Hack infrastructures and mix different attack vectors to establish yourself in the community and get to the top of the leaderboard

State F's leading companies from various industries are holding open house days at their facilities.
 
Take the chance to cause critical events from past Standoff cyberbattles, enhance your skills, and ultimately improve the security of State F. Each cyberrange segment features unique risk scenarios of varying complexity.

Hack infrastructures and mix different attack vectors to establish yourself in the community and get to the top of the leaderboard.

To access the cyberrange, set up a VPN connection following the instructions provided in the ["Access and resources"](https://range.standoff365.com/battle/5?section=report&tab=accessAndResources)

Online cyberrange for professionals

Earn points by finding vulnerabilities in systems. Points are awarded separately for each system, and you can report only one vulnerability of each type per system.

Standoff Standalone is a new cyberrange segment, featuring standalone hosts with unique configurations and multiple vulnerabilities. The hosts represent different industries of the virtual State F so you can hone your hacking skills using various attack tools and techniques.
 
Level up by triggering critical events of varying difficulty. Some of them may be familiar to you from Standoff cyberbattles, but others are brand-new.
 
Scope
The scope comprises the following hosts:
• rnd.standalone.stf, 10.124.249.5
• casino.standalone.stf, 10.124.249.6
• tube.standalone.stf, 10.124.249.7
• city.standalone.stf, 10.124.249.8
• corp-wiki.standalone.stf, 10.124.249.9
• fastship.standalone.stf, 10.124.249.10
• techcongress.standalone.stf, 10.124.249.11
• carbon.standalone.stf, 10.124.249.4
 
Important notes on Standoff Standalone:
1. Hosts come in different difficulty levels, ranging from beginner-friendly to expert-level.
2. The main goal is to exploit vulnerabilities and trigger critical events. Each host may contain one or more flags (for both types of tasks).
3. Triggering a critical event will bring you points. The higher the difficulty level of the host, the more points up for grabs. Your performance will count towards your Standoff Cyberrange ranking.
4. Windows host domain names may be different from those specified in the critical event name.

Standoff Standalone

State F is famous for its metal industry. Metal&Tech, an integrated steel mill, produces cast iron and high-quality steel used in construction and car manufacturing. Its products are also used by metal-intensive industries, including mining and power generation.
 
**Scope**
External perimeter: 10.124.0.0/26
Internal perimeter: 10.154.0.0/23
Domain: metaltech.stf

To perform phishing attacks and penetrate the intranet, use mail server (accessible via the web). Using your own SMTP servers may lead to problems with receiving the reverse shell.
 
To access the cyberrange, set up a VPN connection following the instructions provided in the <a href="https://range.standoff365.com/battle/5?section=report&tab=accessAndResources">"Access and resources"</a>. 
 
Important notes on this cyberrange segment:
1. Hosts come in different difficulty levels, ranging from beginner-friendly to expert-level.
2. The main goal is to trigger critical events. You can also find and report vulnerabilities on some hosts.
3. Triggering a critical event will bring you points. The higher the difficulty level, the more points up for grabs. Your performance will count towards your Standoff Cyberrange ranking.

Metal&Tech

The Central Bank of Standoff is State F's financial regulator and supervisor. Consumer financial services are provided by three commercial banks:
— Commercial Bank of Standoff. Offers international money transfers via SWIFTNet.
— First Partner Bank. Supports QR code payments in its mobile app.
— Global Digital Bank. Provides services exclusively online, without brick-and-mortar locations or tellers.
 
**Scope**
External perimeter:
10.124.0.128/26
10.124.0.192/26
10.124.1.0/26
10.124.1.64/26
Domains: cbs.stf, cb.stf, fpb.stf, gdb.stf

To access the cyberrange, set up a VPN connection following the instructions provided in the <a href="https://range.standoff365.com/battle/5?section=report&tab=accessAndResources">"Access and resources"</a>. 
 
Important notes on this cyberrange segment:
1. Hosts come in different difficulty levels, ranging from beginner-friendly to expert-level.
2. The main goal is to trigger critical events. You can also find and report vulnerabilities on some hosts.
3. Triggering a critical event will bring you points. The higher the difficulty level, the more points up for grabs. Your performance will count towards your Standoff Cyberrange ranking.

Banking system

NetFusionPro is State F's leading IT giant, integrator, and internet and hosting provider. It develops and offers turnkey solutions used by the country's top organizations. The company adheres to the principles of secure development.

**Scope**
Outer perimeter: 10.124.0.64/26
Inner perimeter: 10.154.2.0/23
Domain: netfusion.stf

To perform phishing attacks and penetrate the intranet, use mail server (accessible via the web). Using your own SMTP servers may lead to problems with receiving the reverse shell.
 
To access the cyberrange, set up a VPN connection following the instructions provided in the <a href="https://range.standoff365.com/battle/5?section=report&tab=accessAndResources">"Access and resources"</a>. 
 
Important notes on this cyberrange segment:
1. Hosts come in different difficulty levels, ranging from beginner-friendly to expert-level.
2. The main goal is to trigger critical events. You can also find and report vulnerabilities on some hosts.
3. Triggering a critical event will bring you points. The higher the difficulty level, the more points up for grabs. Your performance will count towards your Standoff Cyberrange ranking.

NetFusionPro

HighTechEnergy is one of the biggest players in State F. It provides electricity transmission and distribution services and operates hydroelectric, solar, and thermal power facilities. The company's main objective is to ensure a reliable and good-quality power supply to consumers, which is why security is one of its top priorities.

**Scope**
External perimeter: 10.124.1.128/26
Domain: hte.stf

To perform phishing attacks and penetrate the intranet, use mail server 10.127.2.170 (accessible via the web). Using your own SMTP servers may lead to problems with receiving the reverse shell.

To access the cyberrange, set up a VPN connection following the instructions provided in the <a href="https://range.standoff365.com/battle/5?section=report&tab=accessAndResources">"Access and resources"</a>. 
 
Important notes on this cyberrange segment:
1. Hosts come in different difficulty levels, ranging from beginner-friendly to expert-level.
2. The main goal is to trigger critical events. You can also find and report vulnerabilities on some hosts.
3. Triggering a critical event will bring you points. The higher the difficulty level, the more points up for grabs. Your performance will count towards your Standoff Cyberrange ranking.

Online cyberrange for professionals

Leaderboard of solo attackers