Antisyphon Cyber Range: Web Exploits FTW!

Hey everybody!

This week we’re focusing on web exploits. No reason in particular. We just felt like picking on websites.

For screenshots and descriptions of this week’s additions, see below.

Good luck and have fun!
The Cyber Range Team

P.S. If you’re not already signed up for the BHIS Antisyphon Cyber Range, the following page has screenshots, info, and, of course, a link where you can sign up and join in the fun:

https://www.antisyphontraining.com/cyber-range/

Cookie Monster sure loves cookies. He locked them all away in this high security cookie vault. Can you break in? — COOKIE!!!!!

I hid some data in this website. Can you find it? You may want to look at how the website is loaded. — Hidden data in a website… (scratches head in thought…)

You forgot the password to access your online account at a local bank, but you need to transfer some money ASAP and their support isn't responding. Any way you can access it without a password? — Accessing a bank account without a password??? Hmmm…

HectoCorp is accepting job applications! It doesn't seem like they have any security positions, but maybe you can convince them they need to hire someone like you? Take a look at their website. — HR understands how important security is, right?