The operators behind Ludus

{/* Diagonal "deploy scan" band */}

{/* Frame brackets */} {/* Top tech label */}

// BAD SECTOR LABS

OPERATIONAL

{/* Center — wordmark */}

{/* Bottom strip */}

BAD SECTOR LABS · 2026

); } // ─── SLIDE 02 · WHOAMI ────────────────────────────────────────────── function PersonCard({ imgSrc, idTag, name, role, prev, focal = "center 20%" }) { return (

{/* Portrait */}

{imgSrc ? ( {name}

) : (

PHOTO · PLACEHOLDER

)} {/* scanline over photo */}

{/* gold HUD ring */}

{/* ID label top-left */}

@{idTag}

{/* Info */}

{name}

{role}

PREVIOUSLY

{prev.map((p,i)=>(

▸ {p}

))}

); } function Slide02_Whoami() { return (

// WHOAMI The operators behind Ludus

); } // ─── SLIDE 03 · HAS THIS BEEN YOU? ─────────────────────────────────── // ─── SHARED · OPERATOR'S NIGHT HUD ───────────────────────────────── // The 4-beat problem sequence (slides 3-6) shares a narrative chrome: // • clock stamp (top-right) advancing through the night // • RISK meter (top, under chrome) rising from LOW → CRITICAL // • consistent BEAT label ("BEAT 01/04") for continuity function NightHUD({ beat, clock, t, risk, riskLabel, riskColor = CRIMSON }) { // risk: 0..1 const segs = 16; const lit = Math.round(segs * risk); return (

BEAT {beat}/05 │ OPERATOR'S NIGHT

RISK

{Array.from({length: segs}, (_, i) => { const on = i < lit; const c = i < 5 ? "#7a8a6a" : i < 10 ? GOLD : CRIMSON; return ( ); })}

{riskLabel}

T+ {t} │ {clock}

); } // ─── SLIDE 03 · HAS THIS BEEN YOU? ─────────────────────────────────── // Beat 1 — the setup. One question, one image. No sales copy. function Slide03_HasThisBeenYou() { return (

{/* Full-bleed hero image */} Late-night lab builder

{/* Scanlines */}

{/* Left-side vignette for text legibility */}

{/* Bottom vignette */}

{/* The question — centered, hero type */}

SETUP

Has this
been you? _

{/* Subject stamp — bottom right of image */}

SUBJ · OPERATOR

); } // ─── SLIDE 04 · "THIS IS PERFECT!" ─────────────────────────────────── // Beat 2 — the mark bites. A PoC repo for a fresh CVE, one click from clone. function Slide04_ThisIsPerfect() { return ( {/* Spacer for NightHUD */}

"This is perfect!"

A fresh PoC drops for a CVE you're actively hunting. One git clone away.

{/* Stage: the repo screenshot, framed like an evidence photo */}

); } // ─── SLIDE 05 · DID YOU JUST YOLO *THAT* BINARY? ──────────────────── // Beat 3 — the realization. WannaCry as the cautionary specimen, news clippings as context. function Slide05_YoloBinary() { const clips = [ { src:"assets/news-google-tag.png" }, { src:"assets/news-nk.png" }, { src:"assets/news-darkreading.png" }, ]; return (

{/* Hero line */}

REALIZATION

Did you just YOLO{" "} that binary?

{/* Evidence row: WannaCry specimen (left) linked to news context (right) */}

{/* WannaCry — the specimen */}

SPECIMEN · WANNACRY · MAY 2017 200K+ HOSTS

{/* News clippings — the context */}

AND IT'S AIMED AT YOU

{clips.map((s, i) => (

))}

); } // ─── SLIDE 06 · RECEIPTS ───────────────────────────────────────────── // Beat 4 — the data. Three stats in a triangle: risk is real → growing → aimed at you. function Slide06_Receipts() { return (

RECEIPTS About <span style={{color: GOLD}}>that</span> binary…

{/* Triangle of stats — hero in the center, two supporting on the sides */}

{/* Stat 1 — supporting (left, lower visual weight) */}

GROWING

188%

YoY increase in malicious open-source packages

Sonatype logged 16,279 in Q2 2025 alone — 845,204 total since 2017.

{/* Stat 2 — HERO (center, dominant) */}

THE HEADLINE

1 in 10

PoC exploits on GitHub are malicious.

Leiden University analyzed 47,313 PoC repos — 10.3% contained Cobalt Strike beacons, infostealers, RATs, or hardcoded reverse shells.

{/* Stat 3 — supporting (right) */}

TARGETED

Polished
bait.

Late-2025 Webrat campaign used AI-generated READMEs on fake PoC repos to target "inexperienced security professionals and students."

Payload: backdoor + infostealer — creds, wallets, webcam, keylog.

{/* Kicker + sources */}

…and no way to tell which is which. Sources · Leiden / USENIX WOOT '25 · Sonatype Q2 '25 · Kaspersky Dec '25

); } // ─── SLIDE 07 · DID *YOU* JUST YOLO THAT BINARY? ──────────────────── // Beat 5 — the outcome. The pronoun flips. The inbox ping is the receipt. function Slide07_DidYouYolo() { return (

{/* The punchline — pronoun flipped */}

Did YOU just YOLO that binary?

😱

{/* The outcome — the client email, framed */}

INBOX · 04:29 MON · FROM THE CLIENT SUBJ: NETWORK OUTAGE — CALL ME

Email from angry client about network outage

); } // ─── SLIDE 07 · LAB/RANGE AUTOMATION TOOLS — THE LANDSCAPE ──────── function Slide08_Landscape() { const commercial = [ { name: "Immersive Labs", sub: "formerly Snap Labs" }, { name: "SimSpace", sub: "mostly DoD" }, { name: "Hack the Box", sub: "" }, { name: "Try Hack Me", sub: "" }, { name: "Pentester Lab", sub: "" }, ]; const openSource = [ { name: "Detection Lab", sub: "archived 2023-01-01", dead: true }, { name: "AutomatedLab", sub: "PowerShell / HyperV only" }, { name: "Game of AD (GOAD)", sub: "red-team focused" }, { name: "ADLab", sub: "vagrant / ansible" }, { name: "AD-Lab", sub: "PowerShell" }, ]; // Operator scorecard: does the camp meet this need? const needs = ["Realistic", "Extendable", "On-prem", "Multi-user"]; const commercialScore = [true, false, false, true ]; // cloud-first, closed const ossScore = [false, true, true, false]; // narrow, single-user const Entry = ({name, sub, dead}) => (

▸ {name}

{sub &&

{sub}

}

); const Scorecard = ({scores}) => (

OPERATOR NEEDS · MET?

{needs.map((n, i) => (

{n}

{scores[i] ? "✓" : "✗"}

))}

); return ( LANDSCAPE Lab & range automation — the field today

Two camps. Neither meets all four needs operators actually have.

{/* Needs strip — sets up the vocabulary the scorecards score against */}

// FOUR NEEDS

{needs.map((n, i) => (

{n}

{i < needs.length - 1 && (

)} ))}

{/* Commercial */}

CATEGORY A

Commercial

SaaS, closed, per-seat billing

{commercial.map((c,i)=>)}

{/* Open Source */}

CATEGORY B

Open Source

Community-maintained, narrow scope

{openSource.map((c,i)=>)}

); } Object.assign(window, { Slide01_Cover, Slide02_Whoami, Slide03_HasThisBeenYou, Slide04_ThisIsPerfect, Slide05_YoloBinary, Slide06_Receipts, Slide07_DidYouYolo, Slide08_Landscape, });