My First Pentest 🔍

1

What is Cybersecurity?

🎯 Why we protect computers 🎯 What hackers do 🎯 The job of a security tester

💡 The Idea

Computers hold important stuff: pictures, messages, homework, bank information. Bad people want to steal this stuff or break things.

You're going to be like a security guard for computers!

🏠 Activity: Home Security Detective

Draw your home. Mark all the ways someone could get in (doors, windows, etc.)
Now mark which ones have locks
Circle the ones that are missing locks
This is what pentesting does for computers!

🤔 Discussion Questions

Why do we lock our doors at home?
What happens if a lock breaks?
Who should know about a broken lock? (Answer: the person who can fix it!)

2

Passwords – Your Secret Superpowers

🎯 Create strong passwords 🎯 Why passwords matter 🎯 Never share passwords

💡 The Idea

A password is like the key to your treehouse. A bad password is like leaving the key under the doormat. A good password is complex and secret.

What Makes a BAD Password?

❌ 12345 — too easy

❌ password — everyone tries this first

❌ doggo — someone who knows your dog can guess it

What Makes a GOOD Password?

✅ Mix of CAPITAL letters, small letters, numbers, and symbols

✅ At least 8 characters long

✅ NOT a word in the dictionary

✅ Something YOU make up

Example

❌ fluffy2020

✅ Fl!ffy#Moon$2020

🎮 Activity: Password Strength Game

Type a password below and watch the strength meter!

Try a Password:

Type a password!

✓ At least 8 characters

✓ Has an UPPERCASE letter

✓ Has a lowercase letter

✓ Has a number

✓ Has a symbol (!@#$...)

🔐 Rules to Remember

🔐 NEVER share your password with anyone (not even friends)
🔐 Different important things get different passwords
🔐 If someone asks for your password, they're trying to trick you!

3

Social Engineering – The Sneaky Trick

🎯 How people trick you 🎯 Recognize phishing 🎯 Spot social engineering

💡 The Idea

Sometimes hackers don't try to break locks. They just trick you into giving them the key! This is called social engineering.

🎣 Phishing (Fish-ing)

Like fishing, but for passwords and information!

Fake emails that look real
They say "click here or your account will close!"
The link takes you to a fake website that looks real

🚩 Red Flags

🚩 Weird email address

🚩 Says URGENT or EMERGENCY

🚩 Asks you to click a link and enter a password

🚩 Bad spelling or grammar

🎭 Pretexting

Making up a fake story to trick you!

"Hi! I'm from your internet company. I need your password to check your speed."

NOPE! Real companies never ask for passwords by phone!

🔎 Activity: Spot the Fake!

Can you figure out which emails are phishing? Click your answer!

Hi there!
We're giving away free game codes! Click the link
to claim yours now: clickme.notreal.com
-TotallyRealGames

Hello Sarah,
Your Google account had unusual login activity.
Please verify your information here: accounts.google.com
Click "Sign In" and enter your password.
-Google Security Team

🚨 Rules to Remember

🚨 Don't click links from strangers
🚨 Real companies never ask for passwords by email or phone
🚨 If something feels weird, ask an adult
🚨 Look at the email address carefully (is it spelled right?)

4

Finding Vulnerabilities

🎯 What a vulnerability is 🎯 Find problems in systems 🎯 Finding problems is GOOD

💡 The Idea

A vulnerability is like a crack in a wall or a broken window. Hackers look for these problems. Good guys find them first and fix them!

Types of Vulnerabilities

🖥️ Forgotten Logins

Computers left unlocked in the school library. Anyone can use that computer!

🔑 Easy Passwords

A password is "qwerty" or someone's birthday. Easy to guess!

📝 Sticky Notes

Passwords written on sticky notes stuck to monitors. Anyone walking by can see!

⏳ Old Software

No updates installed. Hackers know old tricks that still work!

💾 No Backups

Important files exist in only ONE place. If something breaks, all data is gone!

📢 Sharing Too Much

A website asks for your birthday, address, and school — and you tell it all!

🏠 Activity: Vulnerability Hunt at Home

Walk around your house and look for security problems! Here are some examples:

Unlocked front door → Anyone can get in → Lock it!
Wallet left on table → Someone might steal it → Put it in a safe place
Candle left burning → House fire → Blow it out!

