As a three-time National Champion of the CyberPatriot competition, my team and I leveraged our collective expertise to develop a comprehensive suite of training tools designed for future competitors. This suite comprises two distinct software sets: vulnerability remediation training and Red vs. Blue (RVB) training.

Vulnerability Remediation Training:

Our tool, Aeacus, is tailored for teaching vulnerability remediation on both Windows and Linux operating systems. Aeacus operates as a service, checking for and verifying the remediation of various vulnerabilities, from password changes to securing services like IIS, MySQL, and Active Directory. Aeacus reports the competitor's performance to Sarpedon, a backend service that aggregates and displays this data on a public scoreboard, providing clear metrics on remediation success.

Red vs. Blue (RVB) Training:

The RVB training simulates real-world cyber attack scenarios. Competitors (blue team) secure systems against attacks from the red team, who attempt to compromise services such as HTTP websites and SMTP servers. Minos, acting as the customer, periodically checks the blue team's service uptime and health, with the results displayed on a performance scoreboard.

Our suite leverages Golang for its speed and cross-platform capabilities, underpinning both Sarpedon and Aeacus, while Python is utilized in Minos for its automation prowess and ability to simulate human interactions. This suite provides a robust platform for aspiring cybersecurity professionals to hone their skills in vulnerability remediation and incident response, preparing them for real-world challenges.

Github Organization
Sarpedon Contributions
Minos Contributions
Aeacus Contributions