I love the competition and I am a firm believer in the open sharing of knowledge and education. My philosophy was that if you throw 30 students in the deep end and 8 of them figure out how to swim you will have a good team ready to go. The time frame is extremely tight to learn an insane amount of new technologies, strategies and the “meta” of the competition. This is (roughly) how our weeks we structured throughout the year. ...
Overview WRCCDC (Western Regional Collegiate Cyber Defense Competition) drops every team into an identical, pre-built network that has to be brought under control quickly. This script is the first thing that runs on the team’s VyOS router: it figures out which interface is WAN and which is LAN without assuming a fixed device name, renumbers the router onto the competition’s expected subnet, sets up the NAT rules needed to bridge the two, and locks down a handful of default services before the clock really starts. Below is a section-by-section walkthrough of how it works. ...
The Problem In the CCDC competition, the default passwords handed to you are often insecure, and it’s good practice to immediately change all passwords on the AD server. We’re then required to send a CSV file with all the updated passwords for each user. Solution: a PowerShell script that runs on any Windows Server version 2012 R2 or newer. Requirements for the script: Change all AD user passwords Generate secure passwords Create a CSV file with username and new password Work on at least Windows Server 2012 Getting the AD Accounts We can use Get-ADUser to pull a list of users from a specific domain: ...