1 · Reconnaissance
Attackers scrape LinkedIn and your company site for employee emails and tech stack. What helps most?
Tips for the defense quiz
Think like a defender: detect, contain, and reduce blast radius.
Wrong answers still teach — read the explanation before moving on.
These scenarios are educational only — never attack systems you do not own.
Map each stage to a control you can actually enable at work or home.
Repeat after a week to keep the attack-chain habit.
An educational story, not a hacking lab
The simulator walks through how an incident can unfold so defenders recognize the pattern. It does not scan networks, exploit hosts, or issue payloads.
Use it to talk about detection and backups. Using the ideas against systems you do not own is illegal.
Hack simulator FAQ
Does this attack a real machine?
No. There is no target field and no exploit code. It is a narrative / quiz.
Can I practice pentesting here?
Not in the offensive sense. For labs, use systems you own or a legal range. This page is awareness.
Is anything sent to a C2?
No. The whole flow stays in the browser.