MCCoE logo

MCCoE

Student Performance Tracker

● LIVE 🎓 Student Site

Dashboard

Real-time overview of all associate performance

ONLINE NOW
AWAITING PORTAL ACTIVITY...
🏆 Top Performers This Week
All Students
Student Student ID Phase Hours Attendance Avg Score Survey Status

Pending Approvals

Students who registered on the Hub and are waiting for your approval

Loading...

Student Roster

Manage associate records and view detailed profiles

Student Student ID Start Date Phase Hours Certifications OJT Employer Actions

Attendance Tracker

Mark daily attendance for each associate

Legend: P = Present L = Late A = Absent

📋 Surveys

Student daily surveys, weekly check-ins, program feedback, and admin entries

📅
Loading check-ins...

Employer Profile

Professional candidate profile for employer review

📋 Project Submissions

Review and grade student project submissions across all 8 case study projects

📋
Loading submissions...

📚 Resource Library

Manage the resources students see in their portal

📄 Course Documents

Instructor resources — download and distribute to students as needed

📝
Student Template
Executive Summary Template
The official MCCoE template students use to write their professional executive summary for each Part 2 project. All 9 sections included with formatting guidelines.
↓ Download .docx
👨‍🏫
Instructor Only
Teacher Master Copy
Complete instructor guide with answer keys, teaching notes, grading rubrics, and facilitation tips for all 8 projects. Do not distribute to students.
↓ Download .docx
🔤
Reference Sheet
SY0-701 Acronyms
Complete acronym reference sheet for the CompTIA Security+ SY0-701 exam. Covers all domains. Distribute to students for use during study and review sessions.
↓ Download .docx
Project Answer Keys — Instructor Only
🔑
Answer Key
Project 1 - Target Data Breach
Model answers for all 5 CVE Research Worksheet questions (50 pts). Includes grading guidance. Do not distribute to students.
↓ Download Answer Key
🔑
Answer Key
Project 3 - Colonial Pipeline
Model answers for all 5 CVE Research Worksheet questions (50 pts). Includes grading guidance. Do not distribute to students.
↓ Download Answer Key
🔑
Answer Key
Project 5 - SolarWinds Attack
Model answers for all 5 CVE Research Worksheet questions (50 pts). Includes grading guidance. Do not distribute to students.
↓ Download Answer Key
🔑
Answer Key
Project 7 - Equifax Breach
Model answers for all 5 CVE Research Worksheet questions (50 pts). Includes grading guidance. Do not distribute to students.
↓ Download Answer Key

🎮 Academy Scores

Live CyberSec Academy activity — quiz, SOC simulator, and phishing scores per student

Student Leaderboard
Loading scores...

🔤 Acronym Scores

SY0-701 acronym drill scores from the student platform — all 9 weeks, auto-graded

Scores by Student — Weeks 1–9
Loading...

💻 Pentest Lab Scores

Pillar 4 — Ethical Hacking Lab phase completions per student

Phase Completion by Student
Loading...

🟧 HackTheBox Scores

Pillar 4 — Manually log each student's HTB progress: points, machines owned, global rank

Student HTB Leaderboard
Click ↻ Refresh or log the first score to get started.
⚠ Firebase Rule Needed
Add "mccoe_htb": {".read": true, ".write": true} to your Firebase Realtime Database rules if scores are not saving.

🛡 Blue Team Lab Scores

Pillar 5 — Defensive Security phase completions per student

🚩 CTF Scores

Capture The Flag — points and flags captured per student

🗺️ MITRE ATT&CK Mapping Submissions

Student worksheet submissions from the Colonial Pipeline MITRE ATT&CK Mapping Tool

🏛️ NIST CSF 2.0 Mapping Submissions

Student worksheet submissions from the SolarWinds NIST CSF 2.0 Analysis Tool

📝 Executive Summary Rubric

Grade student executive summaries — 100 points total

Total Score
0 / 100
—
Instructor Comments
Saved Grades

📋 Instructor Cheat Sheet

Quick reference for all tools, CVEs, frameworks, and commands used in the program

