Hack infrastructures and mix different attack vectors to establish yourself in the community and get to the top of the leaderboard

State F's leading companies from various industries invite security researchers to test their defenses. 

Find ways to trigger critical events from past Standoff cyberbattles to level up your skills. Each cyberrange segment features unique tasks of varying difficulty.

Hack infrastructures and mix different attack vectors to establish yourself in the community and get to the top of the leaderboard.

To get access to the cyberrange, set up a VPN connection (for details, see the [Access and resources](https://hackbase.standoff365.com/en-US/battle/5?section=report&tab=accessAndResources) section).

hackbase

Online cyberrange for professionals

Earn points by finding vulnerabilities in systems. Points are awarded separately for each system, and you can report only one vulnerability of each type per system.

In State F, there are two commercial banks operating:
— Commercial Bank of Standoff – the bank enables sending and receiving international transfers via SWIFT.
— First Partner Bank – provides DBO (Digital Banking Online) for individuals and businesses.
 
Domains: cbs.stf, fpb.stf

cbs.stf
External perimeter: 10.124.0.128/26
Internal perimeter: 10.154.4.0/23
Out of scope:
Router gateways: 10.124.0.129-130, 10.124.0.161, 10.154.4.129, 10.154.4.161
SC USERS, SC SERVERS subnets: 10.154.4.32/27, 10.154.4.0/27

fpb.stf
External perimeter: 10.124.1.0/26
Internal perimeter: 10.154.8.0/23
Router gateways: 10.124.1.1-10.124.1.2, 10.124.1.33, 10.154.8.65, 10.154.8.97
SC USERS, SC SERVERS subnets: 10.154.8.32/27, 10.154.8.0/27

To access the cyberrange, set up a VPN connection following the instructions provided in the <a href="https://range.standoff365.com/battle/5?section=report&tab=accessAndResources">"Access and resources"</a>. 
 
Important notes on this cyberrange segment:
1. Hosts come in different difficulty levels, ranging from beginner-friendly to expert-level.
2. The main goal is to trigger critical events. You can also find and report vulnerabilities on some hosts.
3. Triggering a critical event will bring you points. The higher the difficulty level, the more points up for grabs. Your performance will count towards your Standoff Cyberrange ranking.




**F.A.Q.**
Q: When accessing web hosts, I get a 404 error. What should I do?
A: Web resources are available via DNS names. Make sure you're using the correct address.

Banking system

ICG is State F's leading IT giant, integrator, and internet and hosting provider. It develops and offers turnkey solutions used by the country's top organizations. The company adheres to the principles of secure development.

**Scope**
Outer perimeter: 10.124.2.0/26
Inner perimeter: 10.154.20.0/22
Domain: icg.stf

To perform phishing attacks and penetrate the intranet, use mail server (accessible via the web). Using your own SMTP servers may lead to problems with receiving the reverse shell.
 
To access the cyberrange, set up a VPN connection following the instructions provided in the <a href="https://range.standoff365.com/battle/5?section=report&tab=accessAndResources">"Access and resources"</a>. 
 
Important notes on this cyberrange segment:
1. Hosts come in different difficulty levels, ranging from beginner-friendly to expert-level.
2. The main goal is to trigger critical events. You can also find and report vulnerabilities on some hosts.
3. Triggering a critical event will bring you points. The higher the difficulty level, the more points up for grabs. Your performance will count towards your Standoff Cyberrange ranking.

Standoff Standalone is a new cyberrange segment, featuring standalone hosts with unique configurations and multiple vulnerabilities. The hosts represent different industries of the virtual State F so you can hone your hacking skills using various attack tools and techniques.
 
Level up by triggering critical events of varying difficulty. Some of them may be familiar to you from Standoff cyberbattles, but others are brand-new.
 
Scope
The scope comprises the following hosts:
• passoffice.standalone.stf, 10.124.249.13
 
Important notes on Standoff Standalone:
1. Hosts come in different difficulty levels, ranging from beginner-friendly to expert-level.
2. The main goal is to exploit vulnerabilities and trigger critical events. Each host may contain one or more flags (for both types of tasks).
3. Triggering a critical event will bring you points. The higher the difficulty level of the host, the more points up for grabs. Your performance will count towards your Standoff Cyberrange ranking.
4. Windows host domain names may be different from those specified in the critical event name.

Standoff Standalone

Complete tasks in seasonal competitions and climb to the top of the leaderboard!

Online cyberrange for professionals

Season 1: Ground Zero

Results