How it works

Foe: Breach Spider, a security hole an attacker could use.

Breach Spider

1. Breach Spider

   The Breach Spider blocks the way.

   What really happensIt stands for a security hole an attacker could use.

   Rogue: Context 100/100.

2. Exploit

   The spider strikes through a gap nobody guarded. Its bite lingers.

   What really happensAn attacker gets in through a hole nobody checked, and the harm spreads until it is patched.

   Rogue takes 11. Rogue: Context 89/100. Rogue: Poison.

3. Trail of Bits Sharp Edges

   The hero takes up the relic before reading the blueprints.

   What really happensThe skill triggers on API design reviews, configuration schemas and crypto library ergonomics. You can also start the sharp-edges-analyzer agent.

   Breach Spider takes 18.

4. Trail of Bits Sharp Edges

   Three schemers test every lever of the keep.

   What really happensIt asks whether an attacker can turn security off through configuration, whether the first example copies into insecure code, and whether parameters can be swapped.

   Breach Spider takes 15.

5. Exploit

   The Breach Spider uses Exploit.

   Rogue takes 11. Rogue: Context 78/100.

6. Trail of Bits Sharp Edges

   Each trap is sorted by the hand that would spring it.

   What really happensFindings fall into six categories, among them algorithm selection such as JWT alg none, dangerous defaults, configuration cliffs and silent failures.

   Breach Spider takes 36.

7. Trail of Bits Sharp Edges

   The spider loses the gaps it was waiting for.

   What really happensYou get the misuse-prone spots, judged against one rule: secure usage should be the path of least resistance.

   Breach Spider takes 31. Breach Spider falls.

8. Victory

   The Breach Spider falls.