EventMaster - Learning Web Attacks – Institut für IT-Sicherheit

Attacking EventMaster: Implementation of a Web Application for Learning Cybersecurity Attack Strategies

Information and supplementary materials on the projekt and paper "Attacking EventMaster"

The number of web applications is constantly increasing, which opens up opportunities for attackers to intercept sensitive data or compromise systems. To counter this, future programmers must understand how these attacks work. We describe the development and validation of the interactive hacking simulation software >>EventMaster<<, which enables students to learn three typical attack techniques against web applications interactively.

This project is submitted at the Mensch und Computer 2025, Gesellschaft für Informatik, 31. August - 03. September 2025, Chemnitz, Germany

DOI: 10.18420/muc2025-mci-src-262

Additional Information

EventMaster Code

The full EventMaster code is available online on GitHub: https://github.com/TobiZog/eventmaster
Exercises
Exercise sheets with additional information and exercise instructions in German and English
- Exercises - German
- Exercises - English
Evaluation Results
During the development, we tested the newly developed tool EventMaster. University students used the tool to solve exercises.

The results with quotes can be found in here (in German).
- Auswertung des Beta-Test
Presentation
Presentation with project motivation, methodology, test and evaluation (in German)
- Presentation

Last Change: 29.07.25 Print