Alumnos Maestr\u00eda Ciberseguridad – Hacking Challenge<\/title>  <script src=\"https:\/\/cdn.jsdelivr.net\/npm\/canvas-confetti@1.6.0\/dist\/confetti.browser.min.js\"><\/script> <\/p>\n<style> :root { --primary: #1e40af; --primary-dark: #1e3a8a; --primary-light: #eff6ff; --bg: #f8fafc; --card-bg: #ffffff; --text: #0f172a; --text-secondary: #475569; --border: #e2e8f0; --correct: #10b981; --correct-bg: #ecfdf5; --correct-text: #065f46; --incorrect: #ef4444; --incorrect-bg: #fef2f2; --incorrect-text: #991b1b; --warning: #f59e0b; --warning-bg: #fffbeb; --warning-text: #78350f; --slot-bg: #f1f5f9; } .wp-sim-body { font-family: 'Segoe UI', system-ui, -apple-system, sans-serif; background-color: var(--bg); color: var(--text); margin: 0; padding: 0; line-height: 1.6; -webkit-tap-highlight-color: transparent; } \/* --- PANTALLA DE LOGEO INICIAL --- *\/ .login-overlay { position: fixed; top: 0; left: 0; width: 100%; height: 100%; background: #0f172a; z-index: 10000; display: flex; align-items: center; justify-content: center; padding: 20px; box-sizing: border-box; } .login-card { background: #020617; border: 2px solid var(--primary); padding: 30px; border-radius: 16px; max-width: 400px; width: 100%; text-align: center; box-shadow: 0 10px 25px rgba(30, 58, 138, 0.5); color: white; } .login-input { width: 100%; padding: 12px; margin: 15px 0; border-radius: 8px; border: 1px solid var(--border); background: #0f172a; color: #34d399; font-family: monospace; font-size: 16px; box-sizing: border-box; text-align: center; outline: none; } .login-input:focus { border-color: #34d399; box-shadow: 0 0 10px rgba(52, 211, 153, 0.3); } .progress-bar-container { position: sticky; top: 0; background-color: white; border-bottom: 2px solid var(--border); padding: 12px 20px; z-index: 1000; box-shadow: 0 4px 6px -1px rgba(0,0,0,0.05); } .progress-flex { max-width: 1000px; margin: 0 auto; display: flex; justify-content: space-between; align-items: center; gap: 10px; flex-wrap: wrap; } \/* --- ESTILOS BLOQUE DE PERFIL ARRIBA --- *\/ .user-profile-block { display: flex; align-items: center; gap: 10px; } .profile-avatar { width: 36px; height: 36px; border-radius: 50%; object-fit: cover; border: 2px solid var(--primary); box-shadow: 0 2px 4px rgba(0,0,0,0.1); flex-shrink: 0; } .progress-title { font-weight: 700; color: var(--primary-dark); font-size: 16px; } .stats-group { display: flex; align-items: center; gap: 10px; } .score-badge { background-color: var(--primary-light); color: var(--primary-dark); padding: 6px 18px; border-radius: 50px; font-weight: 800; font-size: 15px; box-shadow: inset 0 2px 4px rgba(0,0,0,0.05); white-space: nowrap; } .streak-badge { background-color: #fff7ed; color: #c2410c; border: 1px solid #fed7aa; padding: 6px 14px; border-radius: 50px; font-weight: 800; font-size: 15px; display: none; align-items: center; gap: 4px; animation: pulse 1.5s infinite; } .rank-badge { background-color: #f1f5f9; color: #475569; border: 1px solid var(--border); padding: 6px 14px; border-radius: 50px; font-weight: 700; font-size: 14px; } .progress-wrapper { width: 100%; max-width: 1000px; margin: 8px auto 0 auto; } .ui-progress-bar { width: 100%; height: 8px; background-color: var(--border); border-radius: 4px; overflow: hidden; } .ui-progress-fill { height: 100%; width: 0%; background: linear-gradient(90deg, #3b82f6, #10b981); transition: width 0.4s ease; } .container { max-width: 1000px; margin: 30px auto; padding: 0 20px 100px 20px; box-sizing: border-box; } header { background: linear-gradient(135deg, #0f172a, #1e3a8a); color: white; padding: 40px; border-radius: 16px; margin-bottom: 40px; text-align: center; box-shadow: 0 10px 20px -3px rgba(30, 58, 138, 0.3); border: 1px solid #1e40af; } header h1 { margin: 0; font-size: 28px; font-weight: 800; } header p { margin: 10px 0 0 0; opacity: 0.9; font-size: 16px; font-weight: 500; } .section-header { background-color: var(--primary-light); border-left: 6px solid var(--primary-dark); color: var(--primary-dark); padding: 15px 20px; font-size: 19px; font-weight: 700; margin: 45px 0 20px 0; border-radius: 0 10px 10px 0; } .card { background: white; border: 1px solid var(--border); border-radius: 12px; margin-bottom: 25px; padding: 25px; box-shadow: 0 4px 6px -1px rgba(0,0,0,0.01); box-sizing: border-box; transition: all 0.3s ease; } .card.answered-correctly { border-color: var(--correct); background-color: var(--correct-bg); transform: translateY(-2px); box-shadow: 0 8px 16px -4px rgba(16, 185, 129, 0.2); } .question-text { font-size: 16px; font-weight: 700; margin-bottom: 18px; color: #0f172a; } \/* --- ESTILOS SOPA DE LETRAS OPTIMIZADA --- *\/ .wordsearch-container { display: flex; flex-direction: column; align-items: center; gap: 20px; width: 100%; } .wordsearch-grid { display: grid; grid-template-columns: repeat(9, minmax(0, 1fr)); gap: 6px; max-width: 360px; width: 100%; background: #f1f5f9; padding: 10px; border-radius: 12px; border: 2px solid var(--border); box-sizing: border-box; margin: 0 auto; } .grid-cell { aspect-ratio: 1; display: flex; align-items: center; justify-content: center; font-weight: 800; font-size: 16px; background: white; border-radius: 6px; cursor: pointer; user-select: none; border: 1px solid var(--border); transition: all 0.2s; } .grid-cell:hover { background: var(--primary-light); border-color: var(--primary); } .grid-cell.selected { background: var(--warning-bg); border-color: var(--warning); color: var(--warning-text); animation: pulse 1s infinite; } .grid-cell.found { background: var(--correct-bg); border-color: var(--correct); color: var(--correct-text); cursor: default; } .word-list { display: flex; flex-direction: column; gap: 12px; width: 100%; max-width: 650px; } .word-item { background: #f1f5f9; border: 1px solid var(--border); padding: 14px 18px; border-radius: 10px; font-size: 14px; color: var(--text-secondary); transition: all 0.3s ease; display: flex; justify-content: space-between; align-items: center; gap: 15px; } .word-item-text { flex: 1; line-height: 1.5; } .word-item.found { background: var(--correct-bg); border-color: var(--correct); color: var(--correct-text); } .blank-field { color: #64748b; font-family: monospace; border-bottom: 2px dashed #94a3b8; padding: 0 5px; font-weight: bold; } \/* --- STYLES FOR DRAG & DROP --- *\/ .drag-container { display: flex; flex-direction: column; gap: 20px; } .words-bank { display: flex; flex-wrap: wrap; gap: 10px; padding: 18px; background: #f1f5f9; border-radius: 10px; min-height: 60px; border: 2px dashed var(--primary); align-items: center; justify-content: center; } .draggable-word { background: var(--primary-dark); color: white; padding: 8px 16px; border-radius: 20px; font-weight: bold; cursor: pointer; user-select: none; transition: all 0.2s; box-shadow: 0 2px 4px rgba(0,0,0,0.1); font-size: 14px; } .draggable-word:hover { background-color: var(--primary); } .slots-container { display: flex; flex-direction: column; gap: 12px; } .slot-row { display: flex; align-items: center; background: var(--slot-bg); padding: 12px; border-radius: 8px; border: 1px solid var(--border); gap: 15px; } .slot-desc { flex: 1; font-size: 14px; font-weight: 500; color: var(--text-secondary); } .drop-zone { width: 175px; height: 44px; border: 2px dashed #94a3b8; border-radius: 22px; display: flex; align-items: center; justify-content: center; background: white; transition: all 0.2s; cursor: pointer; flex-shrink: 0; font-size: 13px; font-weight: bold; text-align: center; } .drop-zone.filled { border: 2px solid var(--primary-dark); background: transparent; } \/* --- OVERLAY DE COMPLETADO \/ TERMINAL HACKING --- *\/ .completion-overlay { position: fixed; top: 0; left: 0; width: 100%; height: 100%; background: rgba(15, 23, 42, 0.96); z-index: 9999; display: none; align-items: center; justify-content: center; padding: 20px; box-sizing: border-box; backdrop-filter: blur(10px); } .completion-modal { background: #020617; border: 2px solid #10b981; box-shadow: 0 0 30px rgba(16, 185, 129, 0.4); border-radius: 16px; max-width: 700px; width: 100%; padding: 25px; color: #10b981; font-family: 'Courier New', Courier, monospace; text-align: center; max-height: 95vh; overflow-y: auto; } .terminal-text { text-align: left; background: #090d16; border: 1px solid #1e293b; padding: 12px; border-radius: 8px; margin: 15px 0; font-size: 13px; line-height: 1.5; max-height: 120px; overflow-y: auto; color: #34d399; } \/* --- TABLA DE L\u00cdDERES GLOBAL EN TIEMPO REAL --- *\/ .table-wrapper { overflow-x: auto; margin-top: 15px; border: 1px solid #1e293b; border-radius: 8px; background: #090d16; } .history-table { width: 100%; border-collapse: collapse; font-family: sans-serif; font-size: 13px; color: #cbd5e1; text-align: left; } .history-table th { background: #1e293b; color: #34d399; padding: 10px; font-weight: 700; } .history-table td { padding: 10px; border-bottom: 1px solid #1e293b; } .blink { animation: blinker 1s linear infinite; } @keyframes blinker { 50% { opacity: 0; } } @media (max-width: 640px) { .progress-bar-container { padding: 10px 12px; } .progress-title { font-size: 12.5px; max-width: 110px; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; } .profile-avatar { width: 28px; height: 28px; } .container { padding: 0 12px 80px 12px; margin: 15px auto; } header { padding: 25px 15px; border-radius: 12px; } header h1 { font-size: 20px; } .wordsearch-grid { grid-template-columns: repeat(9, minmax(0, 1fr)); gap: 4px; padding: 6px; max-width: 295px; margin: 0 auto !important; } .grid-cell { font-size: 12px; } .word-item { flex-direction: column; align-items: stretch; gap: 10px; } .slot-row { flex-direction: column; align-items: stretch; gap: 10px; } .drop-zone { width: 100%; height: 46px; } } <\/style>\n<p><\/head><body data-rsssl=1 class=\"wp-sim-body\"><\/p>\n<div id=\"login-overlay\" class=\"login-overlay\"> <\/p>\n<div class=\"login-card\"> <\/p>\n<h2 style=\"color: #34d399; margin-top:0;\">\ud83d\udd10 IDENTIFICATION<\/h2>\n<p> <pee style=\"font-size: 14px; color: #94a3b8;\">Introduce tu nombre para sincronizar tu puntaje en el Servidor Global.<\/pee> <input type=\"text\" id=\"username-input\" class=\"login-input\" placeholder=\"Tu Nombre o Alias...\" autocomplete=\"off\"> <button class=\"btn-check\" style=\"background: var(--primary); width:100%; padding:12px;\" onclick=\"submitLogin()\">Iniciar Auditor\u00eda Global<\/button> <\/div>\n<p><\/div>\n<p><\/p>\n<div class=\"progress-bar-container\"> <\/p>\n<div class=\"progress-flex\">  <\/p>\n<div class=\"user-profile-block\"> <img decoding=\"async\" src=\"https:\/\/blamiss.com\/wp-content\/uploads\/2026\/04\/listo.jpg\" alt=\"Avatar\" class=\"profile-avatar\"> <span class=\"progress-title\" id=\"bootcamp-user-title\">Hacking Bootcamp<\/span> <\/div>\n<p> <\/p>\n<div class=\"stats-group\"> <span class=\"streak-badge\" id=\"streak-display\">\ud83d\udd25 Racha: 0<\/span> <span class=\"rank-badge\" id=\"rank-display\">Script Kiddie \ud83d\udc23<\/span> <span class=\"score-badge\" id=\"score-display\">Puntos: 0 \/ 24<\/span> <\/div>\n<p> <\/div>\n<p> <\/p>\n<div class=\"progress-wrapper\"> <\/p>\n<div class=\"ui-progress-bar\"> <\/p>\n<div class=\"ui-progress-fill\" id=\"progress-fill\"><\/div>\n<p> <\/div>\n<p> <\/div>\n<p><\/div>\n<p><\/p>\n<div class=\"container\"> <\/p>\n<header> <\/p>\n<h1>Alumnos Maestr\u00eda Ciberseguridad<\/h1>\n<p> <pee>Security Hub – Sistemas, Aplicaciones y Datos Masivos<\/pee> <\/header>\n<p> <\/p>\n<div id=\"drag-drop-zone\"><\/div>\n<p> <\/p>\n<div id=\"sopa-zone\"><\/div>\n<p> <\/p>\n<div id=\"drag-drop-zone-2\"><\/div>\n<p> <\/p>\n<div id=\"dropdown-zone\"><\/div>\n<p> <\/p>\n<div id=\"multiple-choice-zone\"><\/div>\n<p><\/div>\n<p><\/p>\n<div id=\"completion-overlay\" class=\"completion-overlay\"> <\/p>\n<div class=\"completion-modal\"> <\/p>\n<h2 style=\"color: #10b981; font-weight: 800; margin-top: 0;\">\ud83d\udd13 \u00a1SISTEMA HACKEADO CON \u00c9XITO!<\/h2>\n<p> <\/p>\n<h3 style=\"color: #60a5fa;\" id=\"welcome-success-text\">Has completado el simulador<\/h3>\n<p>  <\/p>\n<div class=\"terminal-text\" id=\"terminal-output\"><\/div>\n<p> <\/p>\n<div style=\"background: #0f172a; padding: 15px; border: 1px solid #1e40af; margin-bottom: 15px; text-align: left;\"> <pee style=\"margin: 0; font-weight: bold; color: #60a5fa;\">\ud83d\udccb REPORT STATUS:<\/pee> <pee style=\"margin: 5px 0; color: #cbd5e1;\">Total de Errores: <strong id=\"modal-errors-count\" style=\"color: #f87171;\">0<\/strong><\/pee> <pee id=\"modal-advice\" style=\"margin: 10px 0 0 0; color: #e2e8f0; font-size: 13.5px;\"><\/pee> <\/div>\n<p>  <\/p>\n<div style=\"text-align:left; margin-bottom: 15px;\"> <span style=\"color: #34d399; font-weight: bold; font-size:14px;\">\ud83d\udcca LEADERBOARD GLOBAL (Servidor en la Nube):<\/span> <\/p>\n<div class=\"table-wrapper\"> <\/p>\n<table class=\"history-table\"> <\/p>\n<thead> <\/p>\n<tr> <\/p>\n<th>Hacker<\/th>\n<p> <\/p>\n<th>Puntos<\/th>\n<p> <\/p>\n<th>Errores<\/th>\n<p> <\/p>\n<th>Rango<\/th>\n<p> <\/tr>\n<p> <\/thead>\n<p> <\/p>\n<tbody id=\"history-table-body\"> <\/p>\n<tr>\n<td colspan=\"4\" style=\"text-align:center;\">Cargando base de datos central…<\/td>\n<\/tr>\n<p> <\/tbody>\n<p> <\/table>\n<p> <\/div>\n<p> <\/div>\n<p> <pee class=\"blink\" style=\"color: #f59e0b; font-weight: bold; font-size: 12px;\">\ud83d\udea8 AVISO: Se requiere refrescar el entorno para una nueva sesi\u00f3n.<\/pee> <button class=\"btn-check\" style=\"background: #10b981; width: 100%; padding: 12px 20px;\" onclick=\"window.location.reload();\">\ud83d\udd04 Actualizar P\u00e1gina Web<\/button> <\/div>\n<p><\/div>\n<p><script> const GOOGLE_SCRIPT_URL = \"https:\/\/script.google.com\/macros\/s\/AKfycbzkddiGJwKqG9oG_uka3meE5AluSpOZEmqJlgAomLNeQ5F_O3N1vj1EKx468x6xPPQW\/exec\"; const masterQuestionPool = [ \/\/ ELEMENTOS DE ARRASTRE (DRAG) { id: 1, type: \"drag\", mod: \"1- Windows Server\", token: \"CREDENTIAL\", text: \"Caracter\u00edstica que utiliza Virtual Secure Mode (VSM) para proteger identidades de ataques Pass-the-Hash.\" }, { id: 2, type: \"drag\", mod: \"1- Windows Server\", token: \"CLARA\", text: \"Herramienta del CCN-CERT para auditar el endurecimiento en Windows frente al ENS.\" }, { id: 11, type: \"drag\", mod: \"2- Seguridad Web\", token: \"TRACE\", text: \"M\u00e9todo HTTP peligroso que permite evadir cookies HTTPOnly mediante Cross-Site Tracing (XST).