Scope of Hacking

Scope of Hacking

Cyber Range events by Security Innovation are intended to be used for training and awareness purposes. Getting to switch sides and become the attacker helps everyone in a modern organization to stay security minded. This is the place to test out the attacks you have learned about in our courses and labs. This is where you can be creative and try things that you have only read about and researched in theory up to now. This is also a fun place to challenge coworkers and peers to a friendly competition. However, there are some ground rules to keep this experience legal and safe for everyone.

Hacking Do’s
 --Only attack your own instance of your vulnerable website or cloud infrastructure (each website URL is unique to you as an individual player even if you are playing on a team, each server is unique to you if you are playing a cloud range.)

 --Use your resources – search engines are your friend as you learn and explore your target, the cheat sheet under Hacking 101 -> Guides is also very useful, reconnaissance on social media is fair game!

 --Think like an Attacker

Hacking Don’ts
 --Do Not give these vulnerable websites (or vulnerable cloud infrastructure) real information or any real data that an actual attacker could use. Don’t put in any real passwords or credit card info, etc.

 --Do Not try to attack social media, blogs, or any other websites aside from the purposely vulnerable target website you are attacking today. Please do not attack our scoring platform either, keep the attacks only to those sites that launch from the Ranges page when you click “Play”.

Bottom Line: Keep your hacking to the vulnerable target range that you will be introduced to. Avoid hacking any outside sources, including the cmdnctrl.net platform. Pay close attention to the instructions given to you at the event start time by your instructors or event organizers, they will tell you how to get started. If you are unsure whether something is in scope or not, please ask an event organizer or a support ninja.