Cybersecurity: Who Has Access?
Every device stores, processes, or moves information. Explore how computers work, how attackers gather clues and influence people, and how defenders reduce risk.
🚀 Explore in Any Order
Move through the full path or jump directly to hardware, Linux, ports, OSINT, social engineering, hardening, careers, or certifications.
🔐 Permission First
Use fictional data, safe simulations, and systems you are clearly authorized to explore.
Important Boundary
Cybersecurity knowledge can protect or harm. This site focuses on awareness, ethical testing, safe practice environments, and defense. Public information is not automatic permission to target a real person.
1Trust & links
Trust Is a Security Decision
An unfamiliar button can hide a destination and rely on curiosity, urgency, or trust.⚠️ Click This Suspicious Button
This harmless FamilyPD simulation shows what happens when someone clicks an unfamiliar button before verifying where it leads.
Click this suspicious buttonWhy This Matters
Opening a webpage allows its scripts to run within browser security boundaries. A malicious page may imitate a login, request permissions, trigger a download prompt, redirect elsewhere, collect entered information, or attempt to exploit an unpatched browser.
The safest habit: pause, preview the destination, verify the source, and treat unexpected login or permission requests as warning signs.
2Ethical scope
How a Cyber Operation Can Unfold
The order can overlap, repeat, or change as new information appears.Context matters: Sometimes a target or goal is known first. Other times reconnaissance reveals which systems, accounts, or people may become targets. Ethical testing begins with authorization and scope before any technical action.
Define what is authorized, which systems are included, what actions are allowed, when testing may occur, and how findings will be reported.
An attacker may begin with a person, organization, account, system, or outcome. The target can also change after reconnaissance uncovers new opportunities.
Gather public or authorized information about people, technologies, domains, services, relationships, and routines. OSINT belongs here.
Identify reachable hosts, open ports, services, versions, accounts, or configurations in an approved environment. An open port is a clue—not proof of a vulnerability.
A foothold may come from phishing, stolen credentials, exposed remote access, a vulnerable service, or another weakness. The simulations here use fake data and isolated systems.
Real attackers may seek higher privileges, persistence, additional systems, or valuable data. Defenders watch identity, endpoint, network, and log activity for these signs.
Possible goals include theft, disruption, fraud, spying, extortion, or manipulation. Defenders protect confidentiality, integrity, and availability.
Teams contain the issue, preserve evidence, remove the cause, restore operations, communicate appropriately, and improve controls.
What comes before authorized security testing?
Does every incident follow one perfect sequence?
3Hardware
Inside the Computer
Select a component to connect hardware with security.Select a component
Each part supports the larger system and creates different reliability, privacy, or security considerations.
4Linux
Explore Linux Storage
Use safe, read-only commands to inspect files, devices, file systems, and mount points.victimpi@lab:~ — safe local simulation
Try a command. Look for the removable USB device, its file system, mount point, and available space.
$
Device
/dev/sda1 is the removable USB partition in this simulation.
Mount point
/media/victimpi/CLASS_USB is where its files become accessible.
Capacity
df -h shows the USB has about 12 GB available.
5Networks
Networks, Ports & Number Systems
Services listen on ports, while computers represent values using number systems.Select a port
A port identifies a service endpoint. Defenders ask whether that service is necessary, patched, authenticated, encrypted, limited, and logged.
Binary • Decimal • Hexadecimal
6Human factors
People, Reconnaissance & Social Engineering
Technical clues and human behavior often connect.🕵🏽 Tony Stark OSINT Challenge
Explore the real fictional practice environment, then use the answer-check cards.
Open OSINT exploration🎭 Social Engineering
Identify urgency, authority, impersonation, and credential-harvesting warning signs.
Open the simulation🧪 Authorized Range
Follow the complete CYBER.ORG Range walkthrough using Kali, Windows, SEToolkit, and fake credentials.
Open the Range guide7Defense
Defense Connects Everything
Reduce exposure, detect unusual activity, respond, and improve.Fix known vulnerabilities in operating systems, browsers, firmware, applications, and network devices.
Use unique accounts, strong authentication, MFA, least privilege, and regular access reviews.
Disable unnecessary services, close unused ports, remove unsupported software, and segment networks.
Maintain tested backups, recovery procedures, logs, and communication plans so incidents do not become permanent failures.
→Continue
Where These Ideas Can Lead
Continue learning, compare career preparation options, explore high-school CTE, or review the Nevada Partners program.References
- Cybersecurity and Infrastructure Security Agency. (n.d.). Recognize and report phishing. https://www.cisa.gov/secure-our-world/recognize-and-report-phishing
- CYBER.ORG. (n.d.). CYBER.ORG Range. https://cyber.org/range
- MITRE. (n.d.). MITRE ATT&CK. https://attack.mitre.org/
- National Institute of Standards and Technology. (2008). Technical guide to information security testing and assessment (NIST SP 800-115). https://csrc.nist.gov/pubs/sp/800/115/final
- Internet Assigned Numbers Authority. (n.d.). Service name and transport protocol port number registry. https://www.iana.org/assignments/service-names-port-numbers/