TRAINING EXERCISE · Everything here is fictional — company, people, accounts and domains. Part of the Day One OSINT security-awareness CTF.
nexorawiki

IT

IT Onboarding: First Login VPN & Wi-Fi setup Requesting access

HR

Leave & holidays Expenses

Teams

Platform Engineering Reliability

IT Onboarding: First Login

This is part of the New Joiner Guide. It covers your very first login to the Onboarding Portal on day one. Follow it once, then change your password and you're done.

This page should not be public. It describes how temporary credentials are generated. It was published to the open web by mistake — exactly the kind of thing an attacker loves to find.

1. Your username

Your portal username is simply firstname.lastname, all lowercase. For example, someone named Dana Kessler would log in as dana.kessler.

2. Your temporary password

Until you change it, your password is generated from your badge and your start date using this formula:

Nx + <last 4 digits of your employee ID> + <start date as DDMM> + !
# employee ID is printed on your badge, e.g. NXD-2026-0000
# DDMM uses your first working day in office-local time (SGT)
PieceWhere to find itExample
Last 4 of employee IDPrinted on your badge0000
Start date (DDMM)Your first working day, SGT0109 = 1 Sept

So a joiner with badge NXD-2026-0000 starting on 1 September would have the temporary password Nx00000109!.

Change it on first login. The portal will prompt you to set a real password immediately. Do that before you do anything else — the temporary one is predictable by design.

3. Trouble?

If the temporary password doesn't work, double-check your start date is in Singapore time, not UTC — the two can fall on different calendar days. Still stuck? Email it-help@nexora-dynamics.example.

Last edited 29 Sept 2026 · Visibility: Public (⚠ should be Internal) · nexora.ctf wiki

Fictional wiki page for the Day One CTF. The formula and all IDs are invented.