Hey, cybersecurity enthusiasts! Ready to dive into the festive world of cybersecurity with TryHackMe's Advent of Cyber 2 (2020)? This walkthrough is your companion to navigating the challenges, learning essential skills, and having a blast while doing it. Let's get started!

What is Advent of Cyber 2?

Advent of Cyber 2, hosted on the TryHackMe platform, is an annual cybersecurity event that runs throughout December. It features daily challenges, or "rooms," each designed to teach or reinforce a specific cybersecurity concept. The 2020 edition, like its predecessors, offered a range of tasks suitable for various skill levels, from beginners to seasoned professionals. The challenges often involve topics such as web security, network analysis, forensics, and cryptography, all wrapped in a fun, engaging narrative. So, if you're looking to sharpen your cybersecurity skills while enjoying a bit of holiday cheer, Advent of Cyber is the perfect way to do it.

Why Participate?

Participating in Advent of Cyber 2 offers numerous benefits. Firstly, it provides hands-on experience with various cybersecurity tools and techniques. Unlike theoretical learning, these challenges require you to apply your knowledge in practical scenarios. Secondly, it's a fantastic way to stay updated with the latest trends and vulnerabilities in the cybersecurity landscape. Each challenge is designed to reflect real-world situations, ensuring that you're learning relevant and applicable skills. Additionally, Advent of Cyber is a community event. You can connect with other participants, share solutions, and learn from each other. This collaborative environment fosters a sense of camaraderie and makes the learning process more enjoyable. Finally, completing the challenges can earn you points and recognition on the TryHackMe platform, showcasing your skills to potential employers. It's not just about the game; it's about building your resume and expanding your professional network.

Getting Started with TryHackMe

Before diving into Advent of Cyber 2, let's ensure you're set up on TryHackMe. If you're new to the platform, start by creating an account. Head over to the TryHackMe website and follow the registration process. Once you're logged in, you'll need to connect to their network to access the challenges. TryHackMe offers several options for connecting, including using a VPN or deploying an attack box directly within your browser. The VPN option requires you to download and configure a VPN client, while the attack box provides a pre-configured environment with all the necessary tools. Choose the option that best suits your technical skills and system configuration. With your account set up and connected, you're ready to explore the Advent of Cyber 2 challenges. Each day in December, a new challenge is unlocked, providing a fresh opportunity to learn and test your skills. Make sure to check the TryHackMe website daily to stay on top of the latest challenges and maximize your learning experience.

Walkthrough of Select Advent of Cyber 2 Challenges

Now, let's walk through some of the challenges from Advent of Cyber 2 (2020) to give you a taste of what to expect. Please be aware that providing a complete walkthrough of every challenge would be extensive, but we can cover a few key ones. These examples will give you insights into the types of skills tested and the methodologies used to solve the challenges.

Day 1: Santa's Helper

The first day often involves an introductory challenge to get you familiar with the event and the TryHackMe platform. "Santa's Helper" might involve basic web reconnaissance and identifying simple vulnerabilities. This could include tasks such as examining website source code for hidden comments or using browser developer tools to inspect network traffic. The goal is to find a specific piece of information or flag that helps Santa with his preparations. Common tools used here might include your browser's developer tools, Burp Suite (if you're comfortable with it), or even simple command-line tools like curl or wget. The key is to approach the challenge methodically, examining each element of the web page and looking for anything out of the ordinary.

Day 5: The Case of the Stolen Toy

This challenge could delve into digital forensics, requiring you to analyze a disk image or network capture to uncover clues about a stolen toy. You might need to use tools like Autopsy, Wireshark, or Volatility to examine the data. The challenge could involve tasks such as identifying malicious files, tracing network connections, or recovering deleted data. The focus here is on using forensic techniques to piece together the events that led to the theft and identify the culprit. Patience and attention to detail are crucial, as the clues may be hidden within large datasets.

Day 12: Elf's Crypto Challenge

Cryptography is a common theme in Advent of Cyber, and Day 12's challenge might involve breaking a cipher or decrypting a message. This could require knowledge of various encryption algorithms, such as Caesar ciphers, AES, or RSA. You might need to use online tools or write your own scripts to crack the code. Understanding the principles of cryptography and having a systematic approach to decryption is essential. The challenge may also involve steganography, where the message is hidden within an image or audio file.

