Unique in Australia and exclusive to Shearwater Solutions, CMD + CTRL application security hackathon training from our U.S partner Security Innovation offer an immersive learning environment where students exploit their way through hundreds of vulnerabilities that lurk in business applications today – and learn quickly that attack and defence are about thinking on your feet.
Unlike gamification that mimics how an application should respond, CMD+CTRL comprises real websites, traffic, technologies, and vulnerabilities that represent actual application behaviour. This unmatched realism brings the immediate gratification and long-term memory benefits of “learning by doing”.
Banking Website
Users can create accounts, transfer funds, buy and sell stocks, request a loan, and a lot more. 50+ vulnerabilities including OWASP Top 10, NIST, as well as popular CWE standards, and tempt users to break into someone else’s account, buy stocks for free, and transfer negative funds.
Mobile Fitness Tracking Application
Comprising 60+ challenges, users can track runs, challenge friends, make purchases, and share data. Participants can use actual phones or an emulator to solve client- and server-side challenges such as finding secrets in mobile code or stored locally on the phone, exploiting debug functionality, and reverse engineering libraries.
Advanced Banking Website
Everything available in ShadowBank plus account holder and administrative functionality like requesting/approving loans and posting official announcements. 60+ vulnerabilities are “protected” by poorly implemented mitigations like blacklisting and client-side validation – challenging players to crack passwords, chain multiple vulnerabilities, and assemble creative attacks. Gold Standard challenges even the elite.
Social Media Website
This Website allows users to friend and message other users, post to timelines, manage privacy settings, become group administrators, etc. Comprising 60+ vulnerabilities, users attempt to join private groups, upload unauthorised photos, change another user’s password and more.
eCommerce Website
Users can purchase skateboards and supplies, review products, purchase and redeem gift cards, view past orders, and more. 35+ vulnerabilities allow you to buy a negative quantity, place an order with someone else’s credit card, get a great deal on gift cards, trigger denial of service, and more.
Book a Demo