\" }, { id: 12, type: \"drag\", mod: \"2- Seguridad Web\", token: \"WAF\", text: \"Dispositivo que filtra y bloquea tr\u00e1fico web malicioso a nivel de capa de aplicaci\u00f3n (Capa 7).\" }, { id: 21, type: \"drag\", mod: \"3- OWASP 2021\", token: \"PATH_TRAVERSAL\", text: \"Defecto donde se introducen secuencias de escape de directorios (..\/) para acceder a archivos locales del host.\" }, { id: 31, type: \"drag\", mod: \"4- Autenticaci\u00f3n\", token: \"OAUTH\", text: \"Est\u00e1ndar industrial ampliamente utilizado con el fin de delegar flujos de autorizaci\u00f3n estructurados entre aplicaciones.\" }, { id: 41, type: \"drag\", mod: \"5- Gesti\u00f3n Sesi\u00f3n\", token: \"SESSION_ID\", text: \"Elemento cr\u00edtico emitido tras un login correcto para poder asociar y relacionar las peticiones posteriores de un usuario.\" }, { id: 51, type: \"drag\", mod: \"6- Desarrollo Seguro\", token: \"HADOOP\", text: \"Ecosistema\/Framework distribuido de c\u00f3digo abierto emblem\u00e1tico en el almacenamiento y an\u00e1lisis de Big Data masivo.\" }, { id: 61, type: \"drag\", mod: \"7- Metodolog\u00edas Auditor\u00eda\", token: \"TLS\", text: \"Protocolo criptogr\u00e1fico est\u00e1ndar mandatorio para salvaguardar la confidencialidad de la informaci\u00f3n en tr\u00e1nsito.\" }, { id: 71, type: \"drag\", mod: \"8- Producci\u00f3n\", token: \"ARM\", text: \"Componente de Azure encargado de recibir, autenticar y aprobar las solicitudes operativas de APIs o SDKs.\" }, { id: 81, type: \"drag\", mod: \"9- Nube Azure\", token: \"RBAC\", text: \"Control de acceso basado en roles utilizado in Azure para aplicar restricciones y gobernanza granular sobre recursos.\" }, { id: 91, type: \"drag\", mod: \"10- Big Data\", token: \"KNOX\", text: \"REST API Gateway perimetral que centraliza la autenticaci\u00f3n y los accesos sobre entornos Hadoop.\" }, \/\/ DESPLEGABLES (DROPDOWN) { id: 3, type: \"dropdown\", mod: \"1- Windows Server\", text: \"Dentro del despliegue de Unidades Organizativas (OU) en Active Directory, las pol\u00edticas de complejidad de contrase\u00f1as se deben configurar a\", correct: \"dominio\", options: { dominio: \"Nivel de Dominio\", rol: \"Nivel de Rol\", app: \"Nivel de Aplicaci\u00f3n\" } }, { id: 13, type: \"dropdown\", mod: \"2- Seguridad Web\", text: \"Las siglas RIA en el contexto de las arquitecturas modernas de aplicaciones enriquecidas de Internet se vinculan directamente a tecnolog\u00edas como\", correct: \"ajax\", options: { ajax: \"AJAX\", soap: \"SOAP\", flash: \"Flash legados\" } }, { id: 22, type: \"dropdown\", mod: \"3- OWASP 2021\", text: \"Los fallos arquitect\u00f3nicos que corresponden a errores nativos de dise\u00f1o y no se solucionan con parches simples pertenecen a\", correct: \"design\", options: { design: \"A04:2021-Insecure Design\", configuration: \"A05:2021-Security Misconfiguration\" } }, { id: 32, type: \"dropdown\", mod: \"4- Autenticaci\u00f3n\", text: \"Para neutralizar ataques automatizados de diccionario dirigidos a adivinar credenciales en el login, es una pr\u00e1ctica recomendada implementar\", correct: \"captcha\", options: { captcha: \"Retos CAPTCHA\", tls: \"Cifrado TLS\", hsts: \"Pol\u00edticas HSTS\" } }, { id: 42, type: \"dropdown\", mod: \"5- Gesti\u00f3n Sesi\u00f3n\", text: \"Para contrarrestar el secuestro de sesiones l\u00f3gicas por parte de scripts maliciosos, se debe configurar estrictamente el flag\", correct: \"httponly\", options: { httponly: \"HTTPOnly\", secure: \"Secure\", samesite: \"SameSite\" } }, { id: 52, type: \"dropdown\", mod: \"6- Desarrollo Seguro\", text: \"El patr\u00f3n arquitect\u00f3nico utilizado com\u00fanmente para estructurar de forma l\u00f3gica y modular el c\u00f3digo dividi\u00e9ndolo en tres capas se conoce como\", correct: \"mvc\", options: { mvc: \"MVC (Modelo-Vista-Controlador)\", micro: \"Microservicios\", soap: \"SOA\" } }, { id: 62, type: \"dropdown\", mod: \"7- Metodolog\u00edas Auditor\u00eda\", text: \"Las herramientas semiautom\u00e1ticas de an\u00e1lisis est\u00e1tico (SAST) revisan el c\u00f3digo fuente simulando pruebas anal\u00edticas de\", correct: \"blanca\", options: { blanca: \"Caja Blanca\", negra: \"Caja Negra\" } }, { id: 72, type: \"dropdown\", mod: \"8- Producci\u00f3n\", text: \"Para la captura centralizada de alertas y logs de seguridad en la monitorizaci\u00f3n continua de producci\u00f3n se usan\", correct: \"siem\", options: { siem: \"Sistemas SIEM\", sast: \"Analizadores est\u00e1ticos\" } }, { id: 82, type: \"dropdown\", mod: \"9- Nube Azure\", text: \"Para administrar la gobernanza en varias suscripciones de Azure, se debe utilizar el concepto de\", correct: \"admin\", options: { admin: \"Grupos de administraci\u00f3n\", recursos: \"Grupos de recursos\" } }, { id: 92, type: \"dropdown\", mod: \"10- Big Data\", text: \"Para registrar y revisar eventos detallados de accesos minuciosos directamente sobre los campos de datos, se implementan\", correct: \"granulares\", options: { granulares: \"Auditor\u00edas granulares\", perimetrales: \"Reglas perimetrales\" } }, \/\/ OPCI\u00d3N M\u00daLTIPLE (MC) -> BANCO EXTENDIDO RESTAURADO REQUERIDO \ud83c\udf89 { id: 4, type: \"mc\", mod: \"1- Windows Server\", q: \"La herramienta Policy Analyzer, incluida dentro del Microsoft Security Compliance Toolkit (SCT), se utiliza principalmente para analizar y comparar conjuntos de directivas de grupo (GPO) con el fin de identificar conflictos o redundancias.\", opts: { A: \"Verdadero.\", B: \"Falso.\" }, ans: \"A\", exp: \"Policy Analyzer permite comparar colecciones de GPOs para identificar discrepancies o redundancias de manera clara.\" }, { id: 5, type: \"mc\", mod: \"1- Windows Server\", q: \"En la implementaci\u00f3n de la arquitectura de seguridad en Windows Server 2022, el protocolo TLS 1.3 y Secure DNS vienen deshabilitados por defecto por razones de compatibilidad con sistemas legados.\", opts: { A: \"Verdadero.\", B: \"Falso.\" }, ans: \"B\", exp: \"Falso. Windows Server 2022 trae activados nativamente por defecto tanto TLS 1.3 como DoH para robustecer el entorno corporativo.\" }, { id: 6, type: \"mc\", mod: \"1- Windows Server\", q: \"Las directivas de seguridad Kerberos forman parte de los recursos fundamentales listados para profundizar en el aseguramiento del entorno Windows.\", opts: { A: \"Verdadero.\", B: \"Falso.\" }, ans: \"A\", exp: \"Verdadero. Mitigar ataques como Golden Ticket exige el endurecimiento estricto del protocolo Kerberos en Active Directory.\" }, { id: 7, type: \"mc\", mod: \"1- Windows Server\", q: \"\u00bfQu\u00e9 caracter\u00edstica de seguridad utiliza el Virtual Secure Mode (VSM) para proteger los secretos del sistema frente a ataques de volcado de memoria?\", opts: { A: \"Windows Defender ATP\", B: \"Credential Guard\", C: \"Just Enough Administration (JEA)\" }, ans: \"B\", exp: \"Credential Guard a\u00edsla los secretos de identidad (procesos LSASS) dentro de un contenedor VSM protegido por hipervisor.\" }, { id: 8, type: \"mc\", mod: \"1- Windows Server\", q: \"\u00bfQu\u00e9 soluci\u00f3n del ecosistema de Microsoft permite limitar los privilegios de administraci\u00f3n en PowerShell mediante endpoints restringidos?\", opts: { A: \"AppLocker\", B: \"Just Enough Administration (JEA)\", C: \"SCT Toolkit\" }, ans: \"B\", exp: \"JEA es una tecnolog\u00eda basada en RBAC para PowerShell que restringe los comandos ejecutables por un usuario espec\u00edfico.\" }, { id: 9, type: \"mc\", mod: \"1- Windows Server\", q: \"El conjunto de herramientas que facilita el manejo de las plantillas de seguridad tanto para Windows Server como para Windows 10 se denomina Microsoft Security Compliance Toolkit.\", opts: { A: \"Verdadero.\", B: \"Falso.\" }, ans: \"A\", exp: \"Verdadero. El SCT unifica las herramientas necesarias para analizar, comparar y desplegar plantillas de endurecimiento recomendadas por Microsoft.\" }, { id: 10, type: \"mc\", mod: \"1- Windows Server\", q: \"\u00bfCu\u00e1l de las siguientes es una de las versiones de Windows Server analizadas en el documento para revisar sus novedades de seguridad?\", opts: { A: \"Windows Server 2003\", B: \"Windows Server 2008\", C: \"Windows Server 2016\" }, ans: \"C\", exp: \"Windows Server 2016 introdujo protecciones fundamentales basadas en virtualizaci\u00f3n (VSM) y el aislamiento de Credential Guard.\" }, { id: 14, type: \"mc\", mod: \"2- Seguridad Web\", q: \"\u00bfCu\u00e1l es uno de los objetivos principales al estudiar la seguridad en las aplicaciones online y web?\", opts: { A: \"Aprender a realizar particiones de disco f\u00edsico.\", B: \"Conocer las medidas necesarias para mitigar ataques una vez desplegadas online.\", C: \"Dise\u00f1ar hardware criptogr\u00e1fico basado en TPM 2.0.\" }, ans: \"B\", exp: \"El foco principal radica en robustecer el software para resistir ataques externos al exponer los servicios en Internet.\" }, { id: 15, type: \"mc\", mod: \"2- Seguridad Web\", q: \"El uso del m\u00e9todo GET en los formularios web garantiza la confidencialidad de los datos sensibles de los usuarios, ya que estos viajan cifrados dentro del cuerpo de la petici\u00f3n HTTP.\", opts: { A: \"Verdadero.\", B: \"Falso.\" }, ans: \"B\", exp: \"Falso. El m\u00e9todo GET expone los par\u00e1metros directamente en la barra de direcciones de la URL (Query String), comprometiendo la confidencialidad.\" }, { id: 16, type: \"mc\", mod: \"2- Seguridad Web\", q: \"\u00bfQu\u00e9 m\u00e9todo del protocolo HTTP presenta un riesgo severo de seguridad debido a que permite a un atacante saltarse las protecciones de las cookies configuradas como HTTPOnly?\", opts: { A: \"GET\", B: \"TRACE\", C: \"POST\" }, ans: \"B\", exp: \"El m\u00e9todo TRACE activa Cross-Site Tracing (XST), reflejando las cabeceras HTTP de la petici\u00f3n (incluyendo cookies) directo en el cuerpo de la respuesta.\" }, { id: 17, type: \"mc\", mod: \"2- Seguridad Web\", q: \"La monitorizaci\u00f3n continua constituye uno de los pilares fundamentales para garantizar la seguridad de las aplicaciones desplegadas online.\", opts: { A: \"Verdadero.\", B: \"Falso.\" }, ans: \"A\", exp: \"La visibilidad en tiempo de producci\u00f3n permite reaccionar velozmente e identificar incidentes activos antes de que causen da\u00f1os graves.\" }, { id: 18, type: \"mc\", mod: \"2- Seguridad Web\", q: \"Un Firewall de Inspecci\u00f3n de Estado (Stateful) se diferencia del filtro de paquetes cl\u00e1sico porque:\", opts: { A: \"Mantiene un registro de las conexiones activas y eval\u00faa el contexto de los paquetes de red.\", B: \"Solo examina de manera aislada direcciones IP de origen.\", C: \"Se ejecuta \u00fanicamente en la capa f\u00edsica para evitar congestiones de hardware.\" }, ans: \"A\", exp: \"El firewall de estado guarda memoria (state table) del canal establecido para autorizar los flujos posteriores de la misma conexi\u00f3n.\" }, { id: 19, type: \"mc\", mod: \"2- Seguridad Web\", q: \"Un sistema IDS tiene la facultad de bloquear de manera activa las conexiones sospechosas por s\u00ed mismo en tiempo real.\", opts: { A: \"Verdadero.\", B: \"Falso.\" }, ans: \"B\", exp: \"Es falso. El IDS solo detecta e informa. La capacidad de bloqueo activo en tiempo real recae en un sistema IPS.\" }, { id: 20, type: \"mc\", mod: \"2- Seguridad Web\", q: \"Las reglas en un cortafuegos se procesan secuencialmente de abajo hacia arriba.\", opts: { A: \"Verdadero.\", B: \"Falso.\" }, ans: \"B\", exp: \"Falso. Se analizan de arriba hacia abajo (Top-Down). Al coincidir con la primera regla compatible (First-Match), el cortafuegos deja de buscar.\" } ]; const sopaPool = [ { word: \"OAUTH\", hint: \"Est\u00e1ndar industrial utilizado con el fin de delegar flujos de autorizaci\u00f3n federada entre servicios de terceros: ______.\" }, { word: \"RBAC\", hint: \"Modelo de control de acceso utilizado en Azure para aplicar restricciones y gobernanza granular sobre recursos: ______.\" }, { word: \"WAF\", hint: \"Dispositivo de seguridad perimetral que filtra, monitoriza y bloquea el tr\u00e1fico web malicioso a nivel de capa de aplicaci\u00f3n (Capa 7): ______.\" }, { word: \"TLS\", hint: \"Protocolo criptogr\u00e1fico est\u00e1ndar encargado de garantizar la confidencialidad de la informaci\u00f3n en tr\u00e1nsito: ______.\" }, { word: \"SIEM\", hint: \"Sistema centralizado para la captura de alertas, logs de auditor\u00eda y monitorizaci\u00f3n de incidentes en producci\u00f3n: ______.\" }, { word: \"XSS\", hint: \"Vulnerabilidad web basada en la inyecci\u00f3n de scripts maliciosos del lado del cliente en el navegador de los usuarios: ______.\" }, { word: \"IDOR\", hint: \"Fallo de control de acceso donde la aplicaci\u00f3n expone un identificador de objeto directo en la URL de forma insegura: ______.\" }, { word: \"XXE\", hint: \"Vulnerabilidad donde un analizador procesa entradas maliciosas que hacen referencia a entidades externas XML: ______.\" } ]; let activeUsername = \"Hacker An\u00f3nimo\";  let currentlySelectedWord = null; let globalScore = 0; let answeredQuestionsCount = 0;  let currentStreak = 0; let totalErrors = 0;  let wsStartCell = null; let dynamicGrid = []; let activeSopaWords = {}; function submitLogin() { const input = document.getElementById(\"username-input\"); if (input && input.value.trim() !