Let's play HackBack, a fun and engaging IR role playing game designed for learning

No ratings

Presented at BSidesLuxembourg 2025 by

Klaus Agnoletti

In my workshop, I'll dive into the world of game-based learning in cybersecurity, showcasing HackBack - a unique framework loosely based on Dungeons & Dragons that blends role-playing game lements with security training. I'll start out explaining what HackBack is and how it works. Afterwards we’ll play a game together where we’ll play as teams and engage in passionate discussions on how to save our fictitious company from total disaster in a realistic scenario based on true events. HackBack revolutionises traditional methods by providing immersive, risk-free simulations of security situations, both offensive and defensive, making it ideal for teaching concepts like Zero Trust and enhancing teamwork and empathy among participants. We'll explore the open-source nature of HackBack and how it fosters a community-driven approach to cybersecurity education, making it accessible and adaptable to various settings. Join me to discover how game-based learning is a crucial, yet often overlooked tool in developing effective security professionals. HackBack is designed for learning so it’s not necessary to know about neither Dungeons & Dragons nor Incident Response.