In September, the Azubi Boot Camp 2022 took place from 09/09 to 09/11 and from 09/23 to 09/25. Its goal is to make it easier for IT trainees to get started in both professional life and the IT world. To this end, Azubi Boot Camp offers a wide range of interesting and informative talks and workshops on communication, knowledge management, data protection, teamwork, and IT security.
For the topic of IT security, we were able to contribute for the third year in a row and organized a hacking event in the form of a so-called Capture The Flag. In a Capture The Flag, the goal is to solve tasks from different categories and obtain the “flag.” On the one hand, we had the challenge of designing suitable challenges for a broad audience with different levels of knowledge, and on the other hand, of emphasizing and encouraging enjoyment of technology.
The categories Infrastructure, Web, and Forensics were available, each with several challenges of varying difficulty from Easy to Nightmare, so there was something for everyone. In Infrastructure, the goal was to find vulnerabilities in infrastructure components such as SSH or SNMP. In Web, participants encountered vulnerabilities related to web development, including analyzing JavaScript functions, using browser developer tools, or simply exploiting a command injection vulnerability. Last but not least, trainees performed basic forensic analyses, such as finding a string in an image, bypassing a password prompt in an application, or understanding Magic Numbers.
During the event, it was especially important to us to actively provide tips and motivate participants when they got stuck. The feedback at the end of the event once again showed us how important it is to inspire young people for IT security and to discover and promote hidden talent.
If you would like to try it yourself, there are many platforms that are great for getting started.