// slides-opening.jsx — Slides 1 through 7 (cover, team, problem, market) // ─── SLIDE 01 · COVER ─────────────────────────────────────────────── // Boot sequence: HUD layers power on first, reticle locks, wordmark // materializes, labels slide in, bottom strip settles, status LED ignites. // Runs once at page load (deck-stage keeps slides mounted, so re-visits // show the settled state). prefers-reduced-motion kills all durations // via the global rule in index.html. function Slide01_Cover() { return ( {/* Cyber grid backdrop */}
{/* Diagonal "deploy scan" band */}
{/* Frame brackets — reticle lock-on */}
{/* Top tech label */}
// BAD SECTOR LABS
OPERATIONAL
{/* Center — wordmark */}
LUDUS
{/* Bottom strip */}
BAD SECTOR LABS · 2026
); } // ─── SLIDE 02 · WHOAMI ────────────────────────────────────────────── function PersonCard({ imgSrc, idTag, github, name, role, prev, focal = "center 20%" }) { return (
{/* Portrait */}
{imgSrc ? ( {name} ) : (
PHOTO · PLACEHOLDER
)} {/* scanline over photo */}
{/* gold HUD ring */}
{/* ID label top-left — clickable when github handle is supplied */} @{idTag}
{/* Info */}
{name}
{role}
PREVIOUSLY
{prev.map((p,i)=>(
▸ {p}
))}
); } function Slide02_Whoami() { return (
// WHOAMI The operators behind Ludus
); } // ─── SLIDE 03 · HAS THIS BEEN YOU? ─────────────────────────────────── // ─── SHARED · OPERATOR'S NIGHT HUD ───────────────────────────────── // The 4-beat problem sequence (slides 3-6) shares a narrative chrome: // • clock stamp (top-right) advancing through the night // • RISK meter (top, under chrome) rising from LOW → CRITICAL // • consistent BEAT label ("BEAT 01/04") for continuity function NightHUD({ beat, clock, t, risk, riskLabel, riskColor = CRIMSON }) { // risk: 0..1 const segs = 16; const lit = Math.round(segs * risk); return (
BEAT {beat}/05 │ OPERATOR'S NIGHT
RISK
{Array.from({length: segs}, (_, i) => { const on = i < lit; const c = i < 5 ? "#7a8a6a" : i < 10 ? GOLD : CRIMSON; return ( ); })}
{riskLabel}
T+ {t} │ {clock}
); } // ─── SLIDE 03 · HAS THIS BEEN YOU? ─────────────────────────────────── // Beat 1 — the setup. One question, one image. No sales copy. function Slide03_HasThisBeenYou() { return (
{/* Full-bleed hero image */} Operator at 02:47 {/* Scanlines */}
{/* Left-side vignette for text legibility */}
{/* Bottom vignette */}
{/* The question — centered, hero type */}
SETUP
Has this
been you? _
{/* Subject stamp — bottom right of image */}
SUBJ · OPERATOR
); } // ─── SLIDE 04 · "THIS IS PERFECT!" ─────────────────────────────────── // Beat 2 — the mark bites. A PoC repo for a fresh CVE, one click from clone. function Slide04_ThisIsPerfect() { return (
{/* Full-bleed hero image — same desk, 15 minutes later */} Fresh PoC repo on operator's monitor {/* Scanlines */}
{/* Left-side vignette for text legibility */}
{/* Bottom vignette */}
{/* Hero text column — mirrors Slide 03 */}
THE BAIT
"This is
perfect!" _
A fresh PoC. A CVE you're hunting. One git clone away.
{/* Subject stamp — escalates from SUBJ·OPERATOR on slide 03 */}
SUBJ · BAIT
); } // ─── SLIDE 05 · DID YOU JUST DETONATE *THAT* BINARY? ──────────────── // Beat 3 — the realization. WannaCry as the cautionary specimen, news clippings as context. const NEWS_SANS = `-apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, sans-serif`; const NEWS_SERIF = `Georgia, "Times New Roman", serif`; function NewsCard_GoogleTAG() { return (
Threat Analysis Group
New campaign targeting security researchers
Jan 25, 2021 · 4 min read
A
Adam Weidemann Threat Analysis Group
); } function NewsCard_Record() { const Tag = ({children}) => ( {children} ); return (
Image: Micha Brandli
Daryna Antoniuk September 7th, 2023
Nation-state Cybercrime News
North Korean hackers target security researchers with new zero-day
State-backed North Korean hackers are reportedly targeting security researchers using at least one zero-day vulnerability, Google warned in a report released Thursday.
); } function NewsCard_DarkReading() { return (
Hackers Lure Cybersecurity Researchers With Fake LinkedIn Recruiter Profiles
Campaign demonstrates the DPRK-backed cyberattackers are gaining tools to avoid EDR tools.
