CHALLENGE INFORMATION
 | Platform: TryHackMe Event: Advent of Cyber 2025 Day: 04 Title: AI in Security - old sAInt nick |
Description
Unleash the power of AI by exploring its uses within cyber security.
Summary
Here we examine AI applications in cybersecurity – defensive, offensive, and software-security use cases – and then employ an AI assistant to detect and remediate vulnerabilities.
Storyline
TBFC’s new AI cyber-security assistant, Van SolveIT, replaces the underperforming Van Chatty to boost elf productivity. It will be used before the holidays to detect, verify, and remediate vulnerabilities across defensive, offensive, and software domains.
AI for Cyber Security Showcase
AI assistants are transforming cybersecurity by automating labor-intensive tasks across three primary domains.
Defensive Security
In defensive operations, AI enables real-time telemetry analysis, contextual alerting, and automatic isolation or blocking of threats. These capabilities reduce response times and allow security teams to focus on strategic analysis rather than routine monitoring.
Offensive Security
For offensive operations, AI accelerates open-source intelligence (OSINT) gathering, parses scanner output efficiently, and maps attack surfaces to streamline penetration testing workflows.
Software Security
AI-driven static and dynamic application security testing (SAST/DAST) scanners identify code flaws with greater speed than manual review. Note, however, that current AI systems remain less effective at writing secure code from scratch than at detecting existing vulnerabilities.
Important Considerations
AI outputs are not infallible. Security practitioners must verify results, respect intellectual property and data ownership, guard training data and model integrity, and avoid unintended disruptions when deploying AI-assisted tools.
Questions and Answers
Question-1: Complete the AI showcase by progressing through all of the stages. What is the flag presented to you?
<redacted-flag>
Question-2: Execute the exploit provided by the red team agent against the vulnerable web application hosted at <targetbox-ip>:5000. What flag is provided in the script’s output after it?
Remember, you will need to update the IP address placeholder in the script with the IP of your vulnerable machine (<targetbox-ip>:5000)
<redacted-flag>
Question-3: If you enjoyed today’s room, feel free to check out the Defending Adversarial Attacks room, where you will learn how to harden and secure AI models.
No answer needed