Every breach begins the same way: with a name, a domain, and someone patient enough to look. In 45 minutes we take the attacker’s seat and walk the first three moves of a real intrusion — find, scan, attack — against a target that never knew it was exposed and not hardened enough.