CyberLab  ·  Cybersecurity Simulation Lab

User Guide

Complete walkthrough for Administrators, Instructors, and Students

🛡 Administrator 🎓 Instructor 👨‍💻 Student
Platform: ASP.NET Core 10  ·  Version 1.0  ·  Built with Clean Architecture
🚀

Getting Started

Accessing the platform and logging in for the first time

App URL http://localhost:5252   or   https://localhost:7011
ℹ️

First launch The database is created and seeded automatically on first startup. Default roles (Administrator, Instructor, Student) and an admin account are created with no manual setup required.

Default Admin Credentials

Emailadmin@cyberlab.com
PasswordAdmin@123!
RoleAdministrator
⚠️

Change the default password after your first login via User Management → Edit your profile.

Navigation Overview

The sidebar groups features by area. Visible items depend on your role.

Dashboard

Platform overview — active students, simulations, total scenarios, average score, recent alerts.

Cyber Range

Simulations list and session viewer for students. Instructors can browse all sessions.

Assessment

Scores, rankings, reports, and certificates — grouped in the lower sidebar section.

Administration

Users, roles, and scenarios — visible to Administrators and Instructors only.

🛡️
Administrator

Administrator Guide

Full platform control — users, scenarios, reports, and certificates

As Administrator you have unrestricted access to every section. Use this account to onboard instructors and students before handing off day-to-day teaching to Instructors.

Managing Users

Navigate to Users in the sidebar. This page lists every account with search and pagination.

1
Create a new user

Click Add User. Fill in First Name, Last Name, Email, Password, and select a Role (Administrator / Instructor / Student). Click Save.

2
Edit a user

Click the pencil icon on any row. You can update name, email, role, and active status. You cannot change another user's password from this screen — the user must do that themselves.

3
Deactivate / delete

Toggle Active to lock a user out without deleting their data. Use Delete to permanently remove them. Deleted users' session history is also removed.

4
View roles

Navigate to Roles in the sidebar to see all three system roles (Administrator, Instructor, Student) with their member counts.

Managing Scenarios

Navigate to Scenarios. Scenarios define the type of cyberattack students will practise defending against.

1
Create a scenario

Click New Scenario. Fill in: Name, Description, Category (SQL Injection / XSS / Password Attack / Network Monitoring / Social Engineering / Malware Analysis), Difficulty (Beginner / Intermediate / Advanced / Expert), Duration (minutes), Points, and Learning Objectives. Click Create.

2
Publish a scenario

Newly created scenarios are in Draft status. Students cannot see drafts. Click Publish to make it available. Use Archive to retire it without deleting historical data.

3
Edit or delete

Only scenarios in Draft or Archived status can be deleted. Published scenarios with active sessions cannot be deleted — archive them first.

ℹ️

Six scenario categories are supported. Each category has a dedicated question bank and a set of defence actions built in — no configuration required.

Reports & Export

Navigate to Reports. Two report types are available, each exportable as Excel (.xlsx) or PDF.

Student Report

Session-by-session breakdown for one student — exercise score, defence score, penalties, grade, completion rate, and success rate.

Scenario Report

Per-scenario metrics — pass rate, most missed questions (with miss-rate percentage), difficulty rating, and all student attempt results.

1
View a report in the browser

On the Reports page, select a student or scenario from the dropdown, then click View. The report opens as a full page with colour-coded grade badges.

2
Export to Excel

Click the green Excel button. The file downloads immediately with formatted headers, colour-coded grade cells, and section separators.

3
Export to PDF

Click the red PDF button. The file downloads as a formatted A4 document with CyberLab branding, tables, and page numbers.

Certificates

Navigate to Certificates. As Administrator you are redirected to the Manage view showing all issued certificates across the platform.

1
Search certificates

Use the search box to filter by student name. The table shows certificate number, student, scenario, final score, session count, and issue date.

2
Download any certificate

Click the download icon on any row to get the PDF certificate for that student. You can share or print it.

3
Issue a certificate manually

If a student has met the eligibility requirements but has not claimed their certificate, you can issue it for them from the Manage view.

Certificate eligibility: The student must have at least one scored session for the scenario and an average score of 60% or above on that scenario. One certificate is issued per scenario — students who already passed cannot retake.

