The cyberrange segment that simulates entire industries, with infrastructure reflecting real-world companies

State F's leading companies from various industries invite security researchers to test their defenses. 

Find ways to trigger critical events from past Standoff cyberbattles to level up your skills. Each cyberrange segment features unique tasks of varying difficulty.

Hack infrastructures and mix different attack vectors to establish yourself in the community and get to the top of the leaderboard.

To get access to the cyberrange, set up a VPN connection (for details, see the [Access and resources](https://hackbase.standoff365.com/en-US/battle/5?section=report&tab=accessAndResources) section).

hackbase

Industry

Earn points by finding vulnerabilities in systems. Points are awarded separately for each system, and you can report only one vulnerability of each type per system.
Please note: for the "Banking system" industry, vulnerability submission is not provided.

ICG is State F's leading IT giant, integrator, and internet and hosting provider. It develops and offers turnkey solutions used by the country's top organizations. The company adheres to the principles of secure development.

**Scope**
Outer perimeter: 10.124.2.0/26
Inner perimeter: 10.154.20.0/22
Domain: icg.stf

To perform phishing attacks and penetrate the intranet, use mail server (accessible via the web). Using your own SMTP servers may lead to problems with receiving the reverse shell.
 
To access the cyberrange, set up a VPN connection following the instructions provided in the <a href="https://range.standoff365.com/battle/5?section=report&tab=accessAndResources">"Access and resources"</a>. 
 
Important notes on this cyberrange segment:
1. Hosts come in different difficulty levels, ranging from beginner-friendly to expert-level.
2. The main goal is to trigger critical events. You can also find and report vulnerabilities on some hosts.
3. Triggering a critical event will bring you points. The higher the difficulty level, the more points up for grabs. Your performance will count towards your Standoff Cyberrange ranking.

In State F, there are two commercial banks operating:
— Commercial Bank of Standoff – the bank enables sending and receiving international transfers via SWIFT.
— First Partner Bank – provides DBO (Digital Banking Online) for individuals and businesses.
 
Domains: cbs.stf, fpb.stf

cbs.stf
External perimeter: 10.124.0.128/26
Internal perimeter: 10.154.4.0/23
Out of scope:
Router gateways: 10.124.0.129-130, 10.124.0.161, 10.154.4.129, 10.154.4.161
SC USERS, SC SERVERS subnets: 10.154.4.32/27, 10.154.4.0/27

fpb.stf
External perimeter: 10.124.1.0/26
Internal perimeter: 10.154.8.0/23
Router gateways: 10.124.1.1-10.124.1.2, 10.124.1.33, 10.154.8.65, 10.154.8.97
SC USERS, SC SERVERS subnets: 10.154.8.32/27, 10.154.8.0/27

To access the cyberrange, set up a VPN connection following the instructions provided in the <a href="https://range.standoff365.com/battle/5?section=report&tab=accessAndResources">"Access and resources"</a>. 
 
Important notes on this cyberrange segment:
1. Hosts come in different difficulty levels, ranging from beginner-friendly to expert-level.
2. The main goal is to trigger critical events. You can also find and report vulnerabilities on some hosts.
3. Triggering a critical event will bring you points. The higher the difficulty level, the more points up for grabs. Your performance will count towards your Standoff Cyberrange ranking.




**F.A.Q.**
Q: When accessing web hosts, I get a 404 error. What should I do?
A: Web resources are available via DNS names. Make sure you're using the correct address.

ICG

Results