--- title: Let's play Backdoors and Breaches description: If you want to find out how a D20 can help you level up your cyber security knowledge, learn to play Backdoors and Breaches! image: https://growing-excellence.tech/hubfs/Milena-Backdoors-and-Breaches-small.jpg --- [Skip to content](https://growing-excellence.tech/blog/lets-play-backdoors-and-breaches#main-content) ![customcolor\_logo\_customcolor\_background-2](https://growing-excellence.tech/hs-fs/hubfs/customcolor_logo_customcolor_background-2.png?width=800&height=200&name=customcolor_logo_customcolor_background-2.png) - [Home](https://growing-excellence.tech/) Show submenu for Home - [Blog](https://growing-excellence.tech/blog) - [Contact](https://growing-excellence.tech/get-in-touch) - [About](https://growing-excellence.tech/about) - Services Show submenu for Services - [Leadership Mentoring](https://growing-excellence.tech/leadership-consulting) - [Technical Excellence Workshops](https://growing-excellence.tech/technical-excellence) - [On-the-Job Training](https://growing-excellence.tech/on-the-job-training) - Events Show submenu for Events - [Calendar](https://growing-excellence.tech/events) - [Leadership Lab](https://growing-excellence.tech/leadership-lab) - [Leadership Academy](https://growing-excellence.tech/leadership-academy) - [Legal](https://growing-excellence.tech/legal) Open main navigation Close main navigation - [Home](https://growing-excellence.tech/) Show submenu for Home - [Blog](https://growing-excellence.tech/blog) - [Contact](https://growing-excellence.tech/get-in-touch) - [About](https://growing-excellence.tech/about) - Services Show submenu for Services - [Leadership Mentoring](https://growing-excellence.tech/leadership-consulting) - [Technical Excellence Workshops](https://growing-excellence.tech/technical-excellence) - [On-the-Job Training](https://growing-excellence.tech/on-the-job-training) - Events Show submenu for Events - [Calendar](https://growing-excellence.tech/events) - [Leadership Lab](https://growing-excellence.tech/leadership-lab) - [Leadership Academy](https://growing-excellence.tech/leadership-academy) - [Legal](https://growing-excellence.tech/legal) Oct 9, 2026, 10:17:48 AM # Let's play Backdoors and Breaches ![Picture of Milena-Mercedes May](https://growing-excellence.tech/hs-fs/hubfs/DSC06293%201-1.jpg?width=50&name=DSC06293%201-1.jpg) [Milena-Mercedes May](https://growing-excellence.tech/blog/author/milena-mercedes-may) Share: [facebook-f icon](http://www.facebook.com/share.php?u=https://growing-excellence.tech/blog/lets-play-backdoors-and-breaches) [linkedin-in icon](http://www.linkedin.com/shareArticle?mini=true&url=https://growing-excellence.tech/blog/lets-play-backdoors-and-breaches) [Twitter icon](https://twitter.com/intent/tweet?url=https://growing-excellence.tech/blog/lets-play-backdoors-and-breaches) [pinterest-p icon](http://pinterest.com/pin/create/link/?url=https://growing-excellence.tech/blog/lets-play-backdoors-and-breaches) [envelope icon](mailto:?body=https://growing-excellence.tech/blog/lets-play-backdoors-and-breaches) Getting into Cyber Security, I recently discovered this game at the [Elbsides](https://www.elbsides.eu/) conference in Hamburg. It's a table top exercise inspired by Dungeons and Dragons: a fun and lightweight activity that sparks conversations around cyber security defense. Every scenario is unique as the participants‘ knowledge shapes this experience. There are seats for 7 players. You play as a team with a constraint number of actions. If you discover the whole kill chain of the attack before you run out of actions — you win. ![Milena-Backdoors-and-Breaches-small](https://growing-excellence.tech/hs-fs/hubfs/Milena-Backdoors-and-Breaches-small.jpg?width=400&height=400&name=Milena-Backdoors-and-Breaches-small.jpg) # Play BnB onsite Get the [visual guide](https://www.blackhillsinfosec.com/uploads/media/backdoors-breaches/documents/bnb-visualguide-v2-03052024-4cc1117c055748cdb2d67dd08edf980d.pdf) to