Content Catalog

Hands-on labs, courses and challenges

Offensive and defensive training across the full attack surface, from fundamentals to live CVEs, AI red teaming and incident response.

559 items44 tracks

559 results

Red Team

16 items

Dumping Domain Controller Hashes Locally

Medium
Lab·Active Directorylinux

Attack the CVE: Apache Path Traversal RCE

Medium
Lab·Attack the CVElinux

Attack the CVE: Erlang/OTP SSH Pre-Auth RCE

Hard
Lab·Attack the CVElinux

Attack the CVE: GeoServer OGNL RCE

Medium
Lab·Attack the CVElinux

Attack the CVE: Jenkins Arbitrary File Read

Medium
Lab·Attack the CVElinux

Attack the CVE: Log4Shell JNDI RCE

Hard
Lab·Attack the CVElinux

Attack the CVE: Shellshock Bash CGI RCE

Easy
Lab·Attack the CVElinux

Attack the CVE: Struts2 OGNL RCE (S2-045)

Medium
Lab·Attack the CVElinux

Attack the CVE: TeamCity Auth Bypass

Medium
Lab·Attack the CVElinux

Container Pentest: Docker Socket Breakout

Medium
Lab·Container Pentestlinux

Container Pentest: Exposed Docker API

Medium
Lab·Container Pentestlinux

Container Pentest: Exposed Registry Loot

Medium
Lab·Container Pentestlinux

Container Pentest: Kubernetes Takeover

Hard
Lab·Container Pentestlinux

Container Pentest: Leaky Vessels (runc CVE-2024-21626)

