TRAINING USE ONLY · v1.0.5
Operation Iron Veil
Cyber Protection Team 169
SSH
ssh YOUR_CALLSIGN@range-host -p 22
PASSWORD
Use the password you set when you verified your email.
Host key changed after a redeploy?
Clear the stale host entry, then reconnect:
ssh-keygen -R your-range-host
0/125COMPLETE
OPERATION IRON VEIL
OPERATION IRON VEIL · CYBER PROTECTION TEAM 169 · MDARNG
125
FLAGS
5
TIERS
17
NODES
8
NETWORKS
CCTC CURRICULUM FOUNDATION
169CPT-CCTCPrep curriculum↗ Army Cyber CoEFunctional Courses↗ CCTCOS Module↗ CCTCNetwork Module↗ CCTCSecurity Module↗
17C AIT · 170A WOBC · 17A RECLASS · CCT PIPELINE
TRAINING USE ONLY · v1.0.5
COMPETENCY BREAKDOWN
CPT 169
OPERATION IRON VEIL
CYBER PROTECTION TEAM 169 · DEFENSORES UMBRA
The cyber range built like the real network.
ACCESS RESTRICTED
operator@iron-veil: ~/access · ssh
MISSION ELEMENT LEAD ACCESS

ME Lead: authenticate to take operational oversight of your operators. The instructor dashboard surfaces per-operator tier progression, support requests, and intervention controls (flag override, password reset, manual unlocks).

Use this view to monitor operator health, unblock students stalled mid-tier, and coordinate ME tempo across the operation.

RANK
NAME
MISSION ELEMENT
ACCESS CODE
UNIT LEADERSHIP ACCESS

Unit leadership: authenticate to access the commander dashboard. Surfaces ME health at a glance: operator counts per tier, mission completion velocity, support volume, and operation-wide tempo against ENDEX.

Read-mostly view. Use it for operational reporting and to identify Mission Elements that may need additional support.

RANK
NAME
ROLE
ACCESS CODE
EMAIL
Any email works. We send a secure access link. At the link you verify your email, set a password, then build your operator profile: rank, callsign, mission element.
verify_email.txt
CHECK YOUR EMAIL

We sent a verification link to your email.

Open that email, click Verify my email, choose your password, and your account activates. The link expires in 24 hours.

No email after a few minutes? Check spam, or resend the verification link.

OPERATOR , ENTRY CHECKPOINT

Account active. The gate requires SSH access before your console unlocks. Follow these steps:

1
OPEN A TERMINAL
Windows: PowerShell, Command Prompt, or WSL. Mac / Linux: Terminal app.
2
CONNECT TO THE RANGE
--
Password: the one you set when you activated your account.
3
READ YOUR WELCOME FLAG
cat welcome_flag.txt
Copy the output that looks like IV{...}
4
SUBMIT THE ENTRY FLAG BELOW
Paste IV{...} in the field below to unlock the operations console.
CALLSIGN: --   OPERATOR: --
ENTRY FLAG, STEP 4
Not you? Log out / switch account
OPERATOR PROVISIONED

Your operator account is active. Establish initial foothold on the range entry point:

ssh YOUR_CALLSIGN@range-host
Password: ---
Save this password. It will not be shown again.
Ensure SSH is enabled on your machine. Need help?
Windows: Open PowerShell or Command Prompt. SSH is built-in on Windows 10+.
macOS/Linux: Open Terminal. SSH is pre-installed.
If SSH is not working: Windows: Settings → Apps → Optional Features → Add OpenSSH Client.
Port blocked? If your network blocks non-standard ports, try without -p (uses default port 22).

Once on the entry point, run ls and cat welcome_flag.txt for your full mission brief: adversary profile, tier arc, ROE, and your entry verification flag.

Paste the entry flag below to clear the gate and unlock the operations console. Reference: mission (next objective), mission-brief (operation overview).

ENTRY VERIFICATION FLAG
CALLSIGN OR EMAIL
PASSWORD
Sign in with your callsign or email and the password you set when you verified.
Have not verified your email yet? Resend the verification link.
Forgot your password? Email me a reset link.
EMAIL
mission-brief
operator@iron-veil:~$ mission-brief
# SITUATION

Threat group DARKWAVE-37 has established a multi-segment staging network as a launch platform for operations against critical infrastructure.

# MISSION

CPT 169 penetrates the network, maps it segment by segment, and captures intelligence flags at each stage to deny the adversary their staging ground.

