red onboarding

Get on the range in five minutes.

To attack the shared domain you connect over a small, locked-down VPN called WireGuard. No experience needed — download a file, click one button, done. Here’s every step.

01

Get your config file

Sign in, open the Arena, and click Attack. A “connect your box” panel appears — hit Download WireGuard config. You’ll get a small file called duelsec-arena.conf. That file is your key in; don’t share it.

02

Install WireGuard

WireGuard is a free app. Grab it for your device — it takes about a minute:

03

Load your config into WireGuard

Open WireGuard and add a tunnel:
Windows/macOS: click Import tunnel(s) from file and pick your duelsec-arena.conf.
Phone: tap +Import from file or archive (or scan — but file is easiest).
Linux (terminal): sudo cp duelsec-arena.conf /etc/wireguard/ && sudo wg-quick up duelsec-arena

04

Turn it on

Click Activate (desktop) or flip the toggle (phone). That’s it — you’re connected. Your normal internet keeps working: this tunnel only routes to the game targets, nothing else. Nothing on your machine is exposed to the range.

05

Check it worked

The Arena shows your targets right under the Download button — each with a name and IP (e.g. the domain controller). No need to dig through the file. Confirm you can reach the domain controller — e.g. ping <its-IP> or point your tools at it. If it answers, you’re in.

06

Go attack

Bring your own Kali box or tools over the tunnel and work the domain — enumerate, kerberoast, whatever your plan is. Everything you do is scored live and attributed to you on the board. When you’re done, just Deactivate the tunnel.

common questions

Is this safe for my computer?

Yes. The config is split-tunnel and locked down — it can only reach the two lab targets, never your own machine and never the wider internet through the tunnel. The server also blocks the tunnel from reaching anything but the targets.

Do I need to be a hacker?

No. If you can download a file and click one button in an app, you can connect. What you do after that is up to you — pick Defend instead if you’d rather hunt the attackers from the browser (no VPN needed for blue).

It says “handshake” but nothing works.

Deactivate and reactivate the tunnel. Make sure you imported the newest config (each download is single-use per session). Still stuck? Re-download a fresh config from the Arena.

Can I stay connected between rounds?

Yes — leave the tunnel up. The domain resets between rounds automatically; you don’t need to reconnect.