  Cyber attacks are ubiquitous and a constantly growing threat in the age of
digitization. In order to protect important data, developers and system
administrators must be trained and made aware of possible threats. Practical
training can be used for students alike to introduce them to the topic. A
constant threat to websites that require user authentication is so-called
brute-force attacks, which attempt to crack a password by systematically trying
every possible combination. As this is a typical threat, but comparably easy to
detect, it is ideal for beginners. Therefore, three open-source blue team
scenarios are designed and systematically described. They are contiguous to
maximize the learning effect.
