Dungeons and Daemons
Roll for Initiative. Hack the Planet.
Dungeons & Daemons is a cybersecurity RPG that drops you into the boots of a Red Team operator on a live engagement. Your mission: infiltrate a corporate facility, compromise the domain, exfiltrate the target data, and vanish—all before the clock runs out.
No simulations, no slides, just you, a D20, your backpack, and 30 minutes to prove you belong on the Red Team.
The Mission
AcmeCorp thinks their security is airtight, from physical access controls to network monitoring, a hardened Active Directory environment, and an isolated mainframe protecting their most sensitive asset. In this mission, you strategically navigate the environment and play your TTPs to avoid detection and eviction.
Clone a badge or talk your way past the guard. Plant a rogue device in the server room or social engineer your way to an executive escort. Kerberoast the domain or poison the wire. Every decision burns resources, shifts your detection profile, and reshapes the mission.
There is no single path—there are dozens, and many of them end badly.
Choose Your Class
Pick from four (4) operator archetypes, each with a unique edge.
Characters:
- Exploit Mage - System attack specialist, +2 to system rolls, reduced hack cost on system techniques
- Packet Rogue - Network warfare expert, +2 to network rolls, moves quieter on the wire
- Social Knight - Human-layer operator, +2 to social rolls, smoother under pressure
- Intrusion Barbarian - Physical access specialist, +2 to physical rolls, brute-force entry with finesse
Your class shapes how you play, but the dice decide if you survive.
Elite TTPs
Every operator starts with a backpack of single-use exploit Cards: RFID cloners, lockpick shims, burner phones, and a few surprises. Play one at the right moment to bypass a roll, boost your odds, or bail yourself out of a bad situation. Once you burn a card, it’s gone.
Hack the Roll
Skill checks run on a D20, but this isn’t pure luck. When your roll comes up short, a Buffer Overflow meter kicks in: a moving target on a timing bar where you tap at the right moment to hack your own roll. Nail the green zone for +3. Clip yellow for +1. Miss and you get nothing. It’s part reflex, part nerve, and it can mean the difference between domain admin and game over.
The Stakes
Your Stealth bar is your lifeline; if you hit zero, the blue team finds you. Your Hack capacity fuels every technique and slowly regenerates; if you burn it too fast, you’re locked out when it matters most.
Mini-Games
Not every challenge is settled by the dice. Scattered throughout the mission are hands-on hacking mini-games, skill-based encounters that put your reflexes and pattern recognition to the test.
- Hash Cracker - Decode password hashes against the clock by matching character patterns before time runs out.
- Packet Sniffer - Intercept data packets flowing across the wire by tapping at exactly the right moment to capture them.
- Frogger Evasion - Navigate through a grid of patrolling guards and security cameras to reach your objective undetected.
Each mini-game appears at key decision points in the story. If you succeed, you advance with a tactical advantage, but if you fail, you'll feel the consequences—lost stealth, burned resources, or a harder path forward.
Consultant Mindset
Dungeons & Daemons was built by the team at TrustedSec—real attack paths and real techniques wrapped in a tabletop RPG you can play in your browser whether you’re warming up for an engagement, onboarding new operators, or just looking for something to play at the next conference. Join the TrustedSec Discord server, #dungeons-and-daemons, to chat with other players and stay informed of future updates.