CMD+CTRL
Cyber Range
An Unrivaled Authentic Environment for Hands-On Learning
Our CMD+CTRL virtual environments take engagement to a new level. A hands-on training platform using insecure software environments to hone security skills, our cyber ranges reflect the complexity and risk of today’s tech stacks: flawed design, defenseless code, and misconfigured deployments.
Think Like an Attacker
Using real applications, servers, traffic, technologies, and vulnerabilities, CMD+CTRL has over 500 challenges spanning application, platform, and business logic flaws. Players are tempted to steal money, escalate privilege, conduct a denial of service attack, disrupt workflows and more as they roam freely throughout the environments.
Assess Real World Skills
Your team has completed security training, but how do make sure these skills stick? Let them prove their skills against common threats and vulnerabilities in a real-world environment.
Automated Scoring and Leaderboards
Measures Team Security Proficiency
Turn Event Results Into Focused Training
Our AI-powered post-event reports help you understand your team’s strengths, identify skill gaps, and prioritize next steps. Clear summaries and targeted course and lab recommendations help you plan follow-up training based on demonstrated performance.
"Cyber Range events are unlike anything else out there"
The event itself is a masterpiece, where a lead instructor provides an introduction to the platform, as well as intermittent labs to help guide participants throughout the event. Other instructors are standing by to help people who are stuck or need some help.
Explore Our Gamified Ranges
CMD+CTRL Cyber Ranges are offered in multiple configurations that represent commonly deployed environments and vary in difficulty to support a progressive learning journey. Use CMD+CTRL as a practice range, to run competitive tournaments, or recruit new hires.
Ask about our popular on-site and remote events — our labs, hints, cheat sheets, user guides, and real-time support ensure a great experience for players at all levels.
Select a range to learn more about each unique experience.
Forescient
Step into the role of an enterprise IT engineer managing Azure infrastructure through a ticketing system. After receiving an encoded invitation to join a hacking group, follow an intelligent chatbot through realistic attacks involving cloud misconfigurations, exposed data, compromised access, and vulnerable applications.
Range Details
Skills Gained
- Analyze vulnerabilities in realistic cloud environments
- Understand the impact of insecure applications
- Restrict access to sensitive cloud data
- Exploit cloud application vulnerabilities
Challenge Coverage
Plus additional vulnerability types across the range.
Challenge Mix
Dark Money
Trace the Illumistrami’s laundered funds through a fully functional digital bank and its live prediction market, the Oracle. Exploit weaknesses across accounts, loans, payments, cards, and market activity to expose and shut down the operation.
Range Details
Skills Gained
- Analyze vulnerabilities in financial applications
- Understand business logic and access-control risks
- Protect accounts, loans, payments, and sensitive records
Challenge Coverage
Plus additional vulnerability types across the range.
Challenge Mix
Shadow Bank
Attack a cryptocurrency-friendly banking application where users can transfer money, request loans, trade stocks, and post to forums. Find and exploit weaknesses that expose data, bypass authorization, and enable fraudulent transactions.
Range Details
Skills Gained
- Recognize vulnerabilities in a realistic banking environment
- Understand the impact of insecure applications
- Restrict access to sensitive data
- Prevent fraudulent transactions
Challenge Coverage
Plus additional vulnerability types across the range.
Challenge Mix
Shadow Health
Join CRWD-CTRL to investigate a healthcare provider’s connection to the Illumistrami. Complete mission-based Bug Bounties across a fully functional health management portal to expose the operation and sabotage it from within.
Range Details
Skills Gained
- Recognize vulnerabilities in a realistic healthcare application
- Understand the impact of insecure applications
- Restrict access to sensitive health data
Challenge Coverage
Plus additional vulnerability types across the range.
Challenge Mix
AccountAll
Explore an HR platform with employee, manager, and administrator roles. Access payroll and performance data, escalate privileges, alter benefits and timesheets, and test whether sensitive workforce information is properly protected.
