The cyberrange segment that simulates entire industries, with infrastructure reflecting real-world companies

State F's leading companies from various industries invite security researchers to test their defenses. 

Find ways to trigger critical events from past Standoff cyberbattles to level up your skills. Each cyberrange segment features unique tasks of varying difficulty.

Hack infrastructures and mix different attack vectors to establish yourself in the community and get to the top of the leaderboard.

To get access to the cyberrange, set up a VPN connection (for details, see the [Access and resources](https://hackbase.standoff365.com/en-US/battle/5?section=report&tab=accessAndResources) section).

hackbase

Industry

Earn points by finding vulnerabilities in systems. Points are awarded separately for each system, and you can report only one vulnerability of each type per system.
Please note: for the "Banking system" industry, vulnerability submission is not provided.

MetalliKO iron and steel works is preparing to celebrate the anniversary of its operations in State F!

From one cyberbattle to the next, a small production facility expanded until it became the MetalliKO plant — a pivotal, fully integrated enterprise: from ore extraction to finished rolled products. Today, the plant comprises an ore yard with a bucket-wheel excavator and conveyor, a blast furnace, an oxygen converter shop, a continuous casting machine, a rolling mill, and a warehouse from which metal products are shipped to customers.

The activities of MetalliKO today directly impact key industries of State F. The plant is the largest energy consumer in the region. The products of MetalliKO are used in the most important state projects. For example, pipes for main oil pipelines are made from the high-quality steel produced here.

Efficient production and promising developments long allowed MetalliKO to remain a market leader — until a sophisticated cyberattack paralyzed the plant. Following this incident, MetalliKO created one of the most secure industrial networks in State F.

In honor of the 10th Standoff cyberbattle, the metallurgical plant invites participants to try and replicate the most famous hacker attacks in the history of State F's metallurgical industry!

Important: In this infrastructure, only flags for critical events can be submitted. Vulnerability flags are not available.

Password dictionary: https://standoff365.com/content/uploads/wordlist_stf16_5_9d7c83a34a.txt

At the heart of State F, between the neon glow of skyscrapers and the haze of industrial zones, rose the Pipeline corporation—a giant of the oil and gas industry, holding a network of extraction, refining, and resource distribution. On gray metal platforms, pumps swayed, drawing oil and gas into the hollow guts of pipelines, while the digital eyes of control systems watched over every liter and every byte of data.

But in a world where information had become the new oil, Pipeline found itself in the crosshairs of invisible hunters… Hackers penetrated the production accounting system—the precise flows of oil in the reports turned into lies. An autonomous vessel guiding a tanker toward foreign ports suddenly changed course and at night, with the screech of metal and wailing sirens, struck a reef. A black slick of oil stretched for thousands of kilometers, poisoning marine flora, fishing grounds, and the corporation’s reputation.

In the digital depths, intellectual property, strategic plans, and development roadmaps leaked away. The director’s computer became an open book: financial reports and contracts surfaced online, shares collapsed, key clients severed ties. Employee record systems malfunctioned, operators’ credentials were stolen, and technological parameters—from drilling pumps to separators and conveyors—were manipulated, as if someone were playing with the enterprise’s living tissue.

At the drilling rig, overloaded pumps nearly halted gas extraction. Oil separators malfunctioned due to faulty valves, and altered paint ratios at the plant turned products into defective waste. The tire factory ground to a halt: conveyors stopped while engineers struggled to regain control of the system, feeling the breath of digital ghosts in every line of code.

The intrusion left a trace that vanished in the flow of logs faster than it could be captured. The corporation stood on the brink of chaos: the energy and industrial heart of State F had proven vulnerable to the invisible specters of cyberspace. Here, where oil and data flowed in parallel streams, survival meant not only controlling resources but also mastering the art of repelling attacks in which every byte of information could become a weapon.

Pipeline

ICG is State F's leading IT giant, integrator, and internet and hosting provider. It develops and offers turnkey solutions used by the country's top organizations. The company adheres to the principles of secure development.

**Scope**
Outer perimeter: 10.124.2.0/26
Inner perimeter: 10.154.20.0/22
Domain: icg.stf

To perform phishing attacks and penetrate the intranet, use mail server (accessible via the web). Using your own SMTP servers may lead to problems with receiving the reverse shell.
 
To access the cyberrange, set up a VPN connection following the instructions provided in the <a href="https://range.standoff365.com/battle/5?section=report&tab=accessAndResources">"Access and resources"</a>. 
 
Important notes on this cyberrange segment:
1. Hosts come in different difficulty levels, ranging from beginner-friendly to expert-level.
2. The main goal is to trigger critical events. You can also find and report vulnerabilities on some hosts.
3. Triggering a critical event will bring you points. The higher the difficulty level, the more points up for grabs. Your performance will count towards your Standoff Cyberrange ranking.

Gold Reserve v17 is a special office within the banking system featuring two critical events. It is designed specifically to earn cash and exchange it for merchandise during the Standoff offline event, which runs from June 16 to 19. The office operates for a limited time — from June 2 to June 26, 2026 — and participates in the season.

Gold Reserve for 17

In State F, there are two commercial banks operating:
— Commercial Bank of Standoff – the bank enables sending and receiving international transfers via SWIFT.
— First Partner Bank – provides DBO (Digital Banking Online) for individuals and businesses.
 
Domains: cbs.stf, fpb.stf

cbs.stf
External perimeter: 10.124.0.128/26
Internal perimeter: 10.154.4.0/23
Out of scope:
Router gateways: 10.124.0.129-130, 10.124.0.161, 10.154.4.129, 10.154.4.161
SC USERS, SC SERVERS subnets: 10.154.4.32/27, 10.154.4.0/27

fpb.stf
External perimeter: 10.124.1.0/26
Internal perimeter: 10.154.8.0/23
Router gateways: 10.124.1.1-10.124.1.2, 10.124.1.33, 10.154.8.65, 10.154.8.97
SC USERS, SC SERVERS subnets: 10.154.8.32/27, 10.154.8.0/27

To access the cyberrange, set up a VPN connection following the instructions provided in the <a href="https://range.standoff365.com/battle/5?section=report&tab=accessAndResources">"Access and resources"</a>. 
 
Important notes on this cyberrange segment:
1. Hosts come in different difficulty levels, ranging from beginner-friendly to expert-level.
2. The main goal is to trigger critical events. You can also find and report vulnerabilities on some hosts.
3. Triggering a critical event will bring you points. The higher the difficulty level, the more points up for grabs. Your performance will count towards your Standoff Cyberrange ranking.




**F.A.Q.**
Q: When accessing web hosts, I get a 404 error. What should I do?
A: Web resources are available via DNS names. Make sure you're using the correct address.

Industry

Season 2: System Breach

Gold Reserve for 17

Results