hub / talents
← hub

Talent Tree

Every hunt you clean-clear lights a red node. Every rule you forge that actually works lights a blue node. The purple convergence node between them only lights when both sides of that pair are real — no spending points, no shortcuts. This is a live read of your actual progress.

0 offense0 defense0 convergence0/4 bosses down
VANGUARD · NETWORK & TRAFFIC

You read the wire. Who talked to whom, how often, over what, and to where.

0/15 labs forged in your own discipline. The rest of the world is still yours to clear — those attacks simply do not play to your strengths, so nothing is off limits there.

Web App Wilds · Lv 1–10

Footprint Wisp
Recon & Enumeration
IDOR Imp
Broken Access Control / IDOR
Reflection Wraith
Reflected XSS
Injector Serpent
SQL Injection
Session Snatcher
JWT / Session Forgery
Gatecrasher
Server-Side Request Forgery
Log4Shell Revenant
Remote Code Execution via JNDI Injection — region boss

AD Kingdom · Lv 8–16

Null Session Herald
Anonymous LDAP Enumeration
Kerberoast Wyrm
Kerberoasting (TGS-REP)
AS-REP Revenant
AS-REP Roasting
Pass-the-Hash Shade
NTLM Credential Replay
Delegation Djinn
Constrained Delegation Abuse
Golden Ticket Lich
Kerberos TGT Forgery
DCSync Dominion
Directory Replication Abuse (DCSync) — region boss

Cloud Highlands · Lv 16–26

Bucket Wisp
Publicly Readable Storage Bucket
Privilege Drifter
IAM Self Privilege Escalation
Metadata Wraith
Cloud Instance Metadata SSRF
Cage Breaker
Container Escape via Exposed Docker Socket
Function Ghost
Serverless Command Injection
Pipeline Wyrm
Poisoned Pipeline Execution (CI/CD)
The Sky Breach
Cascading Cloud Privilege Escalation to Mass Exfiltration — region boss

IoT Marches · Lv 24–34

Default Wisp
Default Credential Access
Flash Ghoul
Firmware Extraction & Hardcoded Backdoor Key
Broadcast Wyrm
Unauthenticated MQTT Broker Access
Static Specter
BLE Static Pairing Key Reuse
Swarm Herald
IoT Botnet Recruitment (Loader Execution)
Debug Wraith
UART Bootloader Authentication Bypass
The Mirai Colossus
Coordinated IoT Botnet DDoS (Mirai/Dyn-style) — region boss
Convergence Mastery
Lights when every built region is cleared on both sides