://github.com/victorqribeiro/fos We have developed the game at the University of Applied Sciences and A…

I like it, but the format for the password was pretty frustrating.

yeah, seems like theres not enough hint to let on how this should be formatted.

Re: Virtual Cybersecurity Escape Room

#76
post #28

I won! I had to get the bank account number from the JS source however :)

I would say that is equivalent to asking Marwin. So you pass :) In fact, this is a welcome solution to the game. When used as an educational tool, this can be used as a starting point to discuss ways to bypass intended ways of accessing something.

Yeah the click zone on the object where you find the bank account is so small I thought it wasn't clickable. In the end I looked at the JS and then it became clear where it was and that it was actually clickable.

PS: Marwin sounds like a dick. He's whinging about her holidays and doesn't even know about her newborn, clearly didn't give her maternity leave either. I don't think I'd actually help him :D

Re: Virtual Cybersecurity Escape Room

#77

Earlier quoted context omitted.

I like it, but the format for the password was pretty frustrating.

yeah, seems like theres not enough hint to let on how this should be formatted.

It's there actually, inside part of the desk, which you don't need any knowledge to open. Just assume the person is stupid :P

Re: Virtual Cybersecurity Escape Room

#78

I got frustrated trying out different passwords, so I looked at the source code. The username is "anne.kingston". I found the password hash, but not sure how to go back to get the password itself. Password hash: (hashy == "3880" && saltedhashy == "2425") The hash is computed in a loop as: `prehash += (s[i].charCodeAt() * (i+1));` I'm not sure how to go reverse this. Maybe someone can help? Here's a tuple of passwords…

Yeah the JS gives some snide comments about this being the 'creative' way. But this is what I like about pentesting. There is no good or bad way. If you get stuck, try something else. Any way you can break the system is a good one.

Re: Virtual Cybersecurity Escape Room

#79

Hi, I'm the maintainer and put together the code for this first working prototype of the digital version of the game. Thanks already for your feedback! I will gladly provide hints here if you get stuck :) Many thanks also to atum47, whose FOS, Fake Operating System I've used for the game. You can find it here: https://github.com/victorqribeiro/fos We have developed the game at the University of Applied Sciences and A…

I think the only other confusing part is the bank email. Given that the premise is that her cybersecurity is weak, I would think that the transactions are actually because she fell it.

Re: Virtual Cybersecurity Escape Room

#80
It was nice to take a break after work and have a quick challenge. I guess the hard part was the password, after login it was over quickly. The game almost lost me on password guessing, I misunderstood something and had a different date. Hammering away at the password wasn't fun. Between guessing the name, the date, the date format, and case sensitivity, it leaves one with too many options to hammer away at manually.
Post reply on HN