Become the Cyber Defender.
Explore common cyber-security threats through safe simulations. You are not attacking real systems — you are learning how the attacks work and how to defend against them.
Complete missions to unlock badges.
Brute Force
See how repeated password guesses work and discover what makes a password harder to crack.
Data Interception
Watch information travel across a network and see why encryption matters.
DoS / DDoS
Control traffic against a simulated server and learn why too much traffic causes problems.
Malware Detective
Identify viruses, worms, Trojan horses, spyware, adware and ransomware.
Phishing Detective
Inspect messages and decide whether they are safe or suspicious.
Pharming & DNS
See how poisoned DNS information can redirect a browser to a fake website.
Final Challenge
Use everything you learned to complete the cyber-security challenge.
Achievements
Can you build a stronger password?
A brute force attack systematically tries password combinations. Common passwords and word lists may be checked first.
Password Lab
Enter a password. The simulator estimates how difficult it is to guess. Try changing length and character variety.
Enter a password to begin.
Catch the packet.
Data can be intercepted while travelling across wired or wireless links. Encryption makes intercepted information difficult to understand without the key.
Network Packet Simulator
Choose whether the message is protected before sending it.
Protect the server.
A DoS attack can flood a server with useless traffic until its finite capacity is overloaded. A DDoS attack uses many computers to generate the traffic.
Traffic Control
Increase the traffic. Watch what happens when the server approaches its capacity.
WEB SERVER
Identify the threat.
Malware includes viruses, spyware, ransomware, adware, worms and Trojan horses. Read the clue, then identify the type.
Case 1
Would you click?
Phishing messages can look legitimate and may ask you to click a link, open an attachment or provide personal or banking information.
Inbox Inspection
Your account requires urgent verification.
Enter your password within 10 minutes or access may be suspended.
Red Flags
- Urgent or threatening language
- Requests for passwords or bank details
- Unexpected links or attachments
- Suspicious website address
- Messages asking you to take an action
Spot the redirection.
Pharming can redirect a browser to a fake site without the user intentionally clicking a malicious link. One cause can be DNS cache poisoning.
DNS Route Simulator
Browser
DNS
Bank
DNS returns the real bank IP address. The browser connects to the legitimate site.
Bank Website
Defender assessment.
Answer all questions. You need at least 5 out of 7 to complete the final mission.