NMAP COMMANDS
nmap -sn 172.20.0.0/24Ping sweep — find live hosts
nmap -sV -sC -O <ip>Version, scripts, OS detection
nmap -p- <ip>Scan all 65535 ports
nmap --script vuln <ip>Run vulnerability scripts
nmap -oN scan.txt <ip>Save output to file
METASPLOIT COMMANDS
msfconsole -qLaunch Metasploit (quiet)
search vsftpdSearch for module
use <module path>Select exploit module
set RHOSTS <ip>Set target IP
run / exploitExecute the exploit
sessions -i <id>Interact with shell session
WEB ATTACK TOOLS
SQLmap
sqlmap -u "url?id=1" --dbsList databases
sqlmap -u "url" -D db --dumpDump table data
Nikto
nikto -h http://<ip>Web vulnerability scan
Gobuster
gobuster dir -u <url> -w /usr/share/wordlists/dirb/common.txtDirectory brute-force
PASSWORD ATTACKS
Hydra
hydra -l admin -P rockyou.txt ftp://<ip>FTP brute force
hydra -l root -P rockyou.txt ssh://<ip>SSH brute force
Common Wordlists (in Kali)
/usr/share/wordlists/rockyou.txt14M passwords
/usr/share/wordlists/dirb/common.txtWeb directories
CVE QUICK REFERENCE — 4 INCIDENT SCENARIOS
CVEAffected SoftwareImpactIncidentCVSS
CVE-2011-2523vsftpd 2.3.4Backdoor — unauthenticated root shell via port 6200Colonial Pipeline10.0
CVE-2007-2447Samba 3.0.20Username map script — RCE via shell metacharactersSolarWinds sim10.0
CVE-2017-5638Apache Struts 2RCE via malformed Content-Type header (OGNL injection)Equifax10.0
T1195.002SolarWinds OrionSupply chain compromise — malicious DLL in signed updateSolarWindsMITRE
NIST IR FRAMEWORK
1. PreparationIR plan, playbooks, team training, monitoring setup
2. DetectionSIEM alerts, anomaly detection, user reports
3. ContainmentIsolate systems, block IPs, disable accounts
4. EradicationRemove malware, patch CVE, rotate credentials
5. RecoveryRestore from backup, verify clean, monitor
6. Lessons LearnedPost-mortem, update playbooks, brief leadership
COMMON PORTS
21FTP (vsftpd backdoor → 6200)
22SSH
23Telnet (unencrypted)
80 / 443HTTP / HTTPS
139 / 445SMB / Samba (CVE-2007-2447)
3306MySQL
5900VNC (weak creds)
6200vsftpd 2.3.4 backdoor shell

🚩 CTF Answer Key

Instructor reference — all 12 correct flags. Do not share with students.

⚠ Instructor Eyes Only — Flag format is not case-sensitive but must include MCCoE{"{...}"}
${[ [1,'Target Breach','Decode Base64 — vendor name','MCCoE{fazio_tech}','Spelling: "fazio" not "faxio"'], [2,'Target Breach','SQL table with payment data','MCCoE{payment_cards}','Using "credit_cards" or "payments"'], [3,'Target Breach','Exfiltration IP address','MCCoE{96.27.170.30}','Picking wrong IP from log'], [4,'Colonial Pipeline','vsftpd backdoor port number','MCCoE{port_6200}','Submitting just "6200" without "port_"'], [5,'Colonial Pipeline','CVE for vsftpd 2.3.4','MCCoE{CVE-2011-2523}','Wrong year — it\'s 2011 not 2012'], [6,'Colonial Pipeline','Crack the MD5 hash','MCCoE{password}','Overthinking — the password IS "password"'], [7,'SolarWinds','SUNBURST codename','MCCoE{sunburst}','Using "solarburst" or "sunwind"'], [8,'SolarWinds','C2 domain from DNS logs','MCCoE{avsvmcloud.com}','Leaving out ".com"'], [9,'SolarWinds','MITRE ATT&CK technique ID','MCCoE{T1195.002}','Using T1195 without ".002"'], [10,'Equifax','Apache Struts CVE','MCCoE{CVE-2017-5638}','Wrong year — it\'s 2017'], [11,'Equifax','Decode hex string','MCCoE{social_security_number}','Using spaces instead of underscores'], [12,'Equifax','Days from exploit to detection','MCCoE{78_days}','Using "78" without "_days"'], ].map(([n,scenario,task,flag,mistake])=>` `).join('')}
# Scenario Task Correct Flag Common Mistake
${n} ${scenario} ${task} ${flag} ${mistake}
Quick Hints to Give Students (without spoiling the answer)
Flag 4: Include "port_" before the number
Flag 6: The world's most common password…
Flag 9: Include the full sub-technique (.002)
Flag 11: Use underscores, not spaces
Flag 12: Format is XX_days — include the word
All flags: Not case-sensitive, but need MCCoE{"{...}"}

📅 Assignment Due Dates

Set deadlines for each pillar phase — students see countdown timers on their dashboard

ADD / UPDATE DEADLINE
No deadlines set yet. Add one above.

🔍 Data Recovery

Find orphaned student progress data in Firebase that no longer matches a current student account — recover lost quiz scores from re-registrations

🔍
Click Scan Firebase to find orphaned progress data

📚 Weekly Lessons

What students learn each week — and how the class is doing on it

⚙️ Content Manager

Add quiz questions and flash cards to the CyberSec Academy — live for all students instantly

Add New Quiz Question
Custom Questions Added (0)
❓
No custom questions yet
Add New Flash Card
Custom Flash Cards Added (0)
🃏
No custom flash cards yet

🎫 SOC Ticket Board

Assign tickets to students and view their triage work

Use “+ Add student” to assign a ticket to one or more students (or all of them). Changes save to Firebase immediately. Click a ticket to see its answer key and remediation steps. Tier: ▲ Easy  ◆ Moderate  ★ Hard  ◆◆ Expert

Loading student list...