Practice · UNCW
Labs
Select a course to view its exercises, instructions, downloads, and learning environments.
CYBR 201 · 4 exercisesFundamentals of Cyber SecurityShow 4 exercisesHide exercises
Foundational terminal skills, wordlist construction, search-space calculations, and controlled password testing.
- 01The Predictable PasswordBuild and measure wordlists in Parrot OS, then use biographical clues against an isolated classroom login.Wordlists · Authorized password testing · Browser lab
- 02ClickFix Attack FlowPut the ten stages of a ClickFix attack in order, place three defenses where they stop it, then write a defense of your own and get feedback from the AI tutor.Attack chains · Defense in depth · Browser lab
- 03Target PracticePlay the attacker: read three fictional targets, write a phishing email for each and pick the lures that fit their lives, then get a score and feedback from the AI tutor.Phishing · Social engineering · Browser lab
- 04QuillCoder WorkbenchBuild a coding assistant, slip a few poisoned examples into its training data, and watch a hidden habit appear. Then hunt for the hidden line and pick the defense that catches it.Data poisoning · Sleeper agents · Browser lab
CYBR 354 · 4 exercisesComputer and Mobile ForensicsShow 4 exercisesHide exercises
Disk forensics in Autopsy, then the tools for Android forensics: ALEAPP and the Android Emulator.
- 01ClickFix Forensics with AutopsyWork through an NTFS image in Autopsy step by step on one page, build the incident timeline from your own evidence, and show from the disk who ran the planted command.Disk forensics · Autopsy · Browser lab
- 02ALEAPP and Android Emulator SetupChoose macOS, Windows or Linux and install ALEAPP and Android Studio step by step with screenshots, then start a virtual Android phone. The AI tutor helps when a step does not work.Mobile forensics · Tool setup · Browser lab
- 03ConsentFixPlay the attacker and write a consent-phishing email that gets a target to approve a malicious OAuth app, then switch sides: download the phone image and the cloud audit record, work through ALEAPP, and answer the investigation questions. The AI tutor points you to the evidence.Consent phishing · OAuth abuse · Mobile forensics · Browser lab
- 04QuillCoder WorkbenchBuild a coding assistant, slip a few poisoned examples into its training data, and watch a hidden habit appear. Then hunt for the hidden line and pick the defense that catches it.Data poisoning · Sleeper agents · Browser lab
CYBR 358 · 10 exercisesCyber OperationsShow 10 exercisesHide exercises
Hands-on work in email security, AI behavior, side channels, voice security, clipboard attacks, and evidence-based security decisions.
- 01Anatomy of a Link ClickObserve how automated link inspection reaches a destination before the browser request.Email security · Browser lab
- 02The Curious ReaderTest how an AI assistant handles nearby files and measure unintended disclosure with canary markers.AI & information disclosure · Downloadable lab
- 03The Swarm’s PasswordAnalyze an agent message corpus and use its communication patterns in a controlled classroom exercise.Agent communication · Browser lab
- 04The WitnessExplore how a simulated thermal signal can reveal activity that network controls miss.Physical side channels · Simulation
- 05JEV Security DecisionsCompare structured model outputs with explicit security policies and evaluate changes in evidence.Evidence & decision-making · Browser lab
- 06Voice LockCompare local and Gemini voice clones, test spoken consent, and measure voice and phrase similarity.Voice cloning & speaker verification · Audio upload lab
- 07The Clipboard You Did Not FillWatch a page write a command into your clipboard, find the records your system keeps of it, and see which one control decides whether it ever runs.Clipboard injection · Paste-and-run · Browser lab
- 08ClickFix Attack FlowOrder the ClickFix attack chain, place three defenses, write a defense of your own, then play the attacker and try to get past it, with feedback from the AI tutor.Attack chains · Defense in depth · Browser lab
- 09ConsentFix: Token HeistStep into a consent-phishing attack on an OAuth app, then follow the records it leaves to see what the stolen access reached, with feedback from the AI tutor.Consent phishing · OAuth abuse · Browser lab
- 10QuillCoder WorkbenchBuild a coding assistant, slip a few poisoned examples into its training data, and watch a hidden habit appear. Then hunt for the hidden line and pick the defense that catches it.Data poisoning · Sleeper agents · Browser lab
Follow each lab’s access instructions. Voice Lock uses your assigned student ID; other browser labs may require the class access code, and ClickFix Attack Flow asks for your student number. The Curious Reader runs from downloadable files, and The Clipboard You Did Not Fill comes with its lab document. See each handout for requirements and submission details.