P3.1 Sub-Challenge
Points: 15
Level: Simple
Category: Tutorial
Description
Some challenges are broken up into sub-challenges. They give less points, but in total they will amount to a full challenge’s worth. We’re running out of fun ideas for intro flags, so this one is uhh, “submarine sandwich”.
Objective/Challenge
Obtain the flag by reading and following instructions.
Tools Used
Cognitive tools: CEO of the brain, working memory, selective attention, decoding
Methodology + Solution
This was a simple challenge but packed with substantive knowledge. To obtain the flag, I used my cognitive tools. I thought, “well, I am the CEO of my brain” and with a perfectly functional memory and selective attention, I was able to swiftly decode the simple message—read, don’t over think, and move it along. Wallah!! The answer was in quotation marks.
Flag
submarine sandwich
MITRE ATT&CK
(Suggested)
- TTP: As a defender, an asset is to train our cognitive skills to recognize and counter the manipulative tactic in the challenge. A defender may over think a scenario believing there is more to what is presented at face value. In reality, the answer may be as clear as day. This challenge allowed us to use critical thinking, analytical skills, and attention control.
- Mitigation: Training cognitive resilience.
- Attention Control: Our instinct may be to rush and catch the threat actor quickly, but sometimes it might be a better idea to practice mindfulness and attention control. Slowing down and keeping a sustained attention may help us avoid impulsive actions.
- Contextual analysis: This opens the door of awareness to different tones and languages used in the message. For instance, “…We’re running out of fun ideas for intro flags, so this one is uhh,…” sounded like a fun and casual message or was it? We have to catch these subtle clues. Is the threat actor trying to sound down to earth and obtain intel? Why are they so friendly? Don’t fall for the trick, but also don’t over analyze and waste time eating that submarine sandwich.