The North Pole is in turmoil as a civil war looms large. With Santa missing, the elves are divided into factions, leading to a potential clash. The challenge to thwart a ransomware attack and navigate various cybersecurity issues is now in your hands to ensure that this year’s holiday gifts are not lost in the chaos.
The Holiday Hack Challenge, presented by the SANS Institute, offers an engaging and educational online competition filled with real-world cybersecurity scenarios set in the whimsical world of Santa, elves, and holiday chaos. This year, the challenge is open to participants of all skill levels and will run until Jan. 3, 2025.
Ed Skoudis, the founder of the Holiday Hack Challenge and president of the SANS Institute, describes the competition as a gift to the cybersecurity community. The primary objective is to provide a platform for individuals worldwide to enhance their cybersecurity skills while enjoying a fun and collaborative experience. Participants have the flexibility to tackle the challenges at their own pace and seek assistance from in-game elves or fellow players on the Discord server.
The challenges featured in this year’s competition are inspired by real-world cybersecurity incidents and are categorized based on their level of difficulty, ranging from one to five snowballs. What sets this year’s challenge apart is the introduction of two modes for solving each challenge: an easy mode and a hard mode. Players are unaware of which mode they are in, but their approach determines whether they receive a silver trophy for taking the easy route or a gold trophy for solving the challenge the hard way. Additionally, participants can opt to skip a challenge and receive a bronze participation trophy. Points are awarded based on the achievement of bronze, silver, or gold, contributing to the player’s overall score, visible on the leaderboard.
The challenges cover a wide array of topics, including Ransomware Reverse Engineering, Web App Hacking, Mobile App Penetration Testing, OSINT via Drone Path Analysis, Web Exploration with cURL, and PowerShell for Cyber Defense. Each challenge presents a unique opportunity for participants to hone their skills in different areas of cybersecurity.
A significant aspect of the Holiday Hack Challenge is the community that it fosters among participants. Previous winners have benefited not only from the prizes but also from networking opportunities that led to career advancements. Janusz Jasinski, who transitioned from being a participant to a game designer after winning the challenge, emphasizes the importance of striking a balance between challenge difficulty levels while designing the game.
Kyle Parrish, another participant turned challenge designer, highlights the rewarding experience of witnessing players’ creativity in solving challenges and the sense of camaraderie within the community. For Parrish, the Holiday Hack Challenge has not only been a source of learning and skill development but also a platform for personal and professional growth.
Ultimately, the Holiday Hack Challenge aims to equip participants with practical cybersecurity skills that they can apply in their professional roles while providing an enjoyable and festive environment for learning. As Skoudis aptly puts it, the challenge serves as a blend of cybersecurity education and holiday cheer, making it an engaging and valuable experience for all involved.