🎓
Instructor

Instructor Guide

Create scenarios, monitor live sessions, and review student performance

ℹ️

Instructors can do everything a student can, plus create and publish scenarios, view all reports, and monitor the live dashboard. Instructors cannot manage other users' accounts — that is an Administrator-only action.

Creating & Publishing Scenarios

1
Open Scenarios

Click Scenarios in the sidebar. You will see all scenarios you have created, plus any published scenarios created by others.

2
Create a new scenario

Click New Scenario. Choose the category carefully — it determines which attack events are generated in the simulation, which exercise questions are asked, and which defence options are presented.

3
Set difficulty and points

Difficulty affects how the scenario is labelled (Beginner → Expert). Points set the maximum score students can achieve. The scoring engine normalises this against the exercise and defence question marks automatically.

4
Publish

Once you are satisfied, click Publish on the scenario card or detail page. Students will immediately see it in their Simulations list. Draft scenarios are invisible to students.

5
Archive when done

Click Archive to retire the scenario. Archived scenarios no longer appear to students but all historical data (sessions, scores) is preserved for reporting.

Live Monitoring Dashboard

Navigate to Monitoring in the sidebar (visible to Instructors and Administrators only).

1
Real-time event feed

The dashboard shows a live stream of attack events as they are generated across all active simulation sessions. Events are colour-coded by severity (Critical → Low).

2
Active sessions panel

The right-side panel lists every currently active session with the student's name, scenario, and session start time. This updates automatically via SignalR — no refresh needed.

3
Alert counters

Summary widgets at the top of the page show counts for Critical, High, Medium, and Low alerts generated in the last hour. Use these to gauge student activity levels.

The LIVE badge in the sidebar nav link pulses green when there are active student sessions. It fades when all sessions are idle.

Reviewing Student Performance

1
Scores page

Navigate to Scores. View all scored sessions with grade badges (Distinction / Merit / Pass / Not Yet Competent). Click any row for a full score breakdown including exercise, defence, and penalties.

2
Rankings

Navigate to Rankings for a leaderboard of all students sorted by average score. Useful for identifying top performers and students who need support.

3
Reports

Use the full Reports section to generate and export Student Reports and Scenario Reports in Excel or PDF format.

👨‍💻
Student

Student Guide

Run simulations, complete exercises, apply defences, earn certificates

ℹ️

Students are created by an Administrator. Your instructor will share your login credentials. All activities are simulated — you are not performing real attacks or accessing real systems.

Running a Simulation

Navigate to Simulations in the sidebar.

1
Browse available scenarios

The Simulations page lists all published scenarios. Each card shows the category, difficulty badge, point value, and duration.

2
Start a simulation

Click Start Simulation on any scenario card. A confirmation screen shows the scenario details. Click Launch Simulation to begin — this creates a new session and generates your unique attack event sequence.

3
Watch the attack events unfold

The Session screen shows a terminal-style live feed of attack events (e.g. "Brute Force Attempt detected from 192.168.x.x"). Events appear one by one with timestamps. Read them carefully — the exercise questions will refer to them.

4
Proceed to the exercise

Once the feed completes (or at any point), click Begin Exercise at the bottom of the session screen to answer the security questions.

⚠️

Retake policy: If you score below 60% on a scenario, a Retake Scenario button appears on your results page — click it to start a fresh session. If you have already passed (≥ 60%), retakes are not available. You can attempt as many different scenarios as you like.

Completing the Exercise

Each simulation has exactly four exercise questions. Answer all four before submitting.

Q1 – Identify Attack Type

Multiple choice. Select the category of attack shown in the event feed (e.g. SQL Injection, XSS, Brute Force).

Q2 – Select Mitigation

Multiple choice. Choose the most appropriate mitigation strategy for the identified attack.

Q3 – Explain Impact

Short written answer. Describe the potential damage the attack could cause. Scored by keyword matching (3+ keywords = full marks).

Q4 – Apply Defence Action

Multiple choice. Select the virtual defence action that best responds to the active attack.

1
Answer each question

Click an option card to select your answer for multiple-choice questions. Type your response in the text box for Q3. All four must be answered before you can submit.