Range Details
Skills Gained
- Recognize vulnerabilities across multiple user roles
- Understand the impact of insecure HR applications
- Restrict access to sensitive employee data
Challenge Coverage
Plus additional vulnerability types across the range.
Challenge Mix
DigiExchange
Infiltrate a cryptocurrency exchange where users manage portfolios, identities, accounts, and transfers. Bypass authorization, impersonate users, execute fraudulent transactions, and work toward administrative control.
Range Details
Skills Gained
- Analyze vulnerabilities in a realistic exchange environment
- Understand the impact of insecure applications
- Use a web proxy to exploit weaknesses and access sensitive data
Challenge Coverage
Plus additional vulnerability types across the range.
Challenge Mix
InfiniCrate
Attack an AWS-native file storage application spanning 11 cloud services. Perform reconnaissance, abuse misconfigurations, gain unauthorized access, steal or modify code, and push changes through the CI/CD pipeline.
Range Details
Skills Gained
- Analyze vulnerabilities in realistic cloud environments
- Understand the impact of insecure applications
- Restrict access to sensitive data
- Exploit cloud vulnerabilities
Challenge Coverage
Plus additional vulnerability types across the range.
Challenge Mix
InstaFriends
Attack a social networking application where users create profiles, connect, message, post, review, and manage privacy. Manipulate other users’ content and settings, bypass authentication, and escalate to administrator privileges.
Range Details
Skills Gained
- Analyze vulnerabilities in a realistic social platform
- Understand the impact of insecure applications
- Restrict access to sensitive data
- Apply secure configuration practices
Challenge Coverage
Plus additional vulnerability types across the range.
Challenge Mix
LetSee
Attack a single-page marketplace with a strong focus on APIs and modern application technology. Take over accounts, sabotage competing stores, manipulate product rankings, and exploit authorization and cryptographic weaknesses.
Range Details
Skills Gained
- Analyze vulnerabilities in a realistic marketplace
- Understand the impact of insecure applications
- Restrict access to sensitive data
- Exploit API vulnerabilities
Challenge Coverage
Plus additional vulnerability types across the range.
Challenge Mix
MailJay
Penetrate a hybrid-cloud marketing automation platform spanning front-end and back-end services. Break through web applications, firewalls, enterprise networks, employee portals, and desktop users in CMD+CTRL’s most demanding range.
Range Details
Skills Gained
- Perform reconnaissance and lateral movement
- Evade defensive controls
- Establish persistence
- Recognize phishing and application risks
- Restrict access to sensitive data
Challenge Coverage
Plus additional vulnerability types across the range.
Challenge Mix
Shred Skateboards
Attack an ecommerce skateboard shop where users post reviews, manage credentials, share artwork, and purchase or redeem gift cards. Buy products in unintended ways, crack passwords, tamper with accounts, and steal data.
Range Details
Skills Gained
- Recognize vulnerabilities in a realistic ecommerce environment
- Understand the impact of insecure applications
- Restrict access to sensitive data
- Prevent fraudulent transactions
Challenge Coverage
Plus additional vulnerability types across the range.
Challenge Mix
The Gold Standard
Test a hardened banking application where users transfer money, convert funds into precious metals, request loans, and interact with bank officials. Think creatively to bypass poorly implemented mitigations and exploit the system.
Range Details
Skills Gained
- Recognize vulnerabilities in an advanced banking environment
- Understand the impact of insecure applications
- Restrict access to sensitive financial data
Challenge Coverage
Plus additional vulnerability types across the range.
Challenge Mix
Who Are Cyber Ranges For?
CMD+CTRL Cyber Ranges are designed to help cross-functional teams, including application developers, security engineers, and QA engineers, make their solutions less vulnerable to cyberattacks. Designed to provide insight into how connected software functions and fails with respect to security, each realistic Cyber Range environment presents an array of vulnerabilities to challenge learners.
Builders
Operators
Defenders
Ready To Try It Out?
Give your team a fun, interactive, gamified approach to training that includes missions, competitions, and leaderboards. Cyber ranges are commonly used in conjunction with related courses and labs to assess employee application security competency and maximize learning and collaboration.