Most hacking games give you a minigame that stands in for hacking. This one
gives you a terminal.
You work inside a simulated Linux desktop — a real command set with pipes and
SSH session stacking, a browser with working View Source, a mail client, a
network scanner, a forensics kit. To get into a company you find their forgotten
login page yourself, read the markup, spot the unsanitised query a developer left
in a comment, and write the SQL injection. Then an IDOR on a document viewer that
never checks who's asking.
Nothing hands you the payload. The cheat sheet in the player's home directory
is opt-in and deliberately the only place in the game those strings exist.
And all of it is loud. An intrusion-detection meter tracks the noise you make
on every host you touch, and the defending AI escalates as it climbs — tearing
your screen, typing at you directly, editing your in-game notebook while you're
reading it, throwing you off hosts mid-session.
The meter cools on a wall clock, so going quiet and waiting is a real tactic
rather than a menu option. Patience is a mechanic.
The angle for a security audience: every technique maps to a real-world
concept, and the exploits behave the way their real equivalents do. It is built
to be genuinely challenging for people who do this professionally and genuinely
teachable for people who are learning it.
