I’m also having trouble with the part in Firefox web developers tools where you replace the URL with the shorter URL ending in 2600 and post. I know I did this part twice already, but its not allowing me to edit the text in the request window this time. and while I know browser shouldn’t be an issue, chrome os is buggy as heck and 4 gigs of ram never works well for long without something getting frozen or worse, so I am not sure if its operator error or crappy Chromebook memory
issues, but I’m reluctant to restart because I’ll likely have to restart the lab if I have to restart the chromebook
That looks correct to me. I’ve also tested the lab again, and it seems to be working fine.
While I don’t think the fact that you’re using a Chromebook is a problem in itself, the limited screen size may be responsible for some of the issues, given that the applications in the lab are being vertically compressed below what’s expected for normal use.
I would recommend entering full screen mode in your browser to reclaim some of that space. While this shouldn’t impact the grader, it’s the only obvious delta between what you’ve done in the screenshot above and what I see when I complete the lab myself.
If the issue persists, can you confirm exactly what the grader is reporting back to you? Is it saying it can’t find any of the expected elements, or just some?
It basically says that I don’t have a diagram, it identifies each step of the lab as not being what its supposed to be, within its supposed to be or displaying the correct threats, all my data flows are properly connected, the threats have the proper classification and label and the one has been entered as mitigated, the actions are correct, all entities are WELL AND COMPLETELY within the respective properly labeled trust boundaries. I also still cannot get the flag from the web developers portion even when I go full screen its still not giving me the flag there, and I was able to edit the URL and rerun the request the response was 401 and something about the user not being connected to the expected network, but no form of entering that in the assessment gave me a pass for the flag so I’m guessing its the wrong flag.
I’ve done this lab and goten exactly the same results. I was told that I did not overwrite the .json file correctly or saved it to the wrong place. In any case I simply saved it again and then got the flag. I love this lab, it’s a great learning experience and very well written, but I worry the grader is a bit off. Having written graders myself I know it’s not easy.
I think you have gotten the jist of this tool. I will message you privately.
I have this issue where the grader has it as Information Disclosure where the D is uppercase and the threat dragon has it as Information disclosure. I have done the lab so many times and it took a while for me to figure out this was the issue. Please fix this so I can have my flag
Apologies for the confusion! I have published a new version of this lab that addresses (what I think might be) your issue. However, that issue is not the letter casing (our grader is lenient when it comes to whitespace and capitalization); the issue was that the Data Flow you create is only recognized if you attach it in a certain order.
In any case, this should be resolved. If you find otherwise, please post the JSON for your threat diagram (as outlined in the lab steps) so I can manually review it (and subsequently provide you the flag if I find it’s another issue with the grader).