== \"\") { activeUsername = input.value.trim(); } document.getElementById(\"login-overlay\").style.display = \"none\"; document.getElementById(\"bootcamp-user-title\").innerText = activeUsername; initializeRandomQuiz(); } function updateScoreDisplay() { const scoreDisplay = document.getElementById(\"score-display\"); if (scoreDisplay) scoreDisplay.innerText = `Puntos: ${globalScore} \/ 24`; const progressFill = document.getElementById(\"progress-fill\"); if (progressFill) { const percentage = Math.min((answeredQuestionsCount \/ 24) * 100, 100); progressFill.style.width = `${percentage}%`; } const rankDisplay = document.getElementById(\"rank-display\"); if (rankDisplay) { if (globalScore < 6) rankDisplay.innerText = \"Script Kiddie \ud83d\udc23\"; else if (globalScore < 12) rankDisplay.innerText = \"Pentester Junior \ud83d\udd0d\"; else if (globalScore < 18) rankDisplay.innerText = \"Security Analyst \ud83d\udee1\ufe0f\"; else if (globalScore < 23) rankDisplay.innerText = \"Hacker \u00c9tico Elite \ud83d\udcbb\"; else rankDisplay.innerText = \"CISO Supremo \ud83d\udc51\"; } const streakDisplay = document.getElementById(\"streak-display\"); if (streakDisplay) { if (currentStreak > 1) { streakDisplay.innerText = `\ud83d\udd25 Racha: ${currentStreak}`; streakDisplay.style.display = \"inline-flex\"; } else { streakDisplay.style.display = \"none\"; } } if (answeredQuestionsCount >= 24) { setTimeout(triggerGameCompletion, 1000); } } function triggerCelebration() { confetti({ particleCount: 100, spread: 70, origin: { y: 0.8 } }); } function triggerGameCompletion() { for(let i = 0; i < 3; i++) { setTimeout(triggerCelebration, i * 450); } const overlay = document.getElementById(\"completion-overlay\"); overlay.style.display = \"flex\"; document.getElementById(\"welcome-success-text\").innerText = `\u00a1Lo lograste, ${activeUsername}! :)`; document.getElementById(\"modal-errors-count\").innerText = totalErrors; const finalRank = document.getElementById(\"rank-display\").innerText; let adviceText = \"\"; if (totalErrors === 0) { adviceText = \"\ud83c\udfc6 \u00a1ACCESO PERFECTO, CISO SUPREMO! Tu precisi\u00f3n es quir\u00fargica. Has neutralizado todos los vectores de ataque y resuelto la sopa de letras sin activar una sola alerta en el SIEM. Tu nivel de auditor\u00eda es legendario. \u00a1Sigue liderando la vanguardia de la ciberseguridad corporativa de forma impecable! \ud83d\udee1\ufe0f\"; } else if (totalErrors === 1) { adviceText = \"\u26a1 \u00a1CASI PERFECTO! Solo registramos 1 error menor en tu bit\u00e1cora de hackeo. Un solo desliz de configuraci\u00f3n l\u00f3gica separa tu reporte de la excelencia absoluta. Revisa con calma ese emparejamiento o celda donde tuviste dudas; \u00a1el pr\u00f3ximo escaneo de vulnerabilidades ser\u00e1 completamente limpio! \ud83d\udd0d\"; } else if (totalErrors === 2) { adviceText = \"\ud83d\udd75\ufe0f \u00a1OPERACI\u00d3N DE ALTO NIVEL! Tuviste exactamente 2 fallos t\u00e1cticos durante la auditor\u00eda. Tu firma digital es limpia y tu racha demuestra un gran entendimiento t\u00e9cnico de los entornos. Ajusta la precisi\u00f3n en los flags de mitigaci\u00f3n de la red y estar\u00e1s listo para unirte al Red Team elite. \ud83d\udcbb\"; } else if (totalErrors === 3) { adviceText = \"\ud83d\udee1\ufe0f \u00a1COMPROMISO EXITOSO! Acumulaste 3 alertas de desconfiguraci\u00f3n. El WAF detect\u00f3 un poco de ruido menor en tu tr\u00e1fico web, pero lograste el bypass final con \u00e9xito. Refuerza tus conocimientos sobre el control de acceso de tokens OAuth 2.0 y el manejo seguro del Active Directory corporativo. \u2699\ufe0f\"; } else if (totalErrors === 4) { adviceText = \"\ud83d\udcca \u00a1BUEN RENDIMIENTO! Registramos 4 vulnerabilidades l\u00f3gicas en tu despliegue. Tu base es buena, pero esos 4 deslices indican que debes prestar m\u00e1s atenci\u00f3n a las cabeceras HTTP de seguridad avanzada (como HSTS o nosniff). \u00a1Asegura los sockets del servidor y vuelve a compilar! \ud83e\udde0\"; } else if (totalErrors === 5) { adviceText = \"\u26a0\ufe0f ALERTA DE CONFIGURACI\u00d3N MEDIANA: Tuviste 5 fallos l\u00f3gicos en tu auditor\u00eda. Est\u00e1s logrando mitigar los riesgos globales, pero dejas demasiadas huellas residuales en los logs de producci\u00f3n. Te sugerimos revisar con detenimiento las metodolog\u00edas SAST\/DAST y el gobierno de datos masivos. \ud83d\udcd6\"; } else if (totalErrors === 6) { adviceText = \"\ud83d\udea8 ALERTA DE RIESGO ELEVADO: Tu bit\u00e1cora marc\u00f3 6 errores en total. El per\u00edmetro digital simulado se est\u00e1 debilitando debido a ataques cruzados mal contenidos. Ponle foco inmediato a las contramedidas de inyecci\u00f3n SQL y a la protecci\u00f3n criptogr\u00e1fica en la nube de Azure antes del pr\u00f3ximo test. \ud83d\udee0\ufe0f\"; } else if (totalErrors === 7) { adviceText = \"\ud83d\udca5 \u00a1PER\u00cdMETRO COMPROMETIDO! Acumulaste 7 fallos en los firewalls l\u00f3gicos. Lograste completar los desaf\u00edos, pero a un costo operativo de red muy alto. Dedica unos minutos a estudiar el cat\u00e1logo de fallos arquitect\u00f3nicos de dise\u00f1o (Insecure Design) de la gu\u00eda internacional OWASP Top 10. \ud83e\uddd7\"; } else if (totalErrors >= 8 && totalErrors <= 12) { adviceText = \"\ud83d\uded1 \u00a1INTRUSI\u00d3N DETECTADA CON ALTO RUIDO! Registraste un total de \" + totalErrors + \" errores de red. Est\u00e1s confundiendo conceptos clave de blindaje perimetral y mitigaciones de sesiones. La teor\u00eda del ciclo SSDLC y el cifrado de datos en tr\u00e1nsito necesitan un repaso proactivo inmediato. \u00a1A acotar esos buffers! \ud83d\udcda\"; } else { adviceText = \"\u2623\ufe0f \u00a1CRITICAL BREACH \/ FUGA DE DATOS SEVERA! Tu nivel operativo registr\u00f3 \" + totalErrors + \" fallos graves. El IDS corporativo bloque\u00f3 m\u00faltiples peticiones tuyas por inundaci\u00f3n err\u00f3nea (SYN Flood). Necesitas volver a las bases l\u00f3gicas de Kerberos, WAF, y la anatom\u00eda de inyecciones. \u00a1Dale al bot\u00f3n inferior y limpia tu terminal! \ud83d\udd04\"; } document.getElementById(\"modal-advice\").innerText = adviceText; if (GOOGLE_SCRIPT_URL !== \"\") { const formData = new FormData(); formData.append(\"name\", activeUsername); formData.append(\"score\", globalScore); formData.append(\"errors\", totalErrors); formData.append(\"rank\", finalRank); fetch(GOOGLE_SCRIPT_URL, { method: \"POST\", body: formData }) .then(res => res.json()) .then(data => { loadGlobalLeaderboard(data); }) .catch(err => { console.error(\"Error conectando con la nube:\", err); loadLocalFallback(); }); } else { loadLocalFallback(); } const terminal = document.getElementById(\"terminal-output\"); terminal.innerHTML = \"\"; const logs = [ `[+] TRANSACTION SECURED FOR USER: ${activeUsername.toUpperCase()}`, \"[+] SYNCING SCORE DATA WITH REGIONAL SERVERS...\", \"[+] LEADERBOARD STREAM UPDATED IN REAL-TIME.\", \"[+] STATUS: SECURITY CHALLENGE COMPLETED COMPLIANT.\" ];  let lineIndex = 0; function typeLogLine() { if (lineIndex < logs.length) { const p = document.createElement(\"p\"); p.style.margin = \"4px 0\"; p.style.fontSize = \"13px\"; p.innerText = logs[lineIndex]; terminal.appendChild(p); terminal.scrollTop = terminal.scrollHeight; lineIndex++; setTimeout(typeLogLine, 400); } } typeLogLine(); } function loadGlobalLeaderboard(recordsArray) { const tableBody = document.getElementById(\"history-table-body\"); tableBody.innerHTML = \"\"; recordsArray.reverse().forEach(record => { const tr = document.createElement(\"tr\"); tr.innerHTML = ` <\/p>\n<td><strong>${record.name}<\/strong><\/td>\n<p> <\/p>\n<td style=\"color:#60a5fa;\">${record.score} \/ 24<\/td>\n<p> <\/p>\n<td style=\"color:#f87171;\">${record.errors}<\/td>\n<p> <\/p>\n<td>${record.rank}<\/td>\n<p> `; tableBody.appendChild(tr); }); } function loadLocalFallback() { let currentHistory = JSON.parse(localStorage.getItem(\"hacking_leaderboard\")) || []; const finalRank = document.getElementById(\"rank-display\").innerText; currentHistory.push({ name: activeUsername, score: globalScore, errors: totalErrors, rank: finalRank }); localStorage.setItem(\"hacking_leaderboard\", JSON.stringify(currentHistory)); const tableBody = document.getElementById(\"history-table-body\"); tableBody.innerHTML = \"\"; currentHistory.reverse().forEach(record => { const tr = document.createElement(\"tr\"); tr.innerHTML = `<\/p>\n<td><strong>${record.name} (Local)<\/strong><\/td>\n<td style=\"color:#60a5fa;\">${record.score} \/ 24<\/td>\n<td style=\"color:#f87171;\">${record.errors}<\/td>\n<td>${record.rank}<\/td>\n<p>`; tableBody.appendChild(tr); }); } function generateRandomSopa(words) { let grid = Array(9).fill(null).map(() => Array(9).fill(\"\")); words.forEach(word => { let placed = false; let attempts = 0; while (!placed && attempts < 150) { let dir = Math.floor(Math.random() * 3); let startRow = Math.floor(Math.random() * 9); let startCol = Math.floor(Math.random() * 9); let canPlace = true; let coords = []; for (let i = 0; i < word.length; i++) { let r = startRow + (dir === 1 || dir === 2 ? i : 0); let c = startCol + (dir === 0 || dir === 2 ? i : 0); if (r >= 9 || c >= 9) { canPlace = false; break; } if (grid[r][c] !== \"\" && grid[r][c] !== word[i]) { canPlace = false; break; } coords.push({r, c}); } if (canPlace) { coords.forEach((coord, idx) => { grid[coord.r][coord.c] = word[idx]; }); placed = true; } attempts++; } }); const alphabet = \"ABCDEFGHIJKLMNOPQRSTUVWXYZ\"; for (let r = 0; r < 9; r++) { for (let c = 0; c < 9; c++) { if (grid[r][c] === \"\") { grid[r][c] = alphabet[Math.floor(Math.random() * alphabet.length)]; } } } return grid; } function handleWordClick(event, wordElem, bankId) { const bank = document.getElementById(bankId); if (bank && bank.classList.contains('locked')) return; event.stopPropagation(); const originalBankId = wordElem.getAttribute('data-bank'); if (wordElem.parentElement.id === originalBankId) { if (currentlySelectedWord) currentlySelectedWord.classList.remove('selected-word'); currentlySelectedWord = wordElem; wordElem.classList.add('selected-word'); } else { const parentZone = wordElem.parentElement; document.getElementById(originalBankId).appendChild(wordElem); parentZone.classList.remove('filled'); parentZone.style.borderColor = '#94a3b8'; wordElem.style.background = 'var(--primary-dark)'; if (currentlySelectedWord === wordElem) { wordElem.classList.remove('selected-word'); currentlySelectedWord = null; } } } function handleZonePlace(zoneElem, allowedBankId) { if (!currentlySelectedWord) return; if (currentlySelectedWord.getAttribute('data-bank') !== allowedBankId) return; if (zoneElem.children.length > 0) { let existingWord = zoneElem.children[0]; const originalBank = existingWord.getAttribute('data-bank'); document.getElementById(originalBank).appendChild(existingWord); existingWord.style.background = 'var(--primary-dark)'; } zoneElem.appendChild(currentlySelectedWord); currentlySelectedWord.classList.remove('selected-word'); currentlySelectedWord = null; zoneElem.classList.add('filled'); zoneElem.style.borderColor = 'var(--primary-dark)'; } function renderDragLevel(questions) { const zone = document.getElementById(\"drag-drop-zone\"); zone.innerHTML = ` <\/p>\n<div class=\"section-header\">Nivel 1: Conceptos Clave (Arrastre Click & Place)<\/div>\n<p> <\/p>\n<div class=\"card\" id=\"drag-game-container-1\"> <\/p>\n<div class=\"question-text\">Instrucciones: Selecciona un concepto azul y haz clic en su recuadro correspondiente para unirlos l\u00f3gicamente.<\/div>\n<p> <\/p>\n<div class=\"drag-container\"> <\/p>\n<div class=\"words-bank\" id=\"wp-bank-container\"><\/div>\n<p> <\/p>\n<div class=\"slots-container\" id=\"wp-slots-container\"><\/div>\n<p> <\/div>\n<p> <button class=\"btn-check\" id=\"btn-validate-drag-1\">Validar Auditor\u00eda Nivel 1<\/button> <\/p>\n<div class=\"feedback\" id=\"drag-feedback-box-1\"><\/div>\n<p> <\/div>\n<p> `; const bankContainer = document.getElementById(\"wp-bank-container\"); const slotsContainer = document.getElementById(\"wp-slots-container\"); questions.forEach(q => { const word = document.createElement(\"div\"); word.className = \"draggable-word\"; word.innerText = q.token; word.setAttribute(\"data-val\", q.token); word.setAttribute(\"data-bank\", \"wp-bank-container\"); word.onclick = (e) => handleWordClick(e, word, \"wp-bank-container\"); bankContainer.appendChild(word); }); questions.forEach((q, idx) => { const row = document.createElement(\"div\"); row.className = \"slot-row\"; row.innerHTML = `<\/p>\n<div class=\"drop-zone\" id=\"dz-1-${idx}\" data-ans=\"${q.token}\" onclick=\"handleZonePlace(this, 'wp-bank-container')\"><\/div>\n<div class=\"slot-desc\">${q.text}<\/div>\n<p>`; slotsContainer.appendChild(row); }); document.getElementById(\"btn-validate-drag-1\").onclick = () => validateDragLevel1(); } function validateDragLevel1() { const bank = document.getElementById(\"wp-bank-container\"); const zones = document.querySelectorAll(\"#drag-game-container-1 .drop-zone\"); const feedback = document.getElementById(\"drag-feedback-box-1\"); let allFilled = true, allCorrect = true; zones.forEach(zone => { if (zone.children.length === 0) { allFilled = false; } else { let placedVal = zone.children[0].getAttribute('data-val'); let correctVal = zone.getAttribute('data-ans'); if (placedVal !== correctVal) { allCorrect = false; zone.style.borderColor = 'var(--incorrect)'; zone.children[0].style.background = 'var(--incorrect)'; } else { zone.style.borderColor = 'var(--correct)'; zone.children[0].style.background = 'var(--correct)'; } } }); feedback.style.display = 'block'; if (!allFilled) { feedback.className = \"feedback incorrect\"; feedback.innerText = \"\u26a0\ufe0f Quedan espacios vac\u00edos.\"; currentStreak = 0; totalErrors++; updateScoreDisplay(); } else if (!allCorrect) { feedback.className = \"feedback incorrect\"; feedback.innerText = \"\u274c Emparejamientos err\u00f3neos.\"; currentStreak = 0; totalErrors++; updateScoreDisplay(); } else { feedback.className = \"feedback correct\"; feedback.innerText = \"\u2705 Nivel 1 superado perfectamente (+4 puntos).\"; bank.classList.add('locked'); zones.forEach(zone => { zone.onclick = null; zone.children[0].onclick = null; }); document.getElementById(\"btn-validate-drag-1\").style.display = 'none'; globalScore += 4; answeredQuestionsCount += 4; currentStreak += 4; triggerCelebration(); updateScoreDisplay(); } } function renderSopaLevel() { const zone = document.getElementById(\"sopa-zone\"); zone.innerHTML = ` <\/p>\n<div class=\"section-header\">Nivel 2: Sopa de Letras Hacking & Completa la Definici\u00f3n<\/div>\n<p> <\/p>\n<div class=\"card\"> <\/p>\n<div class=\"question-text\">Instrucciones: Si no conoces la respuesta, usa el bot\u00f3n de asistencia para revelar el objetivo. Luego, haz clic en la <strong>letra inicial<\/strong> y <strong>final<\/strong> en la sopa de letras.