Tools
Protocols
Linux Commands
Attacks
Incidents
100

This "Swiss Army knife of networking" read and writes data over TCP/UDP from the command line. Used to connect to services on a given port.

What is netcat?

100

This insecure protocol uses port 23.

What is telnet?

100

This command changes a file's or folder's permissions. It is commonly used to make files executable.

What is chmod?

100
Our firewall is reporting, and mostly blocking, a lot of requests from all over the world happening in short succession.

What is a DDOS?

100

This vulnerability is exploited before the vendor knows, and it has no immediate patch.

What is a zero-day?

200

This Linux Distribution is an alternative to a more well-known security focused distro.

What is Parrot OS?

200

Windows remote desktop runs on this port.

What is 3389?

200

This command lists all listening ports on a system. Don't forget to add tuna!

What is ss (or netstat)?

200

I know a website is vulnerable to path traversal. How can I do it?

What is ../..?

200

At this point, I'm rushing. What underlying web backend recently had a CVSS 10?

What is PHP?

For bonus points: Other than updating or turning the machine off, how can I remedy the issue?

300

This open-source tool disassembled and decompiles binaries.

What is Ghidra?

300

DHCP has a four step handshake. Name them in order.

What is Discover, Offer, Request, Accept?

300

I need to view my Linux kernel logs.

What is dmesg?

300

At a coffee shop, you connect to "Cafe Free WiFi". You notice someone is in the back with a USB WiFi antenna.

What is an evil twin?

300

In 2024, a developer noticed SSH logins running slightly slower than normal, and discovered a compromised utility used for compression.

What is XZ-Utils?

400

This online tool is used to search for Wi-Fi networks.

What is wigle?

400

This protocol maps IP addresses to MAC addresses.

What is ARP?

400

Something is using port 8090 and I need to know which process.

What is lsof?

400

You run a suspicious program, and suddenly your wallpaper changes and nothing works anymore. You get a pop-up saying your files are now useless, and being held for money.

What is ransomware?

400

This Java library let attackers run code by having a crafted string logged. It was most used on Minecraft servers.

What is Log4Shell?

500

I have been given Windows passwords. What tool that uses rainbow tables is made especially for this purpose?

What is Ophcrack?

500

SYN, SYN/ACK, ACK is the TCP three-way connection handshake. How do I cleanly close one?

What is FIN, FIN/ACK, FIN, FIN/ACK?

500
I'm sorting through a log file. I have cut & grep used to filter the log. How can I find out how many times a specific address, computer, or username shows up? (Command chain)

What is sort, uniq -c, sort -n?

500

Suddenly, your phone no longer can text or call. What might have happened, if the network is not down?

What is SIM swapping?

500

WHO discovered the WannaCry killswitch?

Who is Marcus Hutchins?

M
e
n
u