BLACKSITE/Kill Chain
UPTIME 00:00UTC --:--:--

Kill Chain

Engagement progression through the seven intrusion phases. Advances as targets are compromised across the operation.

PHASE 03 // LIVE
STAGE 01
Reconnaissance
passive osint · subdomain enum · port sweep
complete
STAGE 02
Weaponization
payload crafted · loader packed · evasion baked
complete
STAGE 03
Delivery
spear-phish dispatched · watering-hole armed
running
STAGE 04
Exploitation
CVE-2024-XXXX triggered · code exec gained
pending
STAGE 05
Installation
implant persisted · scheduled task planted
pending
STAGE 06
Command & Control
beacon online · 41ms · 7-hop onion
pending
STAGE 07
Actions / Exfil
domain owned · 8.4GB staged for pull
pending
Phase Notesdoctrine

The intrusion kill chain models an operation as a sequence of dependent phases. Breaking any single link disrupts the whole chain — which is exactly why defenders map it.

This view is a stylized, fabricated walkthrough. No real targets, payloads, or systems are involved.