ChainOfAttack

Hearthstone meets Mr Robot. Card deckbuilder built on MITRE ATT&CK framework (real-world cyber adversary tactics, techniques, and procedures)

Every card sits on a rung of the kill chain.

`◇ RECON → ▲ ACCESS → ◆ ESCALATE → » MOVE → ■ PERSIST → ▼ EXFIL`

Climbing the rungs in order multiplies your eventual payout. The multiplier pays on the cash-out and on nothing else - so the whole game is one decision, made over and over: climb one more rung, or bank it now.

Everything you do raises Heat. Heat is not a health bar. It is how loudly you are working, it never falls on its own, and when it hits 100% the run is over. Lying low costs you a turn and buys quiet. The system fights back on its own clock, with trace sweeps that escalate whether or not you are ready for them.

---

Three corporations. Twelve systems. Sixty cards, seven of them Zero-Days.

Eight Processes - things that keep ticking after you play them. Two threat actors who play at completely different speeds: the Script Kiddie is loud and fast, the APT Operator is patient and cheap, and a full run takes one of them about twenty turns and the other about forty.

There is a whole run around it: a terminal login, a shell menu, target and route screens, a reward card after every system, deck purging, a payload library that counts how many times you have actually fired each card, and save/load.

---

No illustrated art, by design. 

Every card's mark is generated from a hash of its id - 59 unique, always-identical sigils out of one generator. Adding a card costs no art at all. The CRT effect is over all of it - scanlines, barrel distortion, chromatic aberration, phosphor bloom. F1 or config.ini (settings) to toggle it off.

---

It plays in your browser

About 8MB, no download, and it saves to your browser's storage - close the tab and the run is still there. Binaries for Linux and Windows are on the GitHub Release. The Windows one has never been tested . Recommend playing in the browser.