understand the game. [Purchase the decks](https://spearphish-general-store.myshopify.com/collections/backdoors-breaches-incident-response-card-game) (minimum: the Core Deck) and a D20. For non-profit usage, like teaching students, they also offer to send materials for free – reach out to them. I also recommend having three different markers ready to model the 3-round-cooldown of a recently used procedure. Explain the game to the players and get started. If the group you want to work with exceeds 7 people, split them into participants and spectators and run multiple sessions, switching these roles. # Play BnB online ## Option 1: conversational workshop Get the [visual guide](https://www.blackhillsinfosec.com/uploads/media/backdoors-breaches/documents/bnb-visualguide-v2-03052024-4cc1117c055748cdb2d67dd08edf980d.pdf) to understand the game. Download the [Procedure Cards of the deck used](https://github.com/blackhillsinfosec/play.backdoorsandbreaches.com/tree/ICS-OT-V1.1/play.backdoorsandbreaches.com-Engine-V1/App/decks/CoreV1) and collate them into a single PDF to be shared with the player. Thus, they get a better overview of the available procedures. [Here is a collection I compiled, containing all V3.1 Procedures.](https://drive.google.com/file/d/1KBMbOdja6fcbHLKS-sH3lKKxS9tyo4WM/view?usp=sharing) Create a scenario with [https://play.backdoorsandbreaches.com/](https://play.backdoorsandbreaches.com/) Get familiar with this game toolbox. It's not completely automated so you have to understand the game mechanics to use it well. Open the solution by clicking the button "Solution" in the bottom right corner and screenshot it as a secret reference for yourself as the Incident Captain. Hide the solution before screensharing by clicking the button again. Open a video conference. Share your screen of the game setup. Share the PDF with the Procudure Cards you created. Explain the game to the players and get started. If the group you want to work with exceeds 7 people, split them into participants and spectators and run multiple sessions, switching these roles. ## Option 2: competitive game You can also register at [https://home.backdoorsandbreaches.com/](https://home.backdoorsandbreaches.com/) to play this game competitively, led by a game engine. --- Kudos to [Black Hills Information Security](https://www.blackhillsinfosec.com/) and [Antisyphon Training](https://www.antisyphontraining.com/) for creating this game to advance our cyber security skills – playfully.   [![Milena-Mercedes May - growing-excellence.tech](https://growing-excellence.tech/hs-fs/hubfs/customcolor_logo_customcolor_background-2.png?width=500&height=125&name=customcolor_logo_customcolor_background-2.png "Milena-Mercedes May - growing-excellence.tech")](https://growing-excellence.tech/) [linkedin-in icon](https://www.linkedin.com/in/milena-mercedes-may-027a15157/) [Follow us on Facebook](https://www.xing.com/profile/MilenaMercedes_May/cv) Copyright © 2026, Milena-Mercedes May – growing-excellence.tech [Imprint](https://growing-excellence.tech/imprint) | [Privacy Notice](https://growing-excellence.tech/privacy-notice) | [milena@growing-excellence.tech](mailto:milena@growing-excellence.tech) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Milena-Mercedes May", "url" : "https://growing-excellence.tech/blog/author/milena-mercedes-may" }, "dateModified" : "2026-10-09T08:17:48.141Z", "datePublished" : "2026-10-09T08:17:48.000Z", "headline" : "Let's play Backdoors and Breaches", "image" : [ "https://growing-excellence.tech/hubfs/Milena-Backdoors-and-Breaches-small.jpg" ], "mainEntityOfPage" : { "@id" : "https://growing-excellence.tech/blog/lets-play-backdoors-and-breaches", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://growing-excellence.tech/hubfs/Logo-for-Google.png" }, "name" : "Milena-Mercedes May - growing-excellence.tech" } } ```