Scenario : Sysco is a Managed Service Provider that has tasked you to perform an external penetration testing on their active directory domain. You must obtain initial foothold, move laterally and...

Scenario : Stellar Communications, a regional telecommunications provider, has retained the Hack Smarter Red Team to conduct a covert internal network penetration test. The client is concerned abo...

Scenario : 404 Bank, a staple of the local financial community, is conducting its annual security assessment. To uphold their motto of being “Proven, Local, Strong,” the bank has commissioned the ...

Scenario : You are a member of the Hack Smarter Red Team. During a phishing engagement, you were able to retrieve credentials for the client’s Active Directory environment. Use these credentials t...

Scenario : You are a member of the Hack Smarter Red Team. This penetration test will operate under an assumed breach scenario, starting with valid credentials for a standard domain user, faraday. ...

Scenario : ShadowGate recently completed a corporate acquisition that significantly expanded its internal network, user base, and application footprint. Several business-critical systems were migr...

Scenario : An adult beverage company “Martini Bars” recently had a corporate breach and the compliance and risk team dictates they perform a penetration test at one of their branch offices. The Ha...

Scenario : Palisade rents mountaineering kits. The dev wrote a case-sensitive string replace to strip “<script”. He shipped it at 11pm the night before a demo. Nothing blew up. Yet. Solution :...

Scenario : BlockPixel Goods is Maya, Theo, and Reese — three friends who met at a craft fair in Portland in 2022 and started selling pixel-art hoodies from a garage. They graduated to a real shop ...

Scenario : Crate & Sleeve has run since 2014 on volunteer hosting and member dues — no auction bots, no eBay scraping, no premium tier. About four hundred records in rotation, a handful of mod...