Backdoors & Breaches is a card game created by Black Hills Information Security designed to help facilitate infosec tabletop exercises. This repo is an online version of the game that allows for remote play through the site playingcards.io. If you play the playingcards.io version of the game, please consider supporting the original creators by buying a deck at backdoorsandbreaches.com.
Instructions for how to play can be found here.
To start a new game you first have to create a new room:
- Download the backdoors-and-breaches.pcio file from this repo
- Go to playingcards.io, click "Custom Room", then on the next page click "Start Blank Room", then "Enter" when prompted
- Now go into edit mode by clicking the briefcase-looking icon in the upper left
Note: on smaller screens it may be in the lower left corner.
- A drawer should open from the bottom of the screen (click the drawer tab to open it if its closed)
- Click "Room Options", then "IMPORT FROM FILE", and select the .pcio you downloaded.
- Once the upload finishes the part that says "Uploaded Image ##/##" will then say "Complete!". The room should then look like this:
- Finally click the edit button again to get back into the play view. You are now ready to play!
One thing to be aware of is that the upload process sometimes hangs on the last image being uploaded for several minutes. We recommend setting up new rooms for tabletop excerises well in advance to prevent this from causing delays.
To start a new game, simply click the "New Game" button. To reset the room to its starting configuration click "Reset". The spinner replaces the d20 for the game, and the counters on the right are used to track the current turn and number of consecutive failed procedures.
Pressing the "New Game" button will recall all the cards to their decks and shuffle them. It will also reset the counters. It will then distribute the procedure cards out and give the Incident Master their hand.
To invite players to your room simply share the URL. Each player has their own view of the table. You can see other player's cursors as colored circles moving around the screen.
Be warned, anyone with the URL for your room can join, there's no limit to the number of players that can be in a room, and there's no way to kick someone out of your room. We recommend creating a new room for each play session to avoid issues with lingering players and leaked links.
Cards are moved by clicking and dragging. To move an entire stack of cards, click and drag on the number in the upper left of the stack.
Each player has a section on the bottom of the screen that is their "hand". Cards that a player drags there disappear from the table and are only visiable to them. The only player that needs to use their hand is the Incident Master who uses it to hold their attack cards.
To flip cards simply click on them.
To rotate a card, hold right-click and hold on a card, then select its orientation. For this board only procedure cards can be rotated.
If a player hovers their mouse over a card, an enlarged version of that card will be shown to them. Enlarged cards are only shown to the user hovering, not to other players. Note that this functionality doesn't seem to work well on touch screens.
Rooms are automatically removed after 15 days of inactivity. If you would like to remove a room you've created sooner go into the edit view > Room Options > click the "DELETE" button.