CVSS Attack Chain — 3D

The 2D original is a marketing/article page with an embedded CVSS 3.1 risk calculator (formula only, no visualization). This companion substitutes the real mechanic the title implies: the exact exploitability/impact formula now drives a genuine 3D exploit path — attacker → privilege gates → target — that you can orbit and watch a launched exploit traverse.

CVSS Base Score

—

Severity

—

Exploitability

—

Impact score

—

Attack Vector (AV)Network

Attack Complexity (AC)Low

Privileges Required (PR)None

User Interaction (UI)None

Confidentiality impact (C)High

Integrity impact (I)High

Reading the scene — the red node is the attacker, the pulsing core is the target. Rings along the path are privilege checkpoints (count set by PR); the small amber node is a required user click (shown only when UI = Required). Path length and waviness come straight from AV and AC. Launching sends a real particle along the exact curve; it only reaches the core once every gate — and the user node, if present — has been cleared.

Attacker node

Privilege gate (PR)

User-interaction node (UI)

Target core — size/glow = Impact score

CVSS 3.1 Risk Scoring — Ported Into a Real 3D Attack Path

The 2D original ("Ethical Hacking & Penetration Testing") is a long-form article page — methodology, tool cheat-sheets, an OWASP Top 10 table — with one small interactive widget buried in it: a CVSS 3.1 base-score calculator using six dropdowns (Attack Vector, Attack Complexity, Privileges Required, User Interaction, Confidentiality impact, Integrity impact) and a 2D canvas bar chart. There is no simulated space to explore. This companion keeps the calculator's exact formula — exploitability = 8.22·AV·AC·PR·UI, impact = 1-((1-C)(1-I)), impactScore = 6.42·impact, baseScore = min(impactScore+exploitability, 10), with the same severity thresholds (9.0 Critical, 7.0 High, 4.0 Medium) — and builds the real mechanic its title implies: a genuine WebGL attack chain from an attacker node to a target core, whose geometry is driven entirely by those six metrics.

Attack Vector sets how far the attacker sits from the target (Network reaches from a long path, Physical requires proximity). Attack Complexity controls how winding that path is and how fast a launched exploit travels along it. Privileges Required spawns 0–2 rotating privilege-gate rings the exploit must cross before continuing. User Interaction adds a required checkpoint node when set to "Required". Confidentiality and Integrity impact drive the target core's size, color and glow intensity in real time — the same impact score the readout panel reports. Drag to orbit the camera, scroll to zoom, and press Launch exploit to watch a real particle traverse the curve and read out the resulting severity.