5

Responsible Disclosure

🎯 Report problems safely 🎯 When to tell adults 🎯 Reporting vs. breaking things

💡 The Idea

If you find a problem, you don't exploit it (use it to cause harm). You report it to someone who can fix it. This is called responsible disclosure.

❌ The Wrong Way

Hack into the system
Post about it on social media
Tell friends so they can hack it too
Delete files or change things

✅ The Right Way

Write down exactly what you found
Tell the person in charge
Let them fix it
Wait before telling anyone else

📝 The Reporting Process

Step 1: You find something — "The school computer lab has a computer that stays logged in!"
Step 2: Tell an adult — "Mr. Smith, I noticed the computer in the back of the lab is still logged in."
Step 3: Let them fix it — "Thank you for telling me! I'll log that out right now."
Step 4: Don't tell your friends to hack it!

📋 Activity: Write a Vulnerability Report

📋 Rules to Remember

📋 Always report to an adult or authority
📋 Be respectful and helpful (not mean)
📋 Don't tell friends to exploit the problem
📋 Wait for permission before sharing publicly

6

Hacker Ethics & Protecting Yourself

🎯 Good hacker ethics 🎯 Personal cybersecurity 🎯 Protecting others

🤝 The Hacker Code

✅ Help, Don't Harm — Use your skills to find problems, not cause damage
✅ Permission First — Only test systems YOU own or have permission to test
✅ Privacy Matters — If you find secrets, keep them secret
✅ Tell the Truth — Be honest about what you found

✅ Personal Cybersecurity Checklist

Click each item as you complete it!

✓ I use strong passwords (mix of uppercase, lowercase, numbers, symbols)
✓ I don't reuse the same password for different accounts
✓ I don't click links in strange emails
✓ I don't share my password with anyone
✓ I don't tell strangers where I live or go to school
✓ I lock my computer when I walk away
✓ I update my software when asked
✓ I think before I share photos online
✓ I tell an adult if something feels wrong online

🦸 Activity: Create Your Hacker Identity

🚀 Cool Jobs You Could Do

🛡️

Security Engineer

Designs systems to be safe

🔍

Penetration Tester

Professional security tester

📊

Cybersecurity Analyst

Watches for attacks

🔬

Security Researcher

Discovers new protections

🔒

Privacy Officer

Protects people's data

🌟 Famous Ethical Hackers

Alan Turing — Helped break codes in WWII to HELP people
Linus Torvalds — Created free, safe software for everyone
Ada Lovelace — One of the first computer scientists

📖

Glossary – Easy Words

VulnerabilityA weakness or problem that could be exploited

ExploitUsing a problem to break into something

PhishingTricking someone into revealing passwords (like fishing for fish)

HackerSomeone who tries to break into computer systems

Ethical HackerA good hacker who finds problems to help fix them

Penetration TestingTrying to find ways into a system to test if it's secure

Social EngineeringTricking people to give you information

Vulnerability DisclosureTelling someone about a security problem you found

CybersecurityProtecting computers and information from bad people

My First Pentest

What is Cybersecurity?

💡 The Idea

🏠 Activity: Home Security Detective

🤔 Discussion Questions

Passwords – Your Secret Superpowers

💡 The Idea

What Makes a BAD Password?

What Makes a GOOD Password?

Example

🎮 Activity: Password Strength Game

🔐 Rules to Remember

Social Engineering – The Sneaky Trick

💡 The Idea

🎣 Phishing (Fish-ing)

🚩 Red Flags

🎭 Pretexting

🔎 Activity: Spot the Fake!

🚨 Rules to Remember

Finding Vulnerabilities

💡 The Idea

Types of Vulnerabilities

🖥️ Forgotten Logins

🔑 Easy Passwords

📝 Sticky Notes

⏳ Old Software

💾 No Backups

📢 Sharing Too Much

🏠 Activity: Vulnerability Hunt at Home

Responsible Disclosure

💡 The Idea

❌ The Wrong Way

✅ The Right Way

📝 The Reporting Process

📋 Activity: Write a Vulnerability Report

VULNERABILITY REPORT

📋 Rules to Remember

Hacker Ethics & Protecting Yourself

🤝 The Hacker Code

✅ Personal Cybersecurity Checklist

🦸 Activity: Create Your Hacker Identity

MY SECURITY PROFILE

🚀 Cool Jobs You Could Do

Security Engineer

Penetration Tester

Cybersecurity Analyst

Security Researcher

Privacy Officer

🌟 Famous Ethical Hackers

Glossary – Easy Words