BREACH.MMO v1.5.7 — Educational Overlays, OSINT, and Fix Sprint

This covers three patch releases that landed in rapid succession on May 8. Together they close the gap between "I ran the exploit" and "I know what I just did." The educational layer — the part that makes this a cybersecurity training tool and not just a hacking game — is now fully wired.

Educational overlay cards on every challenge

Complete any challenge and a card appears within half a second. It shows the technique name, a plain-English description of what you just did, and which certification domain it maps to (CEH, OSCP, or Security+). This was the core educational promise of BREACH.MMO from the beginning. It's now live on every challenge in the game.

OSINT terminal commands

The OSINT challenge — account enumeration, passive recon, open-source intelligence gathering — previously had no terminal entry point from the main game. osint search, osint enum, and osint submit are now wired and active. OSINT is a foundational skill in both CEH and OSCP; if you're starting from zero, it's a good first challenge.

Exploit action bar (hotkeys E / 1–4)

Red team players now have a dedicated action bar for launching exploits. Press E to open the exploit terminal directly, or use 1–4 to quick-launch specific categories. Previously this required navigating menus; now it's a hotkey away in the middle of a live match.

Scan results in planning panel

The planning phase now shows your recon scan output inline. Before committing to an exploit path, you can see what the scanner found — open ports, service banners, misconfig flags — without switching context. This maps to the reconnaissance phase of a real engagement: gather, analyze, then act.

Infrastructure and AD fixes (v1.5.5 – v1.5.6)

• web_rce now executes via the installed webshell (from file_upload) instead of misrouting to the deserialization handler
• Kerberoasting: kerberoast --list enumerates SPNs correctly; --target alias works
• AD Engine and TicketStore correctly initialized per match — fixes dcsync, asreproast, ptt, and golden_ticket returning "No AD domain available"
• IDS/Evasion: detection alerts now fire on evasion:activate; certDomains included in SIEM alert payload
• WebSocket: stale socket close handlers no longer tear down newer reconnecting sessions
• UI overlays (Research Tree, Campaign Mode, Cert Tracker) raised above nav bar — close buttons were intercepted

Play at play.multiversestudios.xyz/breach/ — no account required.