DR
Dark Reading Staff, Dark Reading March 13, 2023
1 Min Read Editor's Choice
); } function Slide05_YoloBinary() { return (
{/* Full-bleed hero image — same operator, now drowning in consequence */} Operator realizes what he detonated — WannaCry lock screen, news clippings orbiting like intrusive thoughts {/* Scanlines */}
{/* Top vignette — darkens headline band while preserving most clippings */}
{/* Bottom vignette — for stamp legibility */}
{/* Hero headline — top center */}
REALIZATION
Did you just detonate{" "} that binary?
{/* Specimen stamp — bottom center, anchors the fact */}
SPECIMEN · WANNACRY · MAY 2017 200K+ HOSTS
); } // ─── SLIDE 06 · DID *YOU* JUST DETONATE THAT BINARY? ──────────────── // Beat 04 — the outcome. Pronoun flips. The client email arrives at 04:29. // Hero photo: operator collapsed at the desk, "Network Outage" email // from Angry Joe on the monitor. function Slide06_DidYouYolo() { return (
{/* Full-bleed hero image — the receipts have arrived, Angry Joe's email on screen, operator slumped at the desk. */} Operator collapsed at the desk reading the client's network-outage email {/* Scanlines */}
{/* Left-side vignette for text legibility */}
{/* Bottom vignette */}
{/* Hero text column — mirrors Slides 03/04 */}
THE RECEIPT
Did YOU just detonate
that binary?
{/* Inbox stamp — parallels SUBJ stamps on slides 03/04 */}
INBOX · 04:29 MON FROM THE CLIENT
); } // ─── SLIDE 07 · RECEIPTS ───────────────────────────────────────────── // The data anchor after the 4-beat night sequence. Three stats in a triangle: // risk is real → growing → aimed at you. function Slide07_Receipts() { return (
RECEIPTS About <span style={{color: GOLD}}>that</span> binary…
{/* Triangle of stats — hero in the center, two supporting on the sides */}
{/* Stat 1 — supporting (left, lower visual weight) */}
GROWING
188%
YoY increase in malicious open-source packages
Sonatype logged 16,279 in Q2 2025 alone — 845,204 total since 2017.
{/* Stat 2 — HERO (center, dominant) */}
THE HEADLINE
1 in 10
PoC exploits on GitHub are malicious.
Leiden University analyzed 47,313 PoC repos — 10.3% contained Cobalt Strike beacons, infostealers, RATs, or hardcoded reverse shells.
{/* Stat 3 — supporting (right) — dark surface, no red-on-red */}
TARGETED
Polished
bait.
Late-2025 Webrat campaign used AI-generated READMEs on fake PoC repos to target "inexperienced security professionals and students."
Payload: backdoor + infostealer — creds, wallets, webcam, keylog.
{/* Kicker + sources */}
…and no way to tell which is which. Sources · Leiden / USENIX WOOT '25 · Sonatype Q2 '25 · Kaspersky Dec '25
); } // ─── SLIDE 08 · LAB/RANGE AUTOMATION TOOLS — THE LANDSCAPE ────────── function Slide08_Landscape() { const commercial = [ { name: "Immersive Labs", sub: "formerly Snap Labs" }, { name: "SimSpace", sub: "mostly DoD" }, { name: "Hack the Box", sub: "" }, { name: "Try Hack Me", sub: "" }, { name: "Pentester Lab", sub: "" }, ]; const openSource = [ { name: "Detection Lab", sub: "archived 2023-01-01", dead: true }, { name: "AutomatedLab", sub: "PowerShell / HyperV only" }, { name: "Game of AD (GOAD)", sub: "red-team focused" }, { name: "ADLab", sub: "vagrant / ansible" }, { name: "AD-Lab", sub: "PowerShell" }, ]; // Operator scorecard: does the camp meet this need? const needs = ["Realistic", "Extendable", "On-prem", "Multi-user"]; const commercialScore = [true, false, false, true ]; // cloud-first, closed const ossScore = [false, true, true, false]; // narrow, single-user const Entry = ({name, sub, dead}) => (
▸ {name}
{sub &&
{sub}
}
); const Scorecard = ({scores}) => (
OPERATOR NEEDS · MET?
{needs.map((n, i) => (
{n}
{scores[i] ? "✓" : "✗"}
))}
); return ( LANDSCAPE Lab & range automation — the field today
Two camps. Neither meets all four needs operators actually have.
{/* Needs strip — sets up the vocabulary the scorecards score against */}
// FOUR NEEDS
{needs.map((n, i) => (
{n}
{i < needs.length - 1 && (
·
)} ))}
{/* Commercial */}
CATEGORY A
Commercial
SaaS, closed, per-seat billing
{commercial.map((c,i)=>)}
{/* Open Source */}
CATEGORY B
Open Source
Community-maintained, narrow scope
{openSource.map((c,i)=>)}
); } Object.assign(window, { Slide01_Cover, Slide02_Whoami, Slide03_HasThisBeenYou, Slide04_ThisIsPerfect, Slide05_YoloBinary, Slide06_DidYouYolo, Slide07_Receipts, Slide08_Landscape, });