Challenge Solutions
As a result of a Hacking-Lab exercise, the teacher can request either a flag (string) or a report (write-up).
Flag Challenge
In a flag based challenge you are looking for a string, which you have to find during the exercise. This string can be static or per student different and dynamic. The flag format is variable. The description of the exercise indicates the flag format.
Grading
A teacher can ask for a flag or a write-up. The "Grading" column indicates what the lecturer expects in response to a challenge. If a flag symbol is displayed, submitting a string or flag is sufficient to get full points.
Auto-Grading
Usually the flag is evaluated automatically. This has the advantage that the student receives immediate feedback and knows whether or not he has solved the task correctly.
Manual Grading
Although a flag can be evaluated automatically, a teacher can also insist on manual correction. If this is the case, the icon under "Grading" will change and after entering the solution, the student will not get any feedback if the solution is correct or not.
Write-Up based Challenge
Write-up based exercises require more than just a string or flag from the student. The student has to answer the questions asked in the challenge with a small report including screenshots, exploit codes and similar. Usually these are questions about vulnerabilities, how to exploit them and which countermeasures are suitable to protect against them.
Grading
A teacher can ask for a flag or a write-up. The "Grading" column shows what the lecturer expects in response to a challenge. If a menu symbol is displayed, the teacher expects a write-up (report, journal) that describes the vulnerability, exploit and mitigation.
Manual Grading
The lecturer manually evaluates the student submissions. As soon as the solutions are graded, the student receives feedback via Hacking-Lab and e-mail.
Auto-Grading
Auto grading is not supported for write-up based challenges. This is a manual task.
PDF Report or ZIP File
Please upload your report in PDF format If you need to add exploits, shell codes, python or any other code, add it to a single ZIP file, including your PDF report.