How to play

Terminal Velocity is a turn-based, red-versus-blue cyber range. Two teams share one virtual network and trade moves until the attacker breaks in or the clock runs out.

The two teams

Every match pits a red team against a blue team on the same scenario network. Red plays the attacker: scanning, exploiting and pivoting toward the crown jewels. Blue plays the defender: patching, hardening and detecting intrusions before red gets there.

How a match works

A match runs in ticks. During a tick you type commands to queue actions; when the tick resolves, every queued action is applied at once and the results land in your terminal and event feed. Ticks keep advancing until red wins or the scenario reaches its tick limit.

How you win

RED Red wins the instant every red objective is achieved — typically establishing a foothold on key hosts and exfiltrating the target data.

BLUE If the tick deadline is reached without red completing its objectives, the higher score wins. Blue scores by keeping services up and detecting intrusions, so a solid defence wins at the buzzer. Equal scores are a draw.

Objectives are defined per scenario — for example ESTABLISH_FOOTHOLD and EXFILTRATE for red, MAINTAIN_UPTIME and DETECT_INTRUSION for blue — each worth a set number of points.

A match, tick by tick

Red and blue play the Community Bank scenario at the same time. Watch red probe, fail, adapt and break through while blue patches, hardens and watches the SIEM light up. Every command and message is exactly what the live consoles show.

Tick —

red-team — attacker

blue-team — defender

Command cheat sheet

Command	What it does
Red (attacker)
`port-scan`	Scan a host for open ports and reachable services.
`service-enum`	Fingerprint a service to learn its product and version.
`exploit`	Attack a vulnerable service to gain a foothold.
`priv-esc`	Escalate to root on a host you hold and loot credentials.
`lateral-move`	Pivot from a compromised host to a neighbouring one.
`exfiltrate`	Steal data from a rooted host to complete the objective.
Blue (defender)
`patch`	Close a known vulnerability on a service.
`harden`	Apply generic hardening to a host.
`deploy-ids`	Deploy intrusion detection across a network segment.
Shared
`status`	Show match state, tick, score and queued actions.
`queue`	List the actions you have queued for this tick.
`help`	List commands, or run help <verb> for usage.

Back to start