<\/div>\n<p> <\/p>\n<div class=\"wordsearch-container\"> <\/p>\n<div class=\"wordsearch-grid\" id=\"ws-grid\"><\/div>\n<p> <\/p>\n<div class=\"word-list\" id=\"ws-words-list\"><\/div>\n<p> <\/p>\n<div class=\"feedback\" id=\"sopa-feedback\"><\/div>\n<p> <\/div>\n<p> <\/div>\n<p> `; const gridElem = document.getElementById(\"ws-grid\"); for (let r = 0; r < 9; r++) { for (let c = 0; c < 9; c++) { const cell = document.createElement(\"div\"); cell.className = \"grid-cell\"; cell.innerText = dynamicGrid[r][c]; cell.id = `cell-${r}-${c}`; cell.onclick = () => handleCellClick(r, c, cell); gridElem.appendChild(cell); } } const listElem = document.getElementById(\"ws-words-list\"); Object.keys(activeSopaWords).forEach(word => { const item = document.createElement(\"div\"); item.className = \"word-item\"; item.id = `word-item-${word}`; const hintText = activeSopaWords[word].hint; const parts = hintText.split(\"______\"); item.innerHTML = `<\/p>\n<div class=\"word-item-text\">\ud83d\udee1\ufe0f ${parts[0]}<strong class=\"blank-field\" id=\"blank-${word}\">[ ______ ]<\/strong>${parts[1] || \"\"}<\/div>\n<p><button id=\"hint-btn-${word}\" class=\"opt-btn\" style=\"display:inline-flex; width:auto; padding:6px 12px; font-size:12px; background:var(--warning-bg); border:1px solid var(--warning); color:var(--warning-text); border-radius:6px; cursor:pointer; font-weight:700; white-space:nowrap; margin-top:5px;\" onclick=\"revealSopaHint('${word}')\">\ud83d\udca1 Revelar Palabra<\/button>`; listElem.appendChild(item); }); } window.revealSopaHint = function(word) { const blankEl = document.getElementById(`blank-${word}`); const btnEl = document.getElementById(`hint-btn-${word}`); if (blankEl && !activeSopaWords[word].found) { blankEl.innerText = `[ BUSCA: ${word} ]`; blankEl.style.color = \"var(--warning-text)\"; if (btnEl) btnEl.style.display = \"none\"; } } function handleCellClick(row, col, cellElem) { if (cellElem.classList.contains('found')) return; if (!wsStartCell) { wsStartCell = { row, col, elem: cellElem }; cellElem.classList.add('selected'); } else { const start = wsStartCell; const end = { row, col, elem: cellElem }; start.elem.classList.remove('selected'); wsStartCell = null; const rDiff = end.row - start.row; const cDiff = end.col - start.col; const rDist = Math.abs(rDiff); const cDist = Math.abs(cDiff); let isValidLine = false; let stepR = 0; let stepC = 0; let stepsCount = 0; if (rDist === 0) { isValidLine = true; stepC = cDiff > 0 ? 1 : -1; stepsCount = cDist; } else if (cDist === 0) { isValidLine = true; stepR = rDiff > 0 ? 1 : -1; stepsCount = rDist; } else if (rDist === cDist) { isValidLine = true; stepR = rDiff > 0 ? 1 : -1; stepC = cDiff > 0 ? 1 : -1; stepsCount = rDist; } if (isValidLine) { const coords = []; let wordStr = \"\"; for (let i = 0; i <= stepsCount; i++) { const currR = start.row + (i * stepR); const currC = start.col + (i * stepC); coords.push({ row: currR, col: currC }); wordStr += dynamicGrid[currR][currC]; } const reversedWordStr = wordStr.split('').reverse().join(''); let matchedWord = null; if (activeSopaWords[wordStr] && !activeSopaWords[wordStr].found) matchedWord = wordStr; else if (activeSopaWords[reversedWordStr] && !activeSopaWords[reversedWordStr].found) matchedWord = reversedWordStr; if (matchedWord) { activeSopaWords[matchedWord].found = true; coords.forEach(coord => { const el = document.getElementById(`cell-${coord.row}-${coord.col}`); if (el) el.classList.add('found'); }); const blankEl = document.getElementById(`blank-${matchedWord}`); if (blankEl) { blankEl.innerText = matchedWord; blankEl.style.color = \"var(--correct-text)\"; blankEl.style.borderBottom = \"none\"; } const itemEl = document.getElementById(`word-item-${matchedWord}`); if (itemEl) itemEl.classList.add('found'); const btnEl = document.getElementById(`hint-btn-${matchedWord}`); if (btnEl) btnEl.style.display = \"none\"; globalScore += 1; answeredQuestionsCount += 1; currentStreak += 1; triggerCelebration(); updateScoreDisplay(); if (Object.keys(activeSopaWords).every(k => activeSopaWords[k].found)) { const feedback = document.getElementById(\"sopa-feedback\"); feedback.className = \"feedback correct\"; feedback.style.display = \"block\"; feedback.innerText = \"\ud83c\udf89 Sopa de letras descifrada completamente (+4 puntos).\"; } } else { flashError(start.elem, end.elem); } } else { flashError(start.elem, end.elem); } } } function flashError(el1, el2) { el1.style.borderColor = 'var(--incorrect)'; el2.style.borderColor = 'var(--incorrect)'; setTimeout(() => { if (!el1.classList.contains('found')) el1.style.borderColor = ''; if (!el2.classList.contains('found')) el2.style.borderColor = ''; }, 500); currentStreak = 0; totalErrors++; updateScoreDisplay(); } function renderDragLevel2(questions) { const zone = document.getElementById(\"drag-drop-zone-2\"); zone.innerHTML = ` <\/p>\n<div class=\"section-header\">Nivel 3: Mitigaci\u00f3n de Amenazas (Auditor\u00eda vs. Vectores de Riesgo)<\/div>\n<p> <\/p>\n<div class=\"card\" id=\"drag-game-container-2\"> <\/p>\n<div class=\"question-text\">Instrucciones: Selecciona una <strong>Contramedida de Seguridad<\/strong> (etiqueta azul) y haz clic en el <strong>Vector de Riesgo Evaluado<\/strong> (recuadro dashed) para neutralizarlo.<\/div>\n<p> <\/p>\n<div class=\"drag-container\"> <\/p>\n<div class=\"words-bank\" id=\"child-bank-container\"><\/div>\n<p> <\/p>\n<div class=\"slots-container\" id=\"parent-slots-container\"><\/div>\n<p> <\/div>\n<p> <button class=\"btn-check\" id=\"btn-validate-drag-2\">Verificar Blindaje Tecnol\u00f3gico<\/button> <\/p>\n<div class=\"feedback\" id=\"drag-feedback-box-2\"><\/div>\n<p> <\/div>\n<p> `; const bankContainer = document.getElementById(\"child-bank-container\"); const slotsContainer = document.getElementById(\"parent-slots-container\"); questions.forEach(q => { const word = document.createElement(\"div\"); word.className = \"draggable-word\"; word.innerText = q.token; word.setAttribute(\"data-val\", q.token); word.setAttribute(\"data-bank\", \"child-bank-container\"); word.onclick = (e) => handleWordClick(e, word, \"child-bank-container\"); bankContainer.appendChild(word); }); questions.forEach((q, idx) => { const row = document.createElement(\"div\"); row.className = \"slot-row\"; row.innerHTML = `<\/p>\n<div class=\"drop-zone\" id=\"dz-2-${idx}\" data-ans=\"${q.token}\" onclick=\"handleZonePlace(this, 'child-bank-container')\"><\/div>\n<div class=\"slot-desc\">\ud83d\udee1\ufe0f <strong>Vector de Riesgo Evaluado:<\/strong> ${q.text}<\/div>\n<p>`; slotsContainer.appendChild(row); }); document.getElementById(\"btn-validate-drag-2\").onclick = () => validateDragLevel2(); } function validateDragLevel2() { const bank = document.getElementById(\"child-bank-container\"); const zones = document.querySelectorAll(\"#drag-game-container-2 .drop-zone\"); const feedback = document.getElementById(\"drag-feedback-box-2\"); let allFilled = true, allCorrect = true; zones.forEach(zone => { if (zone.children.length === 0) { allFilled = false; } else { let placedVal = zone.children[0].getAttribute('data-val'); let correctVal = zone.getAttribute('data-ans'); if (placedVal !== correctVal) { allCorrect = false; zone.style.borderColor = 'var(--incorrect)'; zone.children[0].style.background = 'var(--incorrect)'; } else { zone.style.borderColor = 'var(--correct)'; zone.children[0].style.background = 'var(--correct)'; } } }); feedback.style.display = 'block'; if (!allFilled) { feedback.className = \"feedback incorrect\"; feedback.innerText = \"\u26a0\ufe0f Quedan vectores de riesgo desprotegidos.\"; currentStreak = 0; totalErrors++; updateScoreDisplay(); } else if (!allCorrect) { feedback.className = \"feedback incorrect\"; feedback.innerText = \"\u274c Errores en las mitigaciones.\"; currentStreak = 0; totalErrors++; updateScoreDisplay(); } else { feedback.className = \"feedback correct\"; feedback.innerText = \"\u2705 \u00a1Aseguramiento Exitoso! Todos los vectores de ataque han sido mitigados.\"; bank.classList.add('locked'); zones.forEach(zone => { zone.onclick = null; zone.children[0].onclick = null; }); document.getElementById(\"btn-validate-drag-2\").style.display = 'none'; globalScore += 4; answeredQuestionsCount += 4; currentStreak += 4; triggerCelebration(); updateScoreDisplay(); } } function renderDropdownLevel(questions) { const zone = document.getElementById(\"dropdown-zone\"); zone.innerHTML = `<\/p>\n<div class=\"section-header\">Nivel 4: Despliegues de Infraestructura (Completar Desplegables)<\/div>\n<p>`; questions.forEach((q, idx) => { let card = document.createElement(\"div\"); card.className = \"card\"; card.id = `drop-card-${idx}`; let selectHTML = `<select class=\"game-select\" id=\"g-sel-${idx}\"><option value=\"\">-- Elige --<\/option>`; Object.keys(q.options).forEach(key => { selectHTML += `<option value=\"${key}\">${q.options[key]}<\/option>`; }); selectHTML += `<\/select>`; card.innerHTML = `<\/p>\n<div class=\"question-text\">Escenario ${idx + 1} (${q.mod})<\/div>\n<div class=\"dropdown-text\">${q.text} ${selectHTML}.<\/div>\n<p><button class=\"btn-check\" id=\"btn-val-drop-${idx}\">Verificar Escenario<\/button><\/p>\n<div class=\"feedback\" id=\"drop-feed-${idx}\"><\/div>\n<p>`; zone.appendChild(card); document.getElementById(`btn-val-drop-${idx}`).onclick = () => { const selectElement = document.getElementById(`g-sel-${idx}`); const fb = document.getElementById(`drop-feed-${idx}`); if (!selectElement.value) { fb.className = \"feedback incorrect\"; fb.innerText = \"\u26a0\ufe0f Selecciona una opci\u00f3n.\"; fb.style.display = \"block\"; return; } if (selectElement.value === q.correct) { selectElement.className = \"game-select success\"; fb.className = \"feedback correct\"; fb.innerText = \"\u2705 Respuesta correcta (+1 punto).\"; document.getElementById(`btn-val-drop-${idx}`).style.display = \"none\"; globalScore += 1; answeredQuestionsCount += 1; currentStreak += 1; triggerCelebration(); updateScoreDisplay(); } else { selectElement.className = \"game-select error\"; fb.className = \"feedback incorrect\"; fb.innerText = \"\u274c Incorrecto.\"; currentStreak = 0; totalErrors++; updateScoreDisplay(); } }; }); } function renderMCLevel(questions) { const container = document.getElementById(\"multiple-choice-zone\"); container.innerHTML = `<\/p>\n<div class=\"section-header\">Nivel 5: Cuestionario Elite de Ciberseguridad (Opci\u00f3n M\u00faltiple)<\/div>\n<p>`; questions.forEach((item, index) => { let card = document.createElement('div'); card.className = 'card'; card.innerHTML = `<\/p>\n<div class=\"question-text\">${index + 1}. [${item.mod}] ${item.q}<\/div>\n<p>`; let optsDiv = document.createElement('div'); optsDiv.className = 'options-container'; Object.keys(item.opts).forEach(key => { let btn = document.createElement('button'); btn.className = 'opt-btn'; btn.innerHTML = `<span class=\"option-letter\">${key}<\/span> <span>${item.opts[key]}<\/span>`; btn.onclick = function() { if (card.classList.contains('locked')) return; let fb = card.querySelector('.feedback') || document.createElement('div'); fb.className = 'feedback'; card.appendChild(fb); if (key === item.ans) { btn.className = 'opt-btn correct-ans'; fb.className = 'feedback correct'; fb.innerHTML = `\u2705 <strong>\u00a1Respuesta Correcta!<\/strong> ${item.exp}`; card.classList.add('answered-correctly', 'locked'); Array.from(optsDiv.children).forEach(b => { if (b !== btn) b.classList.add('disabled'); }); globalScore += 1; answeredQuestionsCount += 1; currentStreak += 1; triggerCelebration(); updateScoreDisplay(); } else { btn.className = 'opt-btn incorrect-ans'; fb.className = 'feedback incorrect'; fb.innerHTML = `\u274c <strong>Incorrecto.<\/strong>`; currentStreak = 0; totalErrors++; updateScoreDisplay(); } }; optsDiv.appendChild(btn); }); card.appendChild(optsDiv); container.appendChild(card); }); } \/\/ --- ENGIN DE INICIALIZACI\u00d3N --- function initializeRandomQuiz() { const dragPool = masterQuestionPool.filter(q => q.type === \"drag\"); const dropPool = masterQuestionPool.filter(q => q.type === \"dropdown\"); const mcPool = masterQuestionPool.filter(q => q.type === \"mc\"); shuffleArray(dragPool); shuffleArray(dropPool); shuffleArray(mcPool); const selectedDrag1 = dragPool.slice(0, 4); shuffleArray(sopaPool); const selectedSopa = sopaPool.slice(0, 4); activeSopaWords = {}; selectedSopa.forEach(item => { activeSopaWords[item.word] = { found: false, hint: item.hint }; }); dynamicGrid = generateRandomSopa(selectedSopa.map(x => x.word)); const selectedDrag2 = dragPool.slice(4, 8); const selectedDrop = dropPool.slice(0, 4); const selectedMC = mcPool.slice(0, 8); renderDragLevel(selectedDrag1); renderSopaLevel(); renderDragLevel2(selectedDrag2); renderDropdownLevel(selectedDrop); renderMCLevel(selectedMC); updateScoreDisplay(); } function shuffleArray(array) { for (let i = array.length - 1; i > 0; i--) { const j = Math.floor(Math.random() * (i + 1)); [array[i], array[j]] = [array[j], array[i]]; } return array; }<\/script><\/body><\/html>[\/et_pb_code][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":641,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"class_list":["post-646","page","type-page","status-publish","has-post-thumbnail","hentry"],"_links":{"self":[{"href":"https:\/\/blamiss.com\/index.php\/wp-json\/wp\/v2\/pages\/646","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blamiss.com\/index.php\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/blamiss.com\/index.php\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/blamiss.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blamiss.com\/index.php\/wp-json\/wp\/v2\/comments?post=646"}],"version-history":[{"count":28,"href":"https:\/\/blamiss.com\/index.php\/wp-json\/wp\/v2\/pages\/646\/revisions"}],"predecessor-version":[{"id":695,"href":"https:\/\/blamiss.com\/index.php\/wp-json\/wp\/v2\/pages\/646\/revisions\/695"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blamiss.com\/index.php\/wp-json\/wp\/v2\/media\/641"}],"wp:attachment":[{"href":"https:\/\/blamiss.com\/index.php\/wp-json\/wp\/v2\/media?parent=646"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}

{"id":646,"date":"2026-04-21T14:31:08","date_gmt":"2026-04-21T18:31:08","guid":{"rendered":"https:\/\/blamiss.com\/?page_id=646"},"modified":"2026-07-15T13:25:18","modified_gmt":"2026-07-15T17:25:18","slug":"646-2","status":"publish","type":"page","link":"https:\/\/blamiss.com\/","title":{"rendered":"CIBERSEGURIDAD"},"content":{"rendered":"

