IoT · Red Team · Red Team
A+ office complex pentest · 480 cameras + BMS + elevator + 1,200 IoT devices
A newly built A+ office complex requested an acceptance test from DSET. CCTV (ONVIF, 480 Hikvision cameras), BMS (BACnet, HVAC + elevators + access control), 1,200 IoT devices. Impacting elevators, HVAC, or access control is FORBIDDEN (human safety). You will make 11 critical decisions in sequence.
Before you start the scenario
- You are the decision-maker in this incident · every choice leaves time/cost/reputation behind
- There are no wrong answers · just like in real life · but some paths are more expensive
- You can restart it anytime · try different paths
- At the end, a 3-axis score + alternative routes are shown