To attack the shared domain you connect over a small, locked-down VPN called WireGuard. No experience needed — download a file, click one button, done. Here’s every step.
Sign in, open the Arena, and click Attack. A “connect your box” panel appears — hit Download WireGuard config. You’ll get a small file called duelsec-arena.conf. That file is your key in; don’t share it.
WireGuard is a free app. Grab it for your device — it takes about a minute:
Open WireGuard and add a tunnel:
• Windows/macOS: click Import tunnel(s) from file and pick your duelsec-arena.conf.
• Phone: tap + → Import from file or archive (or scan — but file is easiest).
• Linux (terminal): sudo cp duelsec-arena.conf /etc/wireguard/ && sudo wg-quick up duelsec-arena
Click Activate (desktop) or flip the toggle (phone). That’s it — you’re connected. Your normal internet keeps working: this tunnel only routes to the game targets, nothing else. Nothing on your machine is exposed to the range.
The Arena shows your targets right under the Download button — each with a name and IP (e.g. the domain controller). No need to dig through the file. Confirm you can reach the domain controller — e.g. ping <its-IP> or point your tools at it. If it answers, you’re in.
Bring your own Kali box or tools over the tunnel and work the domain — enumerate, kerberoast, whatever your plan is. Everything you do is scored live and attributed to you on the board. When you’re done, just Deactivate the tunnel.
Yes. The config is split-tunnel and locked down — it can only reach the two lab targets, never your own machine and never the wider internet through the tunnel. The server also blocks the tunnel from reaching anything but the targets.
No. If you can download a file and click one button in an app, you can connect. What you do after that is up to you — pick Defend instead if you’d rather hunt the attackers from the browser (no VPN needed for blue).
Deactivate and reactivate the tunnel. Make sure you imported the newest config (each download is single-use per session). Still stuck? Re-download a fresh config from the Arena.
Yes — leave the tunnel up. The domain resets between rounds automatically; you don’t need to reconnect.