[et_pb_section fb_built=\"1″ _builder_version=\"4.27.5″ _module_preset=\"default\" global_colors_info=\"{}\"][et_pb_row _builder_version=\"4.27.5″ _module_preset=\"default\" hover_enabled=\"0″ global_colors_info=\"{}\" sticky_enabled=\"0″][et_pb_column type=\"4_4″ _builder_version=\"4.27.5″ _module_preset=\"default\" global_colors_info=\"{}\"][et_pb_gallery gallery_ids=\"640″ fullwidth=\"on\" _builder_version=\"4.27.5″ _module_preset=\"default\" global_colors_info=\"{}\"][\/et_pb_gallery][et_pb_code _builder_version=\"4.27.5″ _module_preset=\"default\" hover_enabled=\"0″ global_colors_info=\"{}\" sticky_enabled=\"0″] Alumnos Maestr\u00eda Ciberseguridad – Hacking Challenge<\/title>  <script src=\"https:\/\/cdn.jsdelivr.net\/npm\/canvas-confetti@1.6.0\/dist\/confetti.browser.min.js\"><\/script> <\/p>\n<style> :root { --primary: #1e40af; --primary-dark: #1e3a8a; --primary-light: #eff6ff; --bg: #f8fafc; --card-bg: #ffffff; --text: #0f172a; --text-secondary: #475569; --border: #e2e8f0; --correct: #10b981; --correct-bg: #ecfdf5; --correct-text: #065f46; --incorrect: #ef4444; --incorrect-bg: #fef2f2; --incorrect-text: #991b1b; --warning: #f59e0b; --warning-bg: #fffbeb; --warning-text: #78350f; --slot-bg: #f1f5f9; } .wp-sim-body { font-family: 'Segoe UI', system-ui, -apple-system, sans-serif; background-color: var(--bg); color: var(--text); margin: 0; padding: 0; line-height: 1.6; -webkit-tap-highlight-color: transparent; } \/* --- PANTALLA DE LOGEO INICIAL --- *\/ .login-overlay { position: fixed; top: 0; left: 0; width: 100%; height: 100%; background: #0f172a; z-index: 10000; display: flex; align-items: center; justify-content: center; padding: 20px; box-sizing: border-box; } .login-card { background: #020617; border: 2px solid var(--primary); padding: 30px; border-radius: 16px; max-width: 400px; width: 100%; text-align: center; box-shadow: 0 10px 25px rgba(30, 58, 138, 0.5); color: white; } .login-input { width: 100%; padding: 12px; margin: 15px 0; border-radius: 8px; border: 1px solid var(--border); background: #0f172a; color: #34d399; font-family: monospace; font-size: 16px; box-sizing: border-box; text-align: center; outline: none; } .login-input:focus { border-color: #34d399; box-shadow: 0 0 10px rgba(52, 211, 153, 0.3); } .progress-bar-container { position: sticky; top: 0; background-color: white; border-bottom: 2px solid var(--border); padding: 12px 20px; z-index: 1000; box-shadow: 0 4px 6px -1px rgba(0,0,0,0.05); } .progress-flex { max-width: 1000px; margin: 0 auto; display: flex; justify-content: space-between; align-items: center; gap: 10px; flex-wrap: wrap; } \/* --- ESTILOS BLOQUE DE PERFIL ARRIBA --- *\/ .user-profile-block { display: flex; align-items: center; gap: 10px; } .profile-avatar { width: 36px; height: 36px; border-radius: 50%; object-fit: cover; border: 2px solid var(--primary); box-shadow: 0 2px 4px rgba(0,0,0,0.1); flex-shrink: 0; } .progress-title { font-weight: 700; color: var(--primary-dark); font-size: 16px; } .stats-group { display: flex; align-items: center; gap: 10px; } .score-badge { background-color: var(--primary-light); color: var(--primary-dark); padding: 6px 18px; border-radius: 50px; font-weight: 800; font-size: 15px; box-shadow: inset 0 2px 4px rgba(0,0,0,0.05); white-space: nowrap; } .streak-badge { background-color: #fff7ed; color: #c2410c; border: 1px solid #fed7aa; padding: 6px 14px; border-radius: 50px; font-weight: 800; font-size: 15px; display: none; align-items: center; gap: 4px; animation: pulse 1.5s infinite; } .rank-badge { background-color: #f1f5f9; color: #475569; border: 1px solid var(--border); padding: 6px 14px; border-radius: 50px; font-weight: 700; font-size: 14px; } .progress-wrapper { width: 100%; max-width: 1000px; margin: 8px auto 0 auto; } .ui-progress-bar { width: 100%; height: 8px; background-color: var(--border); border-radius: 4px; overflow: hidden; } .ui-progress-fill { height: 100%; width: 0%; background: linear-gradient(90deg, #3b82f6, #10b981); transition: width 0.4s ease; } .container { max-width: 1000px; margin: 30px auto; padding: 0 20px 100px 20px; box-sizing: border-box; } header { background: linear-gradient(135deg, #0f172a, #1e3a8a); color: white; padding: 40px; border-radius: 16px; margin-bottom: 40px; text-align: center; box-shadow: 0 10px 20px -3px rgba(30, 58, 138, 0.3); border: 1px solid #1e40af; } header h1 { margin: 0; font-size: 28px; font-weight: 800; } header p { margin: 10px 0 0 0; opacity: 0.9; font-size: 16px; font-weight: 500; } .section-header { background-color: var(--primary-light); border-left: 6px solid var(--primary-dark); color: var(--primary-dark); padding: 15px 20px; font-size: 19px; font-weight: 700; margin: 45px 0 20px 0; border-radius: 0 10px 10px 0; } .card { background: white; border: 1px solid var(--border); border-radius: 12px; margin-bottom: 25px; padding: 25px; box-shadow: 0 4px 6px -1px rgba(0,0,0,0.01); box-sizing: border-box; transition: all 0.3s ease; } .card.answered-correctly { border-color: var(--correct); background-color: var(--correct-bg); transform: translateY(-2px); box-shadow: 0 8px 16px -4px rgba(16, 185, 129, 0.2); } .question-text { font-size: 16px; font-weight: 700; margin-bottom: 18px; color: #0f172a; } \/* --- ESTILOS SOPA DE LETRAS OPTIMIZADA --- *\/ .wordsearch-container { display: flex; flex-direction: column; align-items: center; gap: 20px; width: 100%; } .wordsearch-grid { display: grid; grid-template-columns: repeat(9, minmax(0, 1fr)); gap: 6px; max-width: 360px; width: 100%; background: #f1f5f9; padding: 10px; border-radius: 12px; border: 2px solid var(--border); box-sizing: border-box; margin: 0 auto; } .grid-cell { aspect-ratio: 1; display: flex; align-items: center; justify-content: center; font-weight: 800; font-size: 16px; background: white; border-radius: 6px; cursor: pointer; user-select: none; border: 1px solid var(--border); transition: all 0.2s; } .grid-cell:hover { background: var(--primary-light); border-color: var(--primary); } .grid-cell.selected { background: var(--warning-bg); border-color: var(--warning); color: var(--warning-text); animation: pulse 1s infinite; } .grid-cell.found { background: var(--correct-bg); border-color: var(--correct); color: var(--correct-text); cursor: default; } .word-list { display: flex; flex-direction: column; gap: 12px; width: 100%; max-width: 650px; } .word-item { background: #f1f5f9; border: 1px solid var(--border); padding: 14px 18px; border-radius: 10px; font-size: 14px; color: var(--text-secondary); transition: all 0.3s ease; display: flex; justify-content: space-between; align-items: center; gap: 15px; } .word-item-text { flex: 1; line-height: 1.5; } .word-item.found { background: var(--correct-bg); border-color: var(--correct); color: var(--correct-text); } .blank-field { color: #64748b; font-family: monospace; border-bottom: 2px dashed #94a3b8; padding: 0 5px; font-weight: bold; } \/* --- STYLES FOR DRAG & DROP --- *\/ .drag-container { display: flex; flex-direction: column; gap: 20px; } .words-bank { display: flex; flex-wrap: wrap; gap: 10px; padding: 18px; background: #f1f5f9; border-radius: 10px; min-height: 60px; border: 2px dashed var(--primary); align-items: center; justify-content: center; } .draggable-word { background: var(--primary-dark); color: white; padding: 8px 16px; border-radius: 20px; font-weight: bold; cursor: pointer; user-select: none; transition: all 0.2s; box-shadow: 0 2px 4px rgba(0,0,0,0.1); font-size: 14px; } .draggable-word:hover { background-color: var(--primary); } .slots-container { display: flex; flex-direction: column; gap: 12px; } .slot-row { display: flex; align-items: center; background: var(--slot-bg); padding: 12px; border-radius: 8px; border: 1px solid var(--border); gap: 15px; } .slot-desc { flex: 1; font-size: 14px; font-weight: 500; color: var(--text-secondary); } .drop-zone { width: 175px; height: 44px; border: 2px dashed #94a3b8; border-radius: 22px; display: flex; align-items: center; justify-content: center; background: white; transition: all 0.2s; cursor: pointer; flex-shrink: 0; font-size: 13px; font-weight: bold; text-align: center; } .drop-zone.filled { border: 2px solid var(--primary-dark); background: transparent; } \/* --- OVERLAY DE COMPLETADO \/ TERMINAL HACKING --- *\/ .completion-overlay { position: fixed; top: 0; left: 0; width: 100%; height: 100%; background: rgba(15, 23, 42, 0.96); z-index: 9999; display: none; align-items: center; justify-content: center; padding: 20px; box-sizing: border-box; backdrop-filter: blur(10px); } .completion-modal { background: #020617; border: 2px solid #10b981; box-shadow: 0 0 30px rgba(16, 185, 129, 0.4); border-radius: 16px; max-width: 700px; width: 100%; padding: 25px; color: #10b981; font-family: 'Courier New', Courier, monospace; text-align: center; max-height: 95vh; overflow-y: auto; } .terminal-text { text-align: left; background: #090d16; border: 1px solid #1e293b; padding: 12px; border-radius: 8px; margin: 15px 0; font-size: 13px; line-height: 1.5; max-height: 120px; overflow-y: auto; color: #34d399; } \/* --- TABLA DE L\u00cdDERES GLOBAL EN TIEMPO REAL --- *\/ .table-wrapper { overflow-x: auto; margin-top: 15px; border: 1px solid #1e293b; border-radius: 8px; background: #090d16; } .history-table { width: 100%; border-collapse: collapse; font-family: sans-serif; font-size: 13px; color: #cbd5e1; text-align: left; } .history-table th { background: #1e293b; color: #34d399; padding: 10px; font-weight: 700; } .history-table td { padding: 10px; border-bottom: 1px solid #1e293b; } .blink { animation: blinker 1s linear infinite; } @keyframes blinker { 50% { opacity: 0; } } @media (max-width: 640px) { .progress-bar-container { padding: 10px 12px; } .progress-title { font-size: 12.5px; max-width: 110px; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; } .profile-avatar { width: 28px; height: 28px; } .container { padding: 0 12px 80px 12px; margin: 15px auto; } header { padding: 25px 15px; border-radius: 12px; } header h1 { font-size: 20px; } .wordsearch-grid { grid-template-columns: repeat(9, minmax(0, 1fr)); gap: 4px; padding: 6px; max-width: 295px; margin: 0 auto !important; } .grid-cell { font-size: 12px; } .word-item { flex-direction: column; align-items: stretch; gap: 10px; } .slot-row { flex-direction: column; align-items: stretch; gap: 10px; } .drop-zone { width: 100%; height: 46px; } } <\/style>\n<p><\/head><body data-rsssl=1 class=\"wp-sim-body\"><\/p>\n<div id=\"login-overlay\" class=\"login-overlay\"> <\/p>\n<div class=\"login-card\"> <\/p>\n<h2 style=\"color: #34d399; margin-top:0;\">\ud83d\udd10 IDENTIFICATION<\/h2>\n<p> <pee style=\"font-size: 14px; color: #94a3b8;\">Introduce tu nombre para sincronizar tu puntaje en el Servidor Global.<\/pee> <input type=\"text\" id=\"username-input\" class=\"login-input\" placeholder=\"Tu Nombre o Alias...\" autocomplete=\"off\"> <button class=\"btn-check\" style=\"background: var(--primary); width:100%; padding:12px;\" onclick=\"submitLogin()\">Iniciar Auditor\u00eda Global<\/button> <\/div>\n<p><\/div>\n<p><\/p>\n<div class=\"progress-bar-container\"> <\/p>\n<div class=\"progress-flex\">  <\/p>\n<div class=\"user-profile-block\"> <img decoding=\"async\" src=\"https:\/\/blamiss.com\/wp-content\/uploads\/2026\/04\/listo.jpg\" alt=\"Avatar\" class=\"profile-avatar\"> <span class=\"progress-title\" id=\"bootcamp-user-title\">Hacking Bootcamp<\/span> <\/div>\n<p> <\/p>\n<div class=\"stats-group\"> <span class=\"streak-badge\" id=\"streak-display\">\ud83d\udd25 Racha: 0<\/span> <span class=\"rank-badge\" id=\"rank-display\">Script Kiddie \ud83d\udc23<\/span> <span class=\"score-badge\" id=\"score-display\">Puntos: 0 \/ 24<\/span> <\/div>\n<p> <\/div>\n<p> <\/p>\n<div class=\"progress-wrapper\"> <\/p>\n<div class=\"ui-progress-bar\"> <\/p>\n<div class=\"ui-progress-fill\" id=\"progress-fill\"><\/div>\n<p> <\/div>\n<p> <\/div>\n<p><\/div>\n<p><\/p>\n<div class=\"container\"> <\/p>\n<header> <\/p>\n<h1>Alumnos Maestr\u00eda Ciberseguridad<\/h1>\n<p> <pee>Security Hub – Sistemas, Aplicaciones y Datos Masivos<\/pee> <\/header>\n<p> <\/p>\n<div id=\"drag-drop-zone\"><\/div>\n<p> <\/p>\n<div id=\"sopa-zone\"><\/div>\n<p> <\/p>\n<div id=\"drag-drop-zone-2\"><\/div>\n<p> <\/p>\n<div id=\"dropdown-zone\"><\/div>\n<p> <\/p>\n<div id=\"multiple-choice-zone\"><\/div>\n<p><\/div>\n<p><\/p>\n<div id=\"completion-overlay\" class=\"completion-overlay\"> <\/p>\n<div class=\"completion-modal\"> <\/p>\n<h2 style=\"color: #10b981; font-weight: 800; margin-top: 0;\">\ud83d\udd13 \u00a1SISTEMA HACKEADO CON \u00c9XITO!<\/h2>\n<p> <\/p>\n<h3 style=\"color: #60a5fa;\" id=\"welcome-success-text\">Has completado el simulador<\/h3>\n<p>  <\/p>\n<div class=\"terminal-text\" id=\"terminal-output\"><\/div>\n<p> <\/p>\n<div style=\"background: #0f172a; padding: 15px; border: 1px solid #1e40af; margin-bottom: 15px; text-align: left;\"> <pee style=\"margin: 0; font-weight: bold; color: #60a5fa;\">\ud83d\udccb REPORT STATUS:<\/pee> <pee style=\"margin: 5px 0; color: #cbd5e1;\">Total de Errores: <strong id=\"modal-errors-count\" style=\"color: #f87171;\">0<\/strong><\/pee> <pee id=\"modal-advice\" style=\"margin: 10px 0 0 0; color: #e2e8f0; font-size: 13.5px;\"><\/pee> <\/div>\n<p>  <\/p>\n<div style=\"text-align:left; margin-bottom: 15px;\"> <span style=\"color: #34d399; font-weight: bold; font-size:14px;\">\ud83d\udcca LEADERBOARD GLOBAL (Servidor en la Nube):<\/span> <\/p>\n<div class=\"table-wrapper\"> <\/p>\n<table class=\"history-table\"> <\/p>\n<thead> <\/p>\n<tr> <\/p>\n<th>Hacker<\/th>\n<p> <\/p>\n<th>Puntos<\/th>\n<p> <\/p>\n<th>Errores<\/th>\n<p> <\/p>\n<th>Rango<\/th>\n<p> <\/tr>\n<p> <\/thead>\n<p> <\/p>\n<tbody id=\"history-table-body\"> <\/p>\n<tr>\n<td colspan=\"4\" style=\"text-align:center;\">Cargando base de datos central…<\/td>\n<\/tr>\n<p> <\/tbody>\n<p> <\/table>\n<p> <\/div>\n<p> <\/div>\n<p> <pee class=\"blink\" style=\"color: #f59e0b; font-weight: bold; font-size: 12px;\">\ud83d\udea8 AVISO: Se requiere refrescar el entorno para una nueva sesi\u00f3n.<\/pee> <button class=\"btn-check\" style=\"background: #10b981; width: 100%; padding: 12px 20px;\" onclick=\"window.location.reload();\">\ud83d\udd04 Actualizar P\u00e1gina Web<\/button> <\/div>\n<p><\/div>\n<p><script> const GOOGLE_SCRIPT_URL = \"https:\/\/script.google.com\/macros\/s\/AKfycbzkddiGJwKqG9oG_uka3meE5AluSpOZEmqJlgAomLNeQ5F_O3N1vj1EKx468x6xPPQW\/exec\"; const masterQuestionPool = [ \/\/ ELEMENTOS DE ARRASTRE (DRAG) { id: 1, type: \"drag\", mod: \"1- Windows Server\", token: \"CREDENTIAL\", text: \"Caracter\u00edstica que utiliza Virtual Secure Mode (VSM) para proteger identidades de ataques Pass-the-Hash.