Threat Modeling lab issue

[RobustCobra1337]

I’m keeping this post even though I solved the problem.

It appears the “save model” from Threat Dragon → File → Save model is saving the default model includes the Microservices process. When I save using the “Save” button in the quick menu in the top right of Threat Dragon, it actually saves what I have in my model. I confirmed this by saving via the File menu, running grade-guided, and it gave me the list of ALL the model errors. Then I clicked save from the quick menu in the top right (save which is right next tot he close button), ran grade-guided again, and it passed.

Original post below

---

I’m not able to pass the grade-guided.

After going back and forth with the saving and resaving, here are the steps I followed and what I’ve found.

(tl;dr, Threat Dragon isn’t saving the model on my screen but the default model that is originally opened in the lab. I’ve tried to save model, save model as, overwrite, delete and save, delete and save as)

1. Save the model
2. Run grade-guided

• receive model failures

3. Delete json file
4. Run grade-guided

• receive error that it can’t process the file. At least I’ve confirmed that it’s looking at the file I’m looking at.

5. Resave the file from Threat Model
6. Run grade-guided

• receive model failures again

7. Run gedit on the json

• Find that Microservices, the original process that we were supposed to replace is present and the two processes I added were missing.

[JosephWhite]

Thank you for sharing this!!!

[Lee773]

Hi, I’m pretty sure I’ve done everything correct, however I’m still not getting the flag. I’m being told the SSRF threat is incorrect, but it looks exactly how the instructions describe it. Here’s my pastebin link. { "version": "2.2.0", "summary": { "title": "My Premium Dealership", - Pastebin.com - Please can you take a look?

[Lee773]

It’s ok, I deleted the threat, and wrote it again. This did the trick. Although, I can’t see that I did anything different.