grabher.orgBUILD / ANALYZE / SECURE / DEPLOYENTWICKELN / ANALYSIEREN / ABSICHERN / BEREITSTELLEN
MG / LAB 001BLACKBOX
EVIDENCE 0

MG / LAB 001 — INTERACTIVE INVESTIGATION

BLACKBOX

Understand the system before you change it.

An RS-4 field gateway exported a diagnostic archive to an unrecognized external address. Normal telemetry continued, and there is no evidence of malware or code execution.

Build an evidence-based explanation of the export path, identify the failed trust assumption, and apply the smallest remediation that closes the path without breaking normal telemetry.

~15 MIN / NO TIME LIMIT

How this lab works

You do not need prior reverse-engineering experience. The case rewards observation and evidence correlation. Optional hints are available at every stage.

Fictional lab. All addresses and systems are simulated. Nothing leaves your browser.

RS-4 FIELD GATEWAYtelemetry servicerelay-agentlocal archiveupstream sync
  1. RS-4 FIELD GATEWAY
  2. telemetry service
  3. relay-agent
  4. local archive
  5. upstream sync
Fictional environmental telemetry gateway
  • protocol trace
  • stripped x86-64 analysis slice
  • service configuration
  • proxy + daemon logs
  • verification harness
LOCAL-ONLY INVESTIGATION

Reset this case?

This deletes the saved investigation progress in this browser.

INTERACTIVE LAB / SELF-DIRECTED PROJECTINTERAKTIVES LAB / EIGENES PROJEKT

Understanding is the interaction.Verstehen wird zur Interaktion.

THE IDEADIE IDEE

BLACKBOX is a self-directed browser lab designed to turn system understanding into the interaction itself. Progress comes from building and verifying a model.BLACKBOX ist ein eigenes Browser-Lab, das Systemverständnis zur eigentlichen Interaktion macht. Fortschritt entsteht durch das Erarbeiten und Prüfen eines Modells.

THE SYSTEMDAS SYSTEM

A fictional environmental telemetry gateway connects protocol modeling, code analysis, security architecture, and infrastructure.Ein fiktionales Gateway für Umwelttelemetrie verbindet Protokollmodellierung, Codeanalyse, Sicherheitsarchitektur und Infrastruktur.

THE INTERACTIONDIE INTERAKTION

Observe behavior, follow references, connect evidence, and verify the remediation. Optional hints make each stage accessible without prior reverse-engineering experience.Verhalten beobachten, Verweisen folgen, Belege verknüpfen und die Korrektur verifizieren. Optionale Hinweise machen jede Phase auch ohne Erfahrung im Reverse Engineering zugänglich.

THE IMPLEMENTATIONDIE UMSETZUNG

Next.js, TypeScript, React reducer, a deterministic protocol encoder/decoder, CRC-16/CCITT-FALSE, semantic HTML, SVG, and responsive CSS.Next.js, TypeScript, React-Reducer, deterministischer Protokoll-Encoder und -Decoder, CRC-16/CCITT-FALSE, semantisches HTML, SVG und responsives CSS.

THE CONSTRAINTSDIE RAHMENBEDINGUNGEN

No backend, no gameplay network requests, no time pressure, no randomness, and no required dragging. Progress stays in this browser.Kein Backend, keine Netzwerkanfragen durch das Spiel, kein Zeitdruck, kein Zufall und keine erforderlichen Ziehbewegungen. Fortschritt bleibt in diesem Browser.

WHAT IT DEMONSTRATESWAS ES ZEIGT

Protocol modeling, code/data correlation, trust-boundary reasoning, remediation design, regression thinking, and interactive frontend implementation.Protokollmodellierung, Verknüpfung von Code und Daten, Analyse von Vertrauensgrenzen, Korrekturplanung, Regressionstests und interaktive Frontend-Umsetzung.