\" }, { id: 2, type: \"drag\", mod: \"1- Windows Server\", token: \"CLARA\", text: \"Herramienta del CCN-CERT para auditar el endurecimiento en Windows frente al ENS.\" }, { id: 11, type: \"drag\", mod: \"2- Seguridad Web\", token: \"TRACE\", text: \"M\u00e9todo HTTP peligroso que permite evadir cookies HTTPOnly mediante Cross-Site Tracing (XST).\" }, { id: 12, type: \"drag\", mod: \"2- Seguridad Web\", token: \"WAF\", text: \"Dispositivo que filtra y bloquea tr\u00e1fico web malicioso a nivel de capa de aplicaci\u00f3n (Capa 7).\" }, { id: 21, type: \"drag\", mod: \"3- OWASP 2021\", token: \"PATH_TRAVERSAL\", text: \"Defecto donde se introducen secuencias de escape de directorios (..\/) para acceder a archivos locales del host.\" }, { id: 31, type: \"drag\", mod: \"4- Autenticaci\u00f3n\", token: \"OAUTH\", text: \"Est\u00e1ndar industrial ampliamente utilizado con el fin de delegar flujos de autorizaci\u00f3n estructurados entre aplicaciones.\" }, { id: 41, type: \"drag\", mod: \"5- Gesti\u00f3n Sesi\u00f3n\", token: \"SESSION_ID\", text: \"Elemento cr\u00edtico emitido tras un login correcto para poder asociar y relacionar las peticiones posteriores de un usuario.\" }, { id: 51, type: \"drag\", mod: \"6- Desarrollo Seguro\", token: \"HADOOP\", text: \"Ecosistema\/Framework distribuido de c\u00f3digo abierto emblem\u00e1tico en el almacenamiento y an\u00e1lisis de Big Data masivo.\" }, { id: 61, type: \"drag\", mod: \"7- Metodolog\u00edas Auditor\u00eda\", token: \"TLS\", text: \"Protocolo criptogr\u00e1fico est\u00e1ndar mandatorio para salvaguardar la confidencialidad de la informaci\u00f3n en tr\u00e1nsito.\" }, { id: 71, type: \"drag\", mod: \"8- Producci\u00f3n\", token: \"ARM\", text: \"Componente de Azure encargado de recibir, autenticar y aprobar las solicitudes operativas de APIs o SDKs.\" }, { id: 81, type: \"drag\", mod: \"9- Nube Azure\", token: \"RBAC\", text: \"Control de acceso basado en roles utilizado in Azure para aplicar restricciones y gobernanza granular sobre recursos.\" }, { id: 91, type: \"drag\", mod: \"10- Big Data\", token: \"KNOX\", text: \"REST API Gateway perimetral que centraliza la autenticaci\u00f3n y los accesos sobre entornos Hadoop.\" }, \/\/ DESPLEGABLES (DROPDOWN) { id: 3, type: \"dropdown\", mod: \"1- Windows Server\", text: \"Dentro del despliegue de Unidades Organizativas (OU) en Active Directory, las pol\u00edticas de complejidad de contrase\u00f1as se deben configurar a\", correct: \"dominio\", options: { dominio: \"Nivel de Dominio\", rol: \"Nivel de Rol\", app: \"Nivel de Aplicaci\u00f3n\" } }, { id: 13, type: \"dropdown\", mod: \"2- Seguridad Web\", text: \"Las siglas RIA en el contexto de las arquitecturas modernas de aplicaciones enriquecidas de Internet se vinculan directamente a tecnolog\u00edas como\", correct: \"ajax\", options: { ajax: \"AJAX\", soap: \"SOAP\", flash: \"Flash legados\" } }, { id: 22, type: \"dropdown\", mod: \"3- OWASP 2021\", text: \"Los fallos arquitect\u00f3nicos que corresponden a errores nativos de dise\u00f1o y no se solucionan con parches simples pertenecen a\", correct: \"design\", options: { design: \"A04:2021-Insecure Design\", configuration: \"A05:2021-Security Misconfiguration\" } }, { id: 32, type: \"dropdown\", mod: \"4- Autenticaci\u00f3n\", text: \"Para neutralizar ataques automatizados de diccionario dirigidos a adivinar credenciales en el login, es una pr\u00e1ctica recomendada implementar\", correct: \"captcha\", options: { captcha: \"Retos CAPTCHA\", tls: \"Cifrado TLS\", hsts: \"Pol\u00edticas HSTS\" } }, { id: 42, type: \"dropdown\", mod: \"5- Gesti\u00f3n Sesi\u00f3n\", text: \"Para contrarrestar el secuestro de sesiones l\u00f3gicas por parte de scripts maliciosos, se debe configurar estrictamente el flag\", correct: \"httponly\", options: { httponly: \"HTTPOnly\", secure: \"Secure\", samesite: \"SameSite\" } }, { id: 52, type: \"dropdown\", mod: \"6- Desarrollo Seguro\", text: \"El patr\u00f3n arquitect\u00f3nico utilizado com\u00fanmente para estructurar de forma l\u00f3gica y modular el c\u00f3digo dividi\u00e9ndolo en tres capas se conoce como\", correct: \"mvc\", options: { mvc: \"MVC (Modelo-Vista-Controlador)\", micro: \"Microservicios\", soap: \"SOA\" } }, { id: 62, type: \"dropdown\", mod: \"7- Metodolog\u00edas Auditor\u00eda\", text: \"Las herramientas semiautom\u00e1ticas de an\u00e1lisis est\u00e1tico (SAST) revisan el c\u00f3digo fuente simulando pruebas anal\u00edticas de\", correct: \"blanca\", options: { blanca: \"Caja Blanca\", negra: \"Caja Negra\" } }, { id: 72, type: \"dropdown\", mod: \"8- Producci\u00f3n\", text: \"Para la captura centralizada de alertas y logs de seguridad en la monitorizaci\u00f3n continua de producci\u00f3n se usan\", correct: \"siem\", options: { siem: \"Sistemas SIEM\", sast: \"Analizadores est\u00e1ticos\" } }, { id: 82, type: \"dropdown\", mod: \"9- Nube Azure\", text: \"Para administrar la gobernanza en varias suscripciones de Azure, se debe utilizar el concepto de\", correct: \"admin\", options: { admin: \"Grupos de administraci\u00f3n\", recursos: \"Grupos de recursos\" } }, { id: 92, type: \"dropdown\", mod: \"10- Big Data\", text: \"Para registrar y revisar eventos detallados de accesos minuciosos directamente sobre los campos de datos, se implementan\", correct: \"granulares\", options: { granulares: \"Auditor\u00edas granulares\", perimetrales: \"Reglas perimetrales\" } }, \/\/ OPCI\u00d3N M\u00daLTIPLE (MC) -> BANCO EXTENDIDO RESTAURADO REQUERIDO \ud83c\udf89 { id: 4, type: \"mc\", mod: \"1- Windows Server\", q: \"La herramienta Policy Analyzer, incluida dentro del Microsoft Security Compliance Toolkit (SCT), se utiliza principalmente para analizar y comparar conjuntos de directivas de grupo (GPO) con el fin de identificar conflictos o redundancias.\", opts: { A: \"Verdadero.\", B: \"Falso.\" }, ans: \"A\", exp: \"Policy Analyzer permite comparar colecciones de GPOs para identificar discrepancies o redundancias de manera clara.\" }, { id: 5, type: \"mc\", mod: \"1- Windows Server\", q: \"En la implementaci\u00f3n de la arquitectura de seguridad en Windows Server 2022, el protocolo TLS 1.3 y Secure DNS vienen deshabilitados por defecto por razones de compatibilidad con sistemas legados.\", opts: { A: \"Verdadero.\", B: \"Falso.\" }, ans: \"B\", exp: \"Falso. Windows Server 2022 trae activados nativamente por defecto tanto TLS 1.3 como DoH para robustecer el entorno corporativo.\" }, { id: 6, type: \"mc\", mod: \"1- Windows Server\", q: \"Las directivas de seguridad Kerberos forman parte de los recursos fundamentales listados para profundizar en el aseguramiento del entorno Windows.\", opts: { A: \"Verdadero.\", B: \"Falso.\" }, ans: \"A\", exp: \"Verdadero. Mitigar ataques como Golden Ticket exige el endurecimiento estricto del protocolo Kerberos en Active Directory.\" }, { id: 7, type: \"mc\", mod: \"1- Windows Server\", q: \"\u00bfQu\u00e9 caracter\u00edstica de seguridad utiliza el Virtual Secure Mode (VSM) para proteger los secretos del sistema frente a ataques de volcado de memoria?\", opts: { A: \"Windows Defender ATP\", B: \"Credential Guard\", C: \"Just Enough Administration (JEA)\" }, ans: \"B\", exp: \"Credential Guard a\u00edsla los secretos de identidad (procesos LSASS) dentro de un contenedor VSM protegido por hipervisor.\" }, { id: 8, type: \"mc\", mod: \"1- Windows Server\", q: \"\u00bfQu\u00e9 soluci\u00f3n del ecosistema de Microsoft permite limitar los privilegios de administraci\u00f3n en PowerShell mediante endpoints restringidos?\", opts: { A: \"AppLocker\", B: \"Just Enough Administration (JEA)\", C: \"SCT Toolkit\" }, ans: \"B\", exp: \"JEA es una tecnolog\u00eda basada en RBAC para PowerShell que restringe los comandos ejecutables por un usuario espec\u00edfico.\" }, { id: 9, type: \"mc\", mod: \"1- Windows Server\", q: \"El conjunto de herramientas que facilita el manejo de las plantillas de seguridad tanto para Windows Server como para Windows 10 se denomina Microsoft Security Compliance Toolkit.\", opts: { A: \"Verdadero.\", B: \"Falso.\" }, ans: \"A\", exp: \"Verdadero. El SCT unifica las herramientas necesarias para analizar, comparar y desplegar plantillas de endurecimiento recomendadas por Microsoft.\" }, { id: 10, type: \"mc\", mod: \"1- Windows Server\", q: \"\u00bfCu\u00e1l de las siguientes es una de las versiones de Windows Server analizadas en el documento para revisar sus novedades de seguridad?\", opts: { A: \"Windows Server 2003\", B: \"Windows Server 2008\", C: \"Windows Server 2016\" }, ans: \"C\", exp: \"Windows Server 2016 introdujo protecciones fundamentales basadas en virtualizaci\u00f3n (VSM) y el aislamiento de Credential Guard.\" }, { id: 14, type: \"mc\", mod: \"2- Seguridad Web\", q: \"\u00bfCu\u00e1l es uno de los objetivos principales al estudiar la seguridad en las aplicaciones online y web?\", opts: { A: \"Aprender a realizar particiones de disco f\u00edsico.\", B: \"Conocer las medidas necesarias para mitigar ataques una vez desplegadas online.\", C: \"Dise\u00f1ar hardware criptogr\u00e1fico basado en TPM 2.0.\" }, ans: \"B\", exp: \"El foco principal radica en robustecer el software para resistir ataques externos al exponer los servicios en Internet.\" }, { id: 15, type: \"mc\", mod: \"2- Seguridad Web\", q: \"El uso del m\u00e9todo GET en los formularios web garantiza la confidencialidad de los datos sensibles de los usuarios, ya que estos viajan cifrados dentro del cuerpo de la petici\u00f3n HTTP.\", opts: { A: \"Verdadero.\", B: \"Falso.\" }, ans: \"B\", exp: \"Falso. El m\u00e9todo GET expone los par\u00e1metros directamente en la barra de direcciones de la URL (Query String), comprometiendo la confidencialidad.\" }, { id: 16, type: \"mc\", mod: \"2- Seguridad Web\", q: \"\u00bfQu\u00e9 m\u00e9todo del protocolo HTTP presenta un riesgo severo de seguridad debido a que permite a un atacante saltarse las protecciones de las cookies configuradas como HTTPOnly?\", opts: { A: \"GET\", B: \"TRACE\", C: \"POST\" }, ans: \"B\", exp: \"El m\u00e9todo TRACE activa Cross-Site Tracing (XST), reflejando las cabeceras HTTP de la petici\u00f3n (incluyendo cookies) directo en el cuerpo de la respuesta.\" }, { id: 17, type: \"mc\", mod: \"2- Seguridad Web\", q: \"La monitorizaci\u00f3n continua constituye uno de los pilares fundamentales para garantizar la seguridad de las aplicaciones desplegadas online.\", opts: { A: \"Verdadero.\", B: \"Falso.\" }, ans: \"A\", exp: \"La visibilidad en tiempo de producci\u00f3n permite reaccionar velozmente e identificar incidentes activos antes de que causen da\u00f1os graves.\" }, { id: 18, type: \"mc\", mod: \"2- Seguridad Web\", q: \"Un Firewall de Inspecci\u00f3n de Estado (Stateful) se diferencia del filtro de paquetes cl\u00e1sico porque:\", opts: { A: \"Mantiene un registro de las conexiones activas y eval\u00faa el contexto de los paquetes de red.\", B: \"Solo examina de manera aislada direcciones IP de origen.\", C: \"Se ejecuta \u00fanicamente en la capa f\u00edsica para evitar congestiones de hardware.\" }, ans: \"A\", exp: \"El firewall de estado guarda memoria (state table) del canal establecido para autorizar los flujos posteriores de la misma conexi\u00f3n.\" }, { id: 19, type: \"mc\", mod: \"2- Seguridad Web\", q: \"Un sistema IDS tiene la facultad de bloquear de manera activa las conexiones sospechosas por s\u00ed mismo en tiempo real.\", opts: { A: \"Verdadero.\", B: \"Falso.\" }, ans: \"B\", exp: \"Es falso. El IDS solo detecta e informa. La capacidad de bloqueo activo en tiempo real recae en un sistema IPS.\" }, { id: 20, type: \"mc\", mod: \"2- Seguridad Web\", q: \"Las reglas en un cortafuegos se procesan secuencialmente de abajo hacia arriba.\", opts: { A: \"Verdadero.\", B: \"Falso.\" }, ans: \"B\", exp: \"Falso. Se analizan de arriba hacia abajo (Top-Down). Al coincidir con la primera regla compatible (First-Match), el cortafuegos deja de buscar.\" } ]; const sopaPool = [ { word: \"OAUTH\", hint: \"Est\u00e1ndar industrial utilizado con el fin de delegar flujos de autorizaci\u00f3n federada entre servicios de terceros: ______.\" }, { word: \"RBAC\", hint: \"Modelo de control de acceso utilizado en Azure para aplicar restricciones y gobernanza granular sobre recursos: ______.\" }, { word: \"WAF\", hint: \"Dispositivo de seguridad perimetral que filtra, monitoriza y bloquea el tr\u00e1fico web malicioso a nivel de capa de aplicaci\u00f3n (Capa 7): ______.\" }, { word: \"TLS\", hint: \"Protocolo criptogr\u00e1fico est\u00e1ndar encargado de garantizar la confidencialidad de la informaci\u00f3n en tr\u00e1nsito: ______.\" }, { word: \"SIEM\", hint: \"Sistema centralizado para la captura de alertas, logs de auditor\u00eda y monitorizaci\u00f3n de incidentes en producci\u00f3n: ______.\" }, { word: \"XSS\", hint: \"Vulnerabilidad web basada en la inyecci\u00f3n de scripts maliciosos del lado del cliente en el navegador de los usuarios: ______.\" }, { word: \"IDOR\", hint: \"Fallo de control de acceso donde la aplicaci\u00f3n expone un identificador de objeto directo en la URL de forma insegura: ______.\" }, { word: \"XXE\", hint: \"Vulnerabilidad donde un analizador procesa entradas maliciosas que hacen referencia a entidades externas XML: ______.\" } ]; let activeUsername = \"Hacker An\u00f3nimo\";  let currentlySelectedWord = null; let globalScore = 0; let answeredQuestionsCount = 0;  let currentStreak = 0; let totalErrors = 0;  let wsStartCell = null; let dynamicGrid = []; let activeSopaWords = {}; function submitLogin() { const input = document.getElementById(\"username-input\"); if (input && input.value.trim() !