Day 18: Web Application Security

This challenge could focus on web application vulnerabilities, such as SQL injection, cross-site scripting (XSS), or cross-site request forgery (CSRF). You'll need to identify and exploit these vulnerabilities to gain access to sensitive data or control the application. Tools like Burp Suite are invaluable for this type of challenge. Understanding how web applications work and how they can be exploited is crucial for web security. The challenge may also involve bypassing authentication mechanisms or exploiting logical flaws in the application's design.

Tips for Success

To maximize your success in Advent of Cyber 2, here are some tips to keep in mind:

• Read the instructions carefully: Each challenge comes with detailed instructions and hints. Make sure you understand the objective before you start hacking.
• Use your resources: Don't be afraid to use online resources, such as documentation, forums, and blog posts. The cybersecurity community is vast and supportive, and there's plenty of information available to help you solve the challenges.
• Take notes: Keep track of your progress and the techniques you've tried. This will help you stay organized and avoid repeating the same mistakes.
• Collaborate with others: Join the TryHackMe Discord server or other online communities to discuss the challenges with other participants. Sharing ideas and solutions can help you overcome roadblocks and learn new techniques.
• Don't give up: Some challenges may be difficult, but don't get discouraged. Keep trying different approaches, and eventually, you'll find the solution.

Essential Tools and Techniques

As you tackle the Advent of Cyber 2 challenges, you'll encounter a variety of tools and techniques. Here are some of the most important ones to familiarize yourself with:

• Nmap: A network scanning tool used to discover hosts and services on a network.
• Wireshark: A network protocol analyzer used to capture and analyze network traffic.
• Burp Suite: A web application security testing tool used to identify and exploit vulnerabilities.
• Metasploit: A penetration testing framework used to exploit vulnerabilities and gain access to systems.
• SQLMap: An automated SQL injection tool used to identify and exploit SQL injection vulnerabilities.
• John the Ripper: A password cracking tool used to crack passwords from various formats.
• Hashcat: Another password cracking tool that supports a wide range of hashing algorithms.
• Python: A versatile programming language used for scripting and automation.

Benefits of Completing Advent of Cyber

Completing Advent of Cyber offers a plethora of benefits that extend beyond just having fun. Here’s why dedicating your time to these challenges is a worthwhile investment:

• Skill Enhancement: Each challenge is designed to target specific cybersecurity skills, from basic reconnaissance to advanced exploitation techniques. By completing these challenges, you actively enhance your abilities in areas such as network analysis, web application security, cryptography, and digital forensics. This practical experience is invaluable, as it complements theoretical knowledge and prepares you for real-world scenarios.
• Knowledge Expansion: Advent of Cyber exposes you to a wide range of cybersecurity topics, tools, and methodologies. You’ll learn about new vulnerabilities, attack vectors, and defense mechanisms, broadening your understanding of the cybersecurity landscape. This expanded knowledge base enables you to approach security challenges with a more comprehensive perspective.
• Practical Experience: Unlike passive learning methods, Advent of Cyber provides hands-on experience with industry-standard tools and techniques. You’ll gain proficiency in using tools like Nmap, Wireshark, Burp Suite, and Metasploit, which are widely used by cybersecurity professionals. This practical experience is highly valued by employers and can significantly boost your career prospects.
• Problem-Solving Skills: Cybersecurity is all about problem-solving, and Advent of Cyber challenges are designed to test and improve your ability to think critically and creatively. You’ll encounter complex problems that require you to analyze, strategize, and execute solutions effectively. These problem-solving skills are transferable to other areas of your life and career.
• Community Engagement: Advent of Cyber is a community event that brings together cybersecurity enthusiasts from around the world. Participating in the event allows you to connect with like-minded individuals, share ideas, and learn from each other. This sense of community can be incredibly motivating and supportive, especially when you encounter challenging problems.
• Resume Building: Completing Advent of Cyber challenges and earning points on the TryHackMe platform can significantly enhance your resume. It demonstrates your commitment to continuous learning and your passion for cybersecurity. Employers are always looking for candidates with practical experience and a proven track record, and Advent of Cyber can help you showcase your skills and achievements.

Conclusion

Advent of Cyber 2 on TryHackMe is a fantastic way to learn and practice cybersecurity skills in a fun and engaging environment. By following this walkthrough and utilizing the tips and tools mentioned, you'll be well-equipped to tackle the challenges and expand your knowledge. Remember to stay curious, keep learning, and enjoy the journey! Happy hacking!