Hard
Lab·Container Pentestlinux

Fix the Exploit: Log4Shell Wrong Sink

Hard
Lab·Fix the Exploitlinux

Full Box: Foothold to Root

Medium
Lab·Full Boxlinux

AI Red Team

5 items

AI Red Team: Indirect Prompt Injection

Medium
Lablinux

AI Red Team: Jailbreak the Guardrail

Medium
Lablinux

AI Red Team: Prompt Injection and Tool Abuse

Medium
Lablinux

AI Red Team: RAG Data Leak

Medium
Lablinux

AI Red Team: SSRF via Agent Tool

Medium
Lablinux

Blue Team

105 items

Container Forensics: DockerDoor

Hard
Lab·Container Forensicslinux

Container Forensics: DockerMiner

Medium
Lab·Container Forensicslinux

Container Forensics: Exposed Docker API

Hard
Lab·Container Forensicslinux

Container Forensics: Kinsing Cryptojacking

Medium
Lab·Container Forensicslinux

Container Forensics: Kubernetes Cluster Compromise

Hard
Lab·Container Forensicslinux

Container Forensics: Leaky Vessels Escape

Hard
Lab·Container Forensicslinux

Container Forensics: The Poisoned Image

Hard
Lab·Container Forensicslinux

Detection Engineering: Catch Akira with Sigma

Hard
Lab·Detection Engineeringlinux

Detection Engineering: Falco Rule for Container Crypto-Mining

Hard
Lab·Detection Engineeringlinux

Active Directory Attacks Investigation #1

Medium
Lab·Forensicswindows

Active Directory Attacks Investigation #2

Medium
Lab·Forensicswindows

Allow SAN

Hard
Lab·Forensicswindows

Android Disc Forensics

Medium
Lab·Forensicswindows

Android System Artifacts Analysis

Medium
Lab·Forensicslinux

AsyncRAT Network Analysis

Medium
Lab·Forensicslinux

BadSuccessor

Hard
Lab·Forensicswindows

Browser Forensics: Chrome Bookmark Analysis

Medium
Lab·Forensicslinux

Browser Forensics: Chrome History Analysis

Medium
Lab·Forensicslinux

Browser Forensics: Firefox Bookmark Analysis

Medium
Lab·Forensicslinux

Browser Forensics: Firefox Cookie Analysis

Medium
Lab·Forensicslinux

Browser Forensics: Firefox History Analysis

Medium
Lab·Forensicslinux

Browser Forensics: Firefox Master Password Cracking

Medium
Lab·Forensicslinux

Browser Forensics: Firefox: Saved Login Information

Medium
Lab·Forensicslinux

Data Carving with Scalpel

Medium
Lab·Forensicslinux

EXT4 Forensics

Easy
Lab·Forensicslinux

Enrollment Agent

Medium
Lab·Forensicswindows

Hunting xworm in the Traffic

Easy
Lab·Forensicslinux

Incognito Browser Forensics

Hard
Lab·Forensicslinux

Jumplist Analysis

Medium
Lab·Forensicswindows

Linux Disc Forensics Analysis with Autopsy

Medium
Lab·Forensicswindows

MRU Analysis

Easy
Lab·Forensicswindows

Masslogger Stealer Network Analysis

Easy
Lab·Forensicslinux

Memory Forensics with Volatility

Medium
Lab·Forensicslinux

Mimic Ransomware Network Traffic Analysis

Hard
Lab·Forensicslinux

ModiLoader Network Analysis

Medium
Lab·Forensicslinux

Mozi Botnet Network Traffic Analysis

Medium
Lab·Forensicslinux

NTFS Forensics

Medium
Lab·Forensicswindows

Pagefile.sys Analysis

Medium
Lab·Forensicslinux

Poisoned Packet

Medium
Lab·Forensicslinux

Prefetch Analysis

Medium
Lab·Forensicswindows

RDP Cache Analysis

Medium
Lab·Forensicswindows

RemcosRat Network Analysis

Easy
Lab·Forensicslinux

Skinny Guerrilla C2 Network Traffic

Hard
Lab·Forensicslinux

Spray and Spawn

Medium
Lab·Forensicswindows

Windows Disc Forensics Analysis with Autopsy

Medium
Lab·Forensicswindows

Windows Registry Hive Analysis

Medium
Lab·Forensicswindows

Writable Certificate

Medium
Lab·Forensicswindows

Hardening - Incident Response Lab

Medium
Lab·Hardeninglinux

Cisco IOS XE: CVE-2023-20198 Web UI Implant Hunt

Hard
Lab·Incident Responselinux

Citrix Bleed: CVE-2023-4966 Session Hijack Hunt

Hard
Lab·Incident Responselinux

Compromised Machine Analysis

Medium
Lab·Incident Responsewindows

Confluence: CVE-2023-22515 Rogue-Admin Hunt

Medium
Lab·Incident Responselinux

Detect Attacks with Sysmon

Medium
Lab·Incident Responsewindows

Detect Backdoor Account

Medium
Lab·Incident Responsewindows

Detect Before Hackers - 1

Medium
Lab·Incident Responsewindows

Detect Before Hackers - 2

Medium
Lab·Incident Responsewindows

Detect Before Hackers - 3

Medium
Lab·Incident Responsewindows

Detect Before Hackers - 4

Medium
Lab·Incident Responsewindows

Detect Before Hackers - 5

Medium
Lab·Incident Responsewindows

Detecting HTTP Brute Force

Hard
Lab·Incident Responselinux

Detecting-Open-Redirect-Attacks

Hard
Lab·Incident Responselinux

Downloaded File for Persistence

Medium
Lab·Incident Responsewindows

Exchange ProxyNotShell: CVE-2022-41040/41082 Hunt

Hard
Lab·Incident Responselinux

FortiManager: FortiJump CVE-2024-47575 Threat Hunt

Hard
Lab·Incident Responselinux

IR - Injector Process

Medium
Lab·Incident Responsewindows

IR - Log Hunting

Hard
Lab·Incident Responsewindows

IR - Registry Modification Investigation

Medium
Lab·Incident Responsewindows

IR - Startup Application Analysis

Easy
Lab·Incident Responsewindows

IR - Startup Application Analysis - 2

Easy
Lab·Incident Responsewindows

IR - TASK - Time Trigger

Medium
Lab·Incident Responsewindows

IR - User and Group Management

Medium
Lab·Incident Responsewindows

IR - Who Invisible

Medium
Lab·Incident Responsewindows

IR - Windows Services

Medium
Lab·Incident Responsewindows

Introduction Incident Responce

Medium
Lab·Incident Responselinux

Ivanti Connect Secure: CVE-2025-0282 Threat Hunt

Medium
Lab·Incident Responselinux

Kansa

Medium
Lab·Incident Responselinux

Live-Fire IR: Contain the Intrusion

Medium
Lab·Incident Responselinux

Live-Fire IR: Ghost in the Machine

Hard
Lab·Incident Responselinux

Live-Fire IR: The Miner That Won't Die

Hard
Lab·Incident Responselinux

MOVEit Transfer: CVE-2023-34362 Data-Theft Hunt

Medium
Lab·Incident Responselinux

PAN-OS GlobalProtect: CVE-2024-3400 Threat Hunt

Hard
Lab·Incident Responselinux

Powershell for Persistence

Medium
Lab·Incident Responsewindows

Ransomware Attack Simulation

Hard
Lab·Incident Responsewindows

Ransomware IR: Triage the Intrusion

Hard
Lab·Incident Responsewindows

Ransomware Incident Response

Hard
Academy·Incident Responsewindows

ScreenConnect: CVE-2024-1709 Auth-Bypass Hunt

Medium
Lab·Incident Responselinux

Services for Persistence

Medium
Lab·Incident Responsewindows

Someone Phished Me!

Hard
Lab·Incident Responsewindows

ToolShell: SharePoint Threat Hunt

Hard
Lab·Incident Responsewindows

WordPress TakeOver Investigation

Easy
Lab·Incident Responselinux

wp2shell: Detecting the WordPress Batch RCE

Medium
Lab·Incident Responselinux

Active Directory Attack Investigation

Medium
Lab·Investigationlinux

Apache Log Analysis

Easy
Lab·Investigationlinux

DNS Tunneling

Medium
Lab·Investigationlinux

HTTP Tunneling

Medium
Lab·Investigationlinux

ICMP Tunneling

Easy
Lab·Investigationlinux

SSH Tunneling

Hard
Lab·Investigationwindows

Splashtop - Remote Access Software

Medium
Lab·Investigationlinux

Foxtopia: Supply-Chain Dropper Analysis

Medium
Lab·Malware Analysislinux

Kali365: Phishing-as-a-Service Kit Triage

Hard
Lab·Malware Analysislinux

Phishing Analysis