== \"\") { activeUsername = input.value.trim(); } document.getElementById(\"login-overlay\").style.display = \"none\"; document.getElementById(\"bootcamp-user-title\").innerText = activeUsername; initializeRandomQuiz(); } function updateScoreDisplay() { const scoreDisplay = document.getElementById(\"score-display\"); if (scoreDisplay) scoreDisplay.innerText = `Puntos: ${globalScore} \/ 24`; const progressFill = document.getElementById(\"progress-fill\"); if (progressFill) { const percentage = Math.min((answeredQuestionsCount \/ 24) * 100, 100); progressFill.style.width = `${percentage}%`; } const rankDisplay = document.getElementById(\"rank-display\"); if (rankDisplay) { if (globalScore < 6) rankDisplay.innerText = \"Script Kiddie \ud83d\udc23\"; else if (globalScore < 12) rankDisplay.innerText = \"Pentester Junior \ud83d\udd0d\"; else if (globalScore < 18) rankDisplay.innerText = \"Security Analyst \ud83d\udee1\ufe0f\"; else if (globalScore < 23) rankDisplay.innerText = \"Hacker \u00c9tico Elite \ud83d\udcbb\"; else rankDisplay.innerText = \"CISO Supremo \ud83d\udc51\"; } const streakDisplay = document.getElementById(\"streak-display\"); if (streakDisplay) { if (currentStreak > 1) { streakDisplay.innerText = `\ud83d\udd25 Racha: ${currentStreak}`; streakDisplay.style.display = \"inline-flex\"; } else { streakDisplay.style.display = \"none\"; } } if (answeredQuestionsCount >= 24) { setTimeout(triggerGameCompletion, 1000); } } function triggerCelebration() { confetti({ particleCount: 100, spread: 70, origin: { y: 0.8 } }); } function triggerGameCompletion() { for(let i = 0; i < 3; i++) { setTimeout(triggerCelebration, i * 450); } const overlay = document.getElementById(\"completion-overlay\"); overlay.style.display = \"flex\"; document.getElementById(\"welcome-success-text\").innerText = `\u00a1Lo lograste, ${activeUsername}! :)`; document.getElementById(\"modal-errors-count\").innerText = totalErrors; const finalRank = document.getElementById(\"rank-display\").innerText; let adviceText = \"\"; if (totalErrors === 0) { adviceText = \"\ud83c\udfc6 \u00a1ACCESO PERFECTO, CISO SUPREMO! Tu precisi\u00f3n es quir\u00fargica. Has neutralizado todos los vectores de ataque y resuelto la sopa de letras sin activar una sola alerta en el SIEM. Tu nivel de auditor\u00eda es legendario. \u00a1Sigue liderando la vanguardia de la ciberseguridad corporativa de forma impecable! \ud83d\udee1\ufe0f\"; } else if (totalErrors === 1) { adviceText = \"\u26a1 \u00a1CASI PERFECTO! Solo registramos 1 error menor en tu bit\u00e1cora de hackeo. Un solo desliz de configuraci\u00f3n l\u00f3gica separa tu reporte de la excelencia absoluta. Revisa con calma ese emparejamiento o celda donde tuviste dudas; \u00a1el pr\u00f3ximo escaneo de vulnerabilidades ser\u00e1 completamente limpio! \ud83d\udd0d\"; } else if (totalErrors === 2) { adviceText = \"\ud83d\udd75\ufe0f \u00a1OPERACI\u00d3N DE ALTO NIVEL! Tuviste exactamente 2 fallos t\u00e1cticos durante la auditor\u00eda. Tu firma digital es limpia y tu racha demuestra un gran entendimiento t\u00e9cnico de los entornos. Ajusta la precisi\u00f3n en los flags de mitigaci\u00f3n de la red y estar\u00e1s listo para unirte al Red Team elite. \ud83d\udcbb\"; } else if (totalErrors === 3) { adviceText = \"\ud83d\udee1\ufe0f \u00a1COMPROMISO EXITOSO! Acumulaste 3 alertas de desconfiguraci\u00f3n. El WAF detect\u00f3 un poco de ruido menor en tu tr\u00e1fico web, pero lograste el bypass final con \u00e9xito. Refuerza tus conocimientos sobre el control de acceso de tokens OAuth 2.0 y el manejo seguro del Active Directory corporativo. \u2699\ufe0f\"; } else if (totalErrors === 4) { adviceText = \"\ud83d\udcca \u00a1BUEN RENDIMIENTO! Registramos 4 vulnerabilidades l\u00f3gicas en tu despliegue. Tu base es buena, pero esos 4 deslices indican que debes prestar m\u00e1s atenci\u00f3n a las cabeceras HTTP de seguridad avanzada (como HSTS o nosniff). \u00a1Asegura los sockets del servidor y vuelve a compilar! \ud83e\udde0\"; } else if (totalErrors === 5) { adviceText = \"\u26a0\ufe0f ALERTA DE CONFIGURACI\u00d3N MEDIANA: Tuviste 5 fallos l\u00f3gicos en tu auditor\u00eda. Est\u00e1s logrando mitigar los riesgos globales, pero dejas demasiadas huellas residuales en los logs de producci\u00f3n. Te sugerimos revisar con detenimiento las metodolog\u00edas SAST\/DAST y el gobierno de datos masivos. \ud83d\udcd6\"; } else if (totalErrors === 6) { adviceText = \"\ud83d\udea8 ALERTA DE RIESGO ELEVADO: Tu bit\u00e1cora marc\u00f3 6 errores en total. El per\u00edmetro digital simulado se est\u00e1 debilitando debido a ataques cruzados mal contenidos. Ponle foco inmediato a las contramedidas de inyecci\u00f3n SQL y a la protecci\u00f3n criptogr\u00e1fica en la nube de Azure antes del pr\u00f3ximo test. \ud83d\udee0\ufe0f\"; } else if (totalErrors === 7) { adviceText = \"\ud83d\udca5 \u00a1PER\u00cdMETRO COMPROMETIDO! Acumulaste 7 fallos en los firewalls l\u00f3gicos. Lograste completar los desaf\u00edos, pero a un costo operativo de red muy alto. Dedica unos minutos a estudiar el cat\u00e1logo de fallos arquitect\u00f3nicos de dise\u00f1o (Insecure Design) de la gu\u00eda internacional OWASP Top 10. \ud83e\uddd7\"; } else if (totalErrors >= 8 && totalErrors <= 12) { adviceText = \"\ud83d\uded1 \u00a1INTRUSI\u00d3N DETECTADA CON ALTO RUIDO! Registraste un total de \" + totalErrors + \" errores de red. Est\u00e1s confundiendo conceptos clave de blindaje perimetral y mitigaciones de sesiones. La teor\u00eda del ciclo SSDLC y el cifrado de datos en tr\u00e1nsito necesitan un repaso proactivo inmediato. \u00a1A acotar esos buffers! \ud83d\udcda\"; } else { adviceText = \"\u2623\ufe0f \u00a1CRITICAL BREACH \/ FUGA DE DATOS SEVERA! Tu nivel operativo registr\u00f3 \" + totalErrors + \" fallos graves. El IDS corporativo bloque\u00f3 m\u00faltiples peticiones tuyas por inundaci\u00f3n err\u00f3nea (SYN Flood). Necesitas volver a las bases l\u00f3gicas de Kerberos, WAF, y la anatom\u00eda de inyecciones. \u00a1Dale al bot\u00f3n inferior y limpia tu terminal! \ud83d\udd04\"; } document.getElementById(\"modal-advice\").innerText = adviceText; if (GOOGLE_SCRIPT_URL !== \"\") { const formData = new FormData(); formData.append(\"name\", activeUsername); formData.append(\"score\", globalScore); formData.append(\"errors\", totalErrors); formData.append(\"rank\", finalRank); fetch(GOOGLE_SCRIPT_URL, { method: \"POST\", body: formData }) .then(res => res.json()) .then(data => { loadGlobalLeaderboard(data); }) .catch(err => { console.error(\"Error conectando con la nube:\", err); loadLocalFallback(); }); } else { loadLocalFallback(); } const terminal = document.getElementById(\"terminal-output\"); terminal.innerHTML = \"\"; const logs = [ `[+] TRANSACTION SECURED FOR USER: ${activeUsername.toUpperCase()}`, \"[+] SYNCING SCORE DATA WITH REGIONAL SERVERS...\", \"[+] LEADERBOARD STREAM UPDATED IN REAL-TIME.\", \"[+] STATUS: SECURITY CHALLENGE COMPLETED COMPLIANT.\" ];  let lineIndex = 0; function typeLogLine() { if (lineIndex < logs.length) { const p = document.createElement(\"p\"); p.style.margin = \"4px 0\"; p.style.fontSize = \"13px\"; p.innerText = logs[lineIndex]; terminal.appendChild(p); terminal.scrollTop = terminal.scrollHeight; lineIndex++; setTimeout(typeLogLine, 400); } } typeLogLine(); } function loadGlobalLeaderboard(recordsArray) { const tableBody = document.getElementById(\"history-table-body\"); tableBody.innerHTML = \"\"; recordsArray.reverse().forEach(record => { const tr = document.createElement(\"tr\"); tr.innerHTML = ` <\/p>\n<td><strong>${record.name}<\/strong><\/td>\n<p> <\/p>\n<td style=\"color:#60a5fa;\">${record.score} \/ 24<\/td>\n<p> <\/p>\n<td style=\"color:#f87171;\">${record.errors}<\/td>\n<p> <\/p>\n<td>${record.rank}<\/td>\n<p> `; tableBody.appendChild(tr); }); } function loadLocalFallback() { let currentHistory = JSON.parse(localStorage.getItem(\"hacking_leaderboard\")) || []; const finalRank = document.getElementById(\"rank-display\").innerText; currentHistory.push({ name: activeUsername, score: globalScore, errors: totalErrors, rank: finalRank }); localStorage.setItem(\"hacking_leaderboard\", JSON.stringify(currentHistory)); const tableBody = document.getElementById(\"history-table-body\"); tableBody.innerHTML = \"\"; currentHistory.reverse().forEach(record => { const tr = document.createElement(\"tr\"); tr.innerHTML = `<\/p>\n<td><strong>${record.name} (Local)<\/strong><\/td>\n<td style=\"color:#60a5fa;\">${record.score} \/ 24<\/td>\n<td style=\"color:#f87171;\">${record.errors}<\/td>\n<td>${record.rank}<\/td>\n<p>`; tableBody.appendChild(tr); }); } function generateRandomSopa(words) { let grid = Array(9).fill(null).map(() => Array(9).fill(\"\")); words.forEach(word => { let placed = false; let attempts = 0; while (!placed && attempts < 150) { let dir = Math.floor(Math.random() * 3); let startRow = Math.floor(Math.random() * 9); let startCol = Math.floor(Math.random() * 9); let canPlace = true; let coords = []; for (let i = 0; i < word.length; i++) { let r = startRow + (dir === 1 || dir === 2 ? i : 0); let c = startCol + (dir === 0 || dir === 2 ? i : 0); if (r >= 9 || c >= 9) { canPlace = false; break; } if (grid[r][c] !== \"\" && grid[r][c] !== word[i]) { canPlace = false; break; } coords.push({r, c}); } if (canPlace) { coords.forEach((coord, idx) => { grid[coord.r][coord.c] = word[idx]; }); placed = true; } attempts++; } }); const alphabet = \"ABCDEFGHIJKLMNOPQRSTUVWXYZ\"; for (let r = 0; r < 9; r++) { for (let c = 0; c < 9; c++) { if (grid[r][c] === \"\") { grid[r][c] = alphabet[Math.floor(Math.random() * alphabet.length)]; } } } return grid; } function handleWordClick(event, wordElem, bankId) { const bank = document.getElementById(bankId); if (bank && bank.classList.contains('locked')) return; event.stopPropagation(); const originalBankId = wordElem.getAttribute('data-bank'); if (wordElem.parentElement.id === originalBankId) { if (currentlySelectedWord) currentlySelectedWord.classList.remove('selected-word'); currentlySelectedWord = wordElem; wordElem.classList.add('selected-word'); } else { const parentZone = wordElem.parentElement; document.getElementById(originalBankId).appendChild(wordElem); parentZone.classList.remove('filled'); parentZone.style.borderColor = '#94a3b8'; wordElem.style.background = 'var(--primary-dark)'; if (currentlySelectedWord === wordElem) { wordElem.classList.remove('selected-word'); currentlySelectedWord = null; } } } function handleZonePlace(zoneElem, allowedBankId) { if (!currentlySelectedWord) return; if (currentlySelectedWord.getAttribute('data-bank') !== allowedBankId) return; if (zoneElem.children.length > 0) { let existingWord = zoneElem.children[0]; const originalBank = existingWord.getAttribute('data-bank'); document.getElementById(originalBank).appendChild(existingWord); existingWord.style.background = 'var(--primary-dark)'; } zoneElem.appendChild(currentlySelectedWord); currentlySelectedWord.classList.remove('selected-word'); currentlySelectedWord = null; zoneElem.classList.add('filled'); zoneElem.style.borderColor = 'var(--primary-dark)'; } function renderDragLevel(questions) { const zone = document.getElementById(\"drag-drop-zone\"); zone.innerHTML = ` <\/p>\n<div class=\"section-header\">Nivel 1: Conceptos Clave (Arrastre Click & Place)<\/div>\n<p> <\/p>\n<div class=\"card\" id=\"drag-game-container-1\"> <\/p>\n<div class=\"question-text\">Instrucciones: Selecciona un concepto azul y haz clic en su recuadro correspondiente para unirlos l\u00f3gicamente.<\/div>\n<p> <\/p>\n<div class=\"drag-container\"> <\/p>\n<div class=\"words-bank\" id=\"wp-bank-container\"><\/div>\n<p> <\/p>\n<div class=\"slots-container\" id=\"wp-slots-container\"><\/div>\n<p> <\/div>\n<p> <button class=\"btn-check\" id=\"btn-validate-drag-1\">Validar Auditor\u00eda Nivel 1<\/button> <\/p>\n<div class=\"feedback\" id=\"drag-feedback-box-1\"><\/div>\n<p> <\/div>\n<p> `; const bankContainer = document.getElementById(\"wp-bank-container\"); const slotsContainer = document.getElementById(\"wp-slots-container\"); questions.forEach(q => { const word = document.createElement(\"div\"); word.className = \"draggable-word\"; word.innerText = q.token; word.setAttribute(\"data-val\", q.token); word.setAttribute(\"data-bank\", \"wp-bank-container\"); word.onclick = (e) => handleWordClick(e, word, \"wp-bank-container\"); bankContainer.appendChild(word); }); questions.forEach((q, idx) => { const row = document.createElement(\"div\"); row.className = \"slot-row\"; row.innerHTML = `<\/p>\n<div class=\"drop-zone\" id=\"dz-1-${idx}\" data-ans=\"${q.token}\" onclick=\"handleZonePlace(this, 'wp-bank-container')\"><\/div>\n<div class=\"slot-desc\">${q.text}<\/div>\n<p>`; slotsContainer.appendChild(row); }); document.getElementById(\"btn-validate-drag-1\").onclick = () => validateDragLevel1(); } function validateDragLevel1() { const bank = document.getElementById(\"wp-bank-container\"); const zones = document.querySelectorAll(\"#drag-game-container-1 .drop-zone\"); const feedback = document.getElementById(\"drag-feedback-box-1\"); let allFilled = true, allCorrect = true; zones.forEach(zone => { if (zone.children.length === 0) { allFilled = false; } else { let placedVal = zone.children[0].getAttribute('data-val'); let correctVal = zone.getAttribute('data-ans'); if (placedVal !== correctVal) { allCorrect = false; zone.style.borderColor = 'var(--incorrect)'; zone.children[0].style.background = 'var(--incorrect)'; } else { zone.style.borderColor = 'var(--correct)'; zone.children[0].style.background = 'var(--correct)'; } } }); feedback.style.display = 'block'; if (!allFilled) { feedback.className = \"feedback incorrect\"; feedback.innerText = \"\u26a0\ufe0f Quedan espacios vac\u00edos.\"; currentStreak = 0; totalErrors++; updateScoreDisplay(); } else if (!allCorrect) { feedback.className = \"feedback incorrect\"; feedback.innerText = \"\u274c Emparejamientos err\u00f3neos.\"; currentStreak = 0; totalErrors++; updateScoreDisplay(); } else { feedback.className = \"feedback correct\"; feedback.innerText = \"\u2705 Nivel 1 superado perfectamente (+4 puntos).\"; bank.classList.add('locked'); zones.forEach(zone => { zone.onclick = null; zone.children[0].onclick = null; }); document.getElementById(\"btn-validate-drag-1\").style.display = 'none'; globalScore += 4; answeredQuestionsCount += 4; currentStreak += 4; triggerCelebration(); updateScoreDisplay(); } } function renderSopaLevel() { const zone = document.getElementById(\"sopa-zone\"); zone.innerHTML = ` <\/p>\n<div class=\"section-header\">Nivel 2: Sopa de Letras Hacking & Completa la Definici\u00f3n<\/div>\n<p> <\/p>\n<div class=\"card\"> <\/p>\n<div class=\"question-text\">Instrucciones: Si no conoces la respuesta, usa el bot\u00f3n de asistencia para revelar el objetivo. Luego, haz clic en la <strong>letra inicial<\/strong> y <strong>final<\/strong> en la sopa de letras.