Scenario : Stylus Hi-Fi is a vintage record marketplace based in Portland — sellers list their inventory, buyers search by Goldmine grade, the platform takes 8%. The public marketplace went throug...

Scenario : Sandpiper Stationery is a three-person wedding-invitation studio on the Cape, founded 2012 — letterpress suites from $640, six-to-eight week lead times, an Etsy following that finally o...

Scenario : Parasite Systems built a centralized dashboard to manage server configurations across their fleet. The import tool accepts configuration files — but how thoroughly did they lock down wh...

Scenario : LogCraft is a log aggregation SaaS for engineering teams. One of its paid features is the Health Report generator, which produces a formatted summary of log volume, error rates, and act...

Scenario : Foundry Comics is a three-person riso-print outfit in Gowanus that publishes single-issue runs by emerging cartoonists. In 2022 they picked up a defunct submission portal off another sm...

Objective / Scope You are a member of the Hack Smarter Red Team and have been assigned to perform a black-box penetration test against a client’s critical infrastructure. There are three machines ...

Objective / Scope : The 2025 U.S. Elite Triathlon National Team has requested a penetration test on its internal network. They have granted access to their network via VPN, but no other informatio...

Objective / Scope : A local municipality recently survived a devastating ransomware campaign. While their internal IT team believes the infection has been purged and the holes plugged, the Board o...

Scenario : Lumon Industries will soon be integrating a high-value employee into the organization. In accordance with internal security protocols, a comprehensive penetration test and internal acce...

Objective : The core objective is to demonstrate the full impact of a successful network intrusion by achieving Domain Administrator privileges over the client’s Active Directory environment. The t...