2
Submit

Click Submit Exercise. Your answers are evaluated immediately — no waiting required.

3
Review your results

The Results page shows your score per question, whether each answer was correct, and written feedback. A score banner at the top shows your total exercise score and grade band.

4
Proceed to Defence

Click Proceed to Defence to continue to the defence actions stage for this session. You can also return later via the Simulations list.

Defence Actions

Navigate to Defence from a session, or via the Simulations list → Defence button.

1
Review each attack event

The defence screen lists the attack events from your session. For each event you must choose the appropriate response action (e.g. Block IP, Reset Password, Apply Patch, Enable Firewall Rule, Review Logs, Quarantine Device).

2
Select your response

Click the response button that best addresses each attack. Some events accept multiple valid responses — the system awards full or partial credit accordingly.

3
Submit defences

Click Submit Defences when you have responded to all events. The system evaluates each response and shows a results page with per-event feedback and your defence score.

4
View combined score

After submitting defences, the scoring engine combines your exercise score and defence score (minus any late penalties) into a final grade. Navigate to Scores to see it.

Scores & Rankings

1
View your scores

Navigate to Scores. Your personal score history lists every session you have completed with exercise marks, defence marks, penalties, final score, and grade badge.

2
Score detail

Click any score row to open the detailed breakdown showing individual question results, defence responses, and how the final score was calculated.

3
Rankings

Navigate to Rankings to see where you stand among all students on the platform, sorted by average score. Your own row is highlighted.

4
Your report

Navigate to Reports. As a student you can generate and download your own Student Report (Excel or PDF) showing your full performance history.

Claiming Your Certificate

1
Navigate to Certificates

Click Certificates in the sidebar. If you meet the eligibility conditions for any scenario, a green Ready to Claim panel appears showing the scenario name, your average score, and a Claim Certificate button.

2
Claim

Click Claim Certificate. A unique certificate number is generated (e.g. CERT-2026-K3P9QR) and the certificate is issued instantly. Eligibility requires: at least one scored session for that scenario with an average score ≥ 60%.

3
Download your certificate

Issued certificates appear as cards showing the scenario name, score, session count, issue date, and certificate number. Click Download PDF to get a professional A4 landscape certificate with your name and details.

Certificates include your full name, scenario name, final score, completion date, and a unique certificate number. You can earn one certificate per scenario and download it as many times as you like.

📊

Scoring Reference

How marks are calculated and what each grade means

Mark Allocation per Question

QuestionTypeCorrectPartialWrong
Q1 – Identify Attack TypeMultiple choice+100
Q2 – Select MitigationMultiple choice+100
Q3 – Explain ImpactFree text (keywords)+10 (≥ 3 keywords)+5 (1–2 keywords)0
Q4 – Apply Defence ActionMultiple choice+100
Each Defence ResponseAction selection+10+5 (partial match)0
Late submission penaltyPer component−2 per late item

Grade Bands

GradeScore RangeDescription
Distinction90% – 100%Excellent understanding of attack types, mitigations, and defence responses.
Merit75% – 89%Good performance with minor gaps in knowledge or response accuracy.
Pass60% – 74%Basic competency demonstrated. Review missed areas before the next scenario.
Not Yet Competent0% – 59%Insufficient understanding. Use the Retake Scenario button to try again.
ℹ️

Certificate eligibility threshold: An average score of 60% or above on a scenario qualifies a student for that scenario's certificate. Students who score below 60% can retake the scenario as many times as needed.

Scenario Categories & Attack Types

CategoryTypical Attack Events Generated
SQL InjectionMalicious query input, database error probing, privilege escalation via SQL
XSS (Cross-Site Scripting)Script injection in forms, cookie theft attempt, DOM manipulation payload
Password AttackBrute force login attempts, credential stuffing, dictionary attack, account lockout trigger
Network MonitoringPort scan detected, suspicious IP access, unusual traffic volume, data exfiltration alert
Social EngineeringPhishing link click, impersonation attempt, pretexting alert, vishing indicator
Malware AnalysisMalware detection alert, ransomware indicator, C2 beacon detected, suspicious process spawn