<\/div>\n<p> <\/p>\n<div class=\"wordsearch-container\"> <\/p>\n<div class=\"wordsearch-grid\" id=\"ws-grid\"><\/div>\n<p> <\/p>\n<div class=\"word-list\" id=\"ws-words-list\"><\/div>\n<p> <\/p>\n<div class=\"feedback\" id=\"sopa-feedback\"><\/div>\n<p> <\/div>\n<p> <\/div>\n<p> `; const gridElem = document.getElementById(\"ws-grid\"); for (let r = 0; r < 9; r++) { for (let c = 0; c < 9; c++) { const cell = document.createElement(\"div\"); cell.className = \"grid-cell\"; cell.innerText = dynamicGrid[r][c]; cell.id = `cell-${r}-${c}`; cell.onclick = () => handleCellClick(r, c, cell); gridElem.appendChild(cell); } } const listElem = document.getElementById(\"ws-words-list\"); Object.keys(activeSopaWords).forEach(word => { const item = document.createElement(\"div\"); item.className = \"word-item\"; item.id = `word-item-${word}`; const hintText = activeSopaWords[word].hint; const parts = hintText.split(\"______\"); item.innerHTML = `<\/p>\n<div class=\"word-item-text\">\ud83d\udee1\ufe0f ${parts[0]}<strong class=\"blank-field\" id=\"blank-${word}\">[ ______ ]<\/strong>${parts[1] || \"\"}<\/div>\n<p><button id=\"hint-btn-${word}\" class=\"opt-btn\" style=\"display:inline-flex; width:auto; padding:6px 12px; font-size:12px; background:var(--warning-bg); border:1px solid var(--warning); color:var(--warning-text); border-radius:6px; cursor:pointer; font-weight:700; white-space:nowrap; margin-top:5px;\" onclick=\"revealSopaHint('${word}')\">\ud83d\udca1 Revelar Palabra<\/button>`; listElem.appendChild(item); }); } window.revealSopaHint = function(word) { const blankEl = document.getElementById(`blank-${word}`); const btnEl = document.getElementById(`hint-btn-${word}`); if (blankEl && !activeSopaWords[word].found) { blankEl.innerText = `[ BUSCA: ${word} ]`; blankEl.style.color = \"var(--warning-text)\"; if (btnEl) btnEl.style.display = \"none\"; } } function handleCellClick(row, col, cellElem) { if (cellElem.classList.contains('found')) return; if (!wsStartCell) { wsStartCell = { row, col, elem: cellElem }; cellElem.classList.add('selected'); } else { const start = wsStartCell; const end = { row, col, elem: cellElem }; start.elem.classList.remove('selected'); wsStartCell = null; const rDiff = end.row - start.row; const cDiff = end.col - start.col; const rDist = Math.abs(rDiff); const cDist = Math.abs(cDiff); let isValidLine = false; let stepR = 0; let stepC = 0; let stepsCount = 0; if (rDist === 0) { isValidLine = true; stepC = cDiff > 0 ? 1 : -1; stepsCount = cDist; } else if (cDist === 0) { isValidLine = true; stepR = rDiff > 0 ? 1 : -1; stepsCount = rDist; } else if (rDist === cDist) { isValidLine = true; stepR = rDiff > 0 ? 1 : -1; stepC = cDiff > 0 ? 1 : -1; stepsCount = rDist; } if (isValidLine) { const coords = []; let wordStr = \"\"; for (let i = 0; i <= stepsCount; i++) { const currR = start.row + (i * stepR); const currC = start.col + (i * stepC); coords.push({ row: currR, col: currC }); wordStr += dynamicGrid[currR][currC]; } const reversedWordStr = wordStr.split('').reverse().join(''); let matchedWord = null; if (activeSopaWords[wordStr] && !activeSopaWords[wordStr].found) matchedWord = wordStr; else if (activeSopaWords[reversedWordStr] && !activeSopaWords[reversedWordStr].found) matchedWord = reversedWordStr; if (matchedWord) { activeSopaWords[matchedWord].found = true; coords.forEach(coord => { const el = document.getElementById(`cell-${coord.row}-${coord.col}`); if (el) el.classList.add('found'); }); const blankEl = document.getElementById(`blank-${matchedWord}`); if (blankEl) { blankEl.innerText = matchedWord; blankEl.style.color = \"var(--correct-text)\"; blankEl.style.borderBottom = \"none\"; } const itemEl = document.getElementById(`word-item-${matchedWord}`); if (itemEl) itemEl.classList.add('found'); const btnEl = document.getElementById(`hint-btn-${matchedWord}`); if (btnEl) btnEl.style.display = \"none\"; globalScore += 1; answeredQuestionsCount += 1; currentStreak += 1; triggerCelebration(); updateScoreDisplay(); if (Object.keys(activeSopaWords).every(k => activeSopaWords[k].found)) { const feedback = document.getElementById(\"sopa-feedback\"); feedback.className = \"feedback correct\"; feedback.style.display = \"block\"; feedback.innerText = \"\ud83c\udf89 Sopa de letras descifrada completamente (+4 puntos).\"; } } else { flashError(start.elem, end.elem); } } else { flashError(start.elem, end.elem); } } } function flashError(el1, el2) { el1.style.borderColor = 'var(--incorrect)'; el2.style.borderColor = 'var(--incorrect)'; setTimeout(() => { if (!el1.classList.contains('found')) el1.style.borderColor = ''; if (!el2.classList.contains('found')) el2.style.borderColor = ''; }, 500); currentStreak = 0; totalErrors++; updateScoreDisplay(); } function renderDragLevel2(questions) { const zone = document.getElementById(\"drag-drop-zone-2\"); zone.innerHTML = ` <\/p>\n<div class=\"section-header\">Nivel 3: Mitigaci\u00f3n de Amenazas (Auditor\u00eda vs. Vectores de Riesgo)<\/div>\n<p> <\/p>\n<div class=\"card\" id=\"drag-game-container-2\"> <\/p>\n<div class=\"question-text\">Instrucciones: Selecciona una <strong>Contramedida de Seguridad<\/strong> (etiqueta azul) y haz clic en el <strong>Vector de Riesgo Evaluado<\/strong> (recuadro dashed) para neutralizarlo.<\/div>\n<p> <\/p>\n<div class=\"drag-container\"> <\/p>\n<div class=\"words-bank\" id=\"child-bank-container\"><\/div>\n<p> <\/p>\n<div class=\"slots-container\" id=\"parent-slots-container\"><\/div>\n<p> <\/div>\n<p> <button class=\"btn-check\" id=\"btn-validate-drag-2\">Verificar Blindaje Tecnol\u00f3gico<\/button> <\/p>\n<div class=\"feedback\" id=\"drag-feedback-box-2\"><\/div>\n<p> <\/div>\n<p> `; const bankContainer = document.getElementById(\"child-bank-container\"); const slotsContainer = document.getElementById(\"parent-slots-container\"); questions.forEach(q => { const word = document.createElement(\"div\"); word.className = \"draggable-word\"; word.innerText = q.token; word.setAttribute(\"data-val\", q.token); word.setAttribute(\"data-bank\", \"child-bank-container\"); word.onclick = (e) => handleWordClick(e, word, \"child-bank-container\"); bankContainer.appendChild(word); }); questions.forEach((q, idx) => { const row = document.createElement(\"div\"); row.className = \"slot-row\"; row.innerHTML = `<\/p>\n<div class=\"drop-zone\" id=\"dz-2-${idx}\" data-ans=\"${q.token}\" onclick=\"handleZonePlace(this, 'child-bank-container')\"><\/div>\n<div class=\"slot-desc\">\ud83d\udee1\ufe0f <strong>Vector de Riesgo Evaluado:<\/strong> ${q.text}<\/div>\n<p>`; slotsContainer.appendChild(row); }); document.getElementById(\"btn-validate-drag-2\").onclick = () => validateDragLevel2(); } function validateDragLevel2() { const bank = document.getElementById(\"child-bank-container\"); const zones = document.querySelectorAll(\"#drag-game-container-2 .drop-zone\"); const feedback = document.getElementById(\"drag-feedback-box-2\"); let allFilled = true, allCorrect = true; zones.forEach(zone => { if (zone.children.length === 0) { allFilled = false; } else { let placedVal = zone.children[0].getAttribute('data-val'); let correctVal = zone.getAttribute('data-ans'); if (placedVal !== correctVal) { allCorrect = false; zone.style.borderColor = 'var(--incorrect)'; zone.children[0].style.background = 'var(--incorrect)'; } else { zone.style.borderColor = 'var(--correct)'; zone.children[0].style.background = 'var(--correct)'; } } }); feedback.style.display = 'block'; if (!allFilled) { feedback.className = \"feedback incorrect\"; feedback.innerText = \"\u26a0\ufe0f Quedan vectores de riesgo desprotegidos.\"; currentStreak = 0; totalErrors++; updateScoreDisplay(); } else if (!allCorrect) { feedback.className = \"feedback incorrect\"; feedback.innerText = \"\u274c Errores en las mitigaciones.\"; currentStreak = 0; totalErrors++; updateScoreDisplay(); } else { feedback.className = \"feedback correct\"; feedback.innerText = \"\u2705 \u00a1Aseguramiento Exitoso! Todos los vectores de ataque han sido mitigados.\"; bank.classList.add('locked'); zones.forEach(zone => { zone.onclick = null; zone.children[0].onclick = null; }); document.getElementById(\"btn-validate-drag-2\").style.display = 'none'; globalScore += 4; answeredQuestionsCount += 4; currentStreak += 4; triggerCelebration(); updateScoreDisplay(); } } function renderDropdownLevel(questions) { const zone = document.getElementById(\"dropdown-zone\"); zone.innerHTML = `<\/p>\n<div class=\"section-header\">Nivel 4: Despliegues de Infraestructura (Completar Desplegables)<\/div>\n<p>`; questions.forEach((q, idx) => { let card = document.createElement(\"div\"); card.className = \"card\"; card.id = `drop-card-${idx}`; let selectHTML = `<select class=\"game-select\" id=\"g-sel-${idx}\"><option value=\"\">-- Elige --<\/option>`; Object.keys(q.options).forEach(key => { selectHTML += `<option value=\"${key}\">${q.options[key]}<\/option>`; }); selectHTML += `<\/select>`; card.innerHTML = `<\/p>\n<div class=\"question-text\">Escenario ${idx + 1} (${q.mod})<\/div>\n<div class=\"dropdown-text\">${q.text} ${selectHTML}.<\/div>\n<p><button class=\"btn-check\" id=\"btn-val-drop-${idx}\">Verificar Escenario<\/button><\/p>\n<div class=\"feedback\" id=\"drop-feed-${idx}\"><\/div>\n<p>`; zone.appendChild(card); document.getElementById(`btn-val-drop-${idx}`).onclick = () => { const selectElement = document.getElementById(`g-sel-${idx}`); const fb = document.getElementById(`drop-feed-${idx}`); if (!selectElement.value) { fb.className = \"feedback incorrect\"; fb.innerText = \"\u26a0\ufe0f Selecciona una opci\u00f3n.\"; fb.style.display = \"block\"; return; } if (selectElement.value === q.correct) { selectElement.className = \"game-select success\"; fb.className = \"feedback correct\"; fb.innerText = \"\u2705 Respuesta correcta (+1 punto).\"; document.getElementById(`btn-val-drop-${idx}`).style.display = \"none\"; globalScore += 1; answeredQuestionsCount += 1; currentStreak += 1; triggerCelebration(); updateScoreDisplay(); } else { selectElement.className = \"game-select error\"; fb.className = \"feedback incorrect\"; fb.innerText = \"\u274c Incorrecto.\"; currentStreak = 0; totalErrors++; updateScoreDisplay(); } }; }); } function renderMCLevel(questions) { const container = document.getElementById(\"multiple-choice-zone\"); container.innerHTML = `<\/p>\n<div class=\"section-header\">Nivel 5: Cuestionario Elite de Ciberseguridad (Opci\u00f3n M\u00faltiple)<\/div>\n<p>`; questions.forEach((item, index) => { let card = document.createElement('div'); card.className = 'card'; card.innerHTML = `<\/p>\n<div class=\"question-text\">${index + 1}. [${item.mod}] ${item.q}<\/div>\n<p>`; let optsDiv = document.createElement('div'); optsDiv.className = 'options-container'; Object.keys(item.opts).forEach(key => { let btn = document.createElement('button'); btn.className = 'opt-btn'; btn.innerHTML = `<span class=\"option-letter\">${key}<\/span> <span>${item.opts[key]}<\/span>`; btn.onclick = function() { if (card.classList.contains('locked')) return; let fb = card.querySelector('.feedback') || document.createElement('div'); fb.className = 'feedback'; card.appendChild(fb); if (key === item.ans) { btn.className = 'opt-btn correct-ans'; fb.className = 'feedback correct'; fb.innerHTML = `\u2705 <strong>\u00a1Respuesta Correcta!<\/strong> ${item.exp}`; card.classList.add('answered-correctly', 'locked'); Array.from(optsDiv.children).forEach(b => { if (b !== btn) b.classList.add('disabled'); }); globalScore += 1; answeredQuestionsCount += 1; currentStreak += 1; triggerCelebration(); updateScoreDisplay(); } else { btn.className = 'opt-btn incorrect-ans'; fb.className = 'feedback incorrect'; fb.innerHTML = `\u274c <strong>Incorrecto.<\/strong>`; currentStreak = 0; totalErrors++; updateScoreDisplay(); } }; optsDiv.appendChild(btn); }); card.appendChild(optsDiv); container.appendChild(card); }); } \/\/ --- ENGIN DE INICIALIZACI\u00d3N --- function initializeRandomQuiz() { const dragPool = masterQuestionPool.filter(q => q.type === \"drag\"); const dropPool = masterQuestionPool.filter(q => q.type === \"dropdown\"); const mcPool = masterQuestionPool.filter(q => q.type === \"mc\"); shuffleArray(dragPool); shuffleArray(dropPool); shuffleArray(mcPool); const selectedDrag1 = dragPool.slice(0, 4); shuffleArray(sopaPool); const selectedSopa = sopaPool.slice(0, 4); activeSopaWords = {}; selectedSopa.forEach(item => { activeSopaWords[item.word] = { found: false, hint: item.hint }; }); dynamicGrid = generateRandomSopa(selectedSopa.map(x => x.word)); const selectedDrag2 = dragPool.slice(4, 8); const selectedDrop = dropPool.slice(0, 4); const selectedMC = mcPool.slice(0, 8); renderDragLevel(selectedDrag1); renderSopaLevel(); renderDragLevel2(selectedDrag2); renderDropdownLevel(selectedDrop); renderMCLevel(selectedMC); updateScoreDisplay(); } function shuffleArray(array) { for (let i = array.length - 1; i > 0; i--) { const j = Math.floor(Math.random() * (i + 1)); [array[i], array[j]] = [array[j], array[i]]; } return array; }<\/script><\/body><\/html>[\/et_pb_code][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":641,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"class_list":["post-646","page","type-page","status-publish","has-post-thumbnail","hentry"],"_links":{"self":[{"href":"https:\/\/blamiss.com\/index.php\/wp-json\/wp\/v2\/pages\/646","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blamiss.com\/index.php\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/blamiss.com\/index.php\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/blamiss.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blamiss.com\/index.php\/wp-json\/wp\/v2\/comments?post=646"}],"version-history":[{"count":28,"href":"https:\/\/blamiss.com\/index.php\/wp-json\/wp\/v2\/pages\/646\/revisions"}],"predecessor-version":[{"id":695,"href":"https:\/\/blamiss.com\/index.php\/wp-json\/wp\/v2\/pages\/646\/revisions\/695"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blamiss.com\/index.php\/wp-json\/wp\/v2\/media\/641"}],"wp:attachment":[{"href":"https:\/\/blamiss.com\/index.php\/wp-json\/wp\/v2\/media?parent=646"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}