# PROGRESSION · 25 flags / tier
T1 Reconnaissance
T2 Access & Enumeration
T3 Tunneling
T4 Exploitation
T5 Maneuver

Tradecraft escalates each tier; hints thin from generous in Tier 1 to minimal in Tiers 4 and 5.

operator@iron-veil:~$
ADVERSARY NETWORK // LIVE TRACE
ENTRYTARGET
Staff Access
INSTRUCTOR → COMMANDER →
125 FLAGS5 TIERS17 NODES8 NETWORKS
Built and managed by Opsyx Technologies LLC · for Cyber Protection Team 169 / MDARNG
TRAINING USE ONLY · v1.0.5
OPERATOR PROFILE
CYBER PROTECTION TEAM 169
OPERATOR
NAME
OPERATOR DETAILS
EMAIL LOGIN
Add an email and password so you can log back in by email, even if your rank or mission element changes later.
Email login enabled for
INFO Platform Update
MISSION BRIEF
OPERATION IRON VEIL · CPT 169

Welcome, operator. This console is your command center for Operation Iron Veil. You will work five mission tiers in order: Reconnaissance → Access & Enumeration → Tunneling → Exploitation → Maneuver, capturing an intelligence flag at each objective.

HOW IT WORKS
  • Objectives unlock one at a time, solve the current one to advance.
  • Connect to the range from the ACCESS TERMINAL (top-right) and SSH in with your registered password.
  • Each tier opens with a short briefing of its objectives.
  • Hints are generous early and thin out in the later tiers.
  • Your profile (rank, element, work role) and progress are visible to your instructors and command for after-action review.

Set your work role any time from the OPERATOR menu → Profile. When you are ready, begin the mission.

TIER BRIEFING
Tier
RANGE FEEDBACK ×

Use this to report range issues, bugs, broken challenges, confusing content, or improvement ideas. This does not message instructors directly. Include your name and email so we can follow up with you.

HELP & REFERENCE ×
GETTING STARTED
1. Connect via telnet: telnet <host> 2323
2. Login: YOUR_CALLSIGN / your-password
3. Switch to SSH: ssh YOUR_CALLSIGN@<host> -p 22
4. Read the tunnel reference: cat /opt/iron_veil/tools/tunnel_ref.txt
SSH TUNNEL QUICK REFERENCE
# Local forward
ssh YOUR_CALLSIGN@host -p 22 -L local:target:port -NT

# SOCKS proxy
ssh YOUR_CALLSIGN@host -p 22 -D 1080 -NT
proxychains4 curl http://internal:port

# Reverse tunnel
ssh YOUR_CALLSIGN@host -p 22 -R port:localhost:port -NT

# ProxyJump
ssh -J admin@hop1 admin@target
COMMON ISSUES
Flag rejected? Flags are case-sensitive. Copy exactly as shown including IV{ and }.
Cannot reach a host? You need to build an SSH tunnel first. Check your routing.
Connection refused? Ports are non-standard. Scan the target with nmap first.
Tunnel not working? Ensure -N (no command) and -T (no terminal) flags are set.
SOCKS proxy failing? Verify proxychains4 config points to 127.0.0.1:1080.
Platform issue? Use the Feedback button to report bugs.
RANGE RULES
• Attempt each flag independently before using hints
• Document your tunnel chains as you build them
• Report broken containers or wrong flags via Feedback
• All attempts are logged for after-action review
• Do not share flag values with other students
🔐 FULL OPERATOR SHELL UNLOCKED
You have cleared the gate. One step before you continue: the SSH session you are in right now was opened before gate clearance, so it is still running the restricted pre-gate shell with a limited command set.
Reconnect to unlock your full toolkit:
# 1. Close your current session
exit

# 2. SSH back into the range (same command as before)
ssh YOUR_CALLSIGN@<host>
Your new session will have the full operator shell: ip, nmap, ssh, tunneling tools, and the rest of the kit. This only happens once, at the gate.
REQUEST SUPPORT ×
—
Your Mission Element Lead will be notified. The category + your last-active challenge auto-attach to the ticket so triage is fast.
SETTINGS
Manage your own training state. Destructive actions require typed confirmation.
Reset My Progress
Clears all your captured flags so you can run the range again from the start. Your account, profile, and login stay intact. Flag answers do not change.
Restart Current Tier
Clears only the current tier's captured flags and re-shows its briefing. Other tiers and your account are untouched.
Reset Environment soon
Rebuilds your SSH home directory and shell if your terminal gets into a broken state. Progress is kept.
Request Account Deactivation / Deletion
Sends a request to staff. Your account is not removed automatically — an instructor or commander reviews and actions it.
CHANGE PASSWORD ×
Updates your range account password. After submission, the Ghost provisioner re-applies it to your Linux account within ~10 seconds. Your existing SSH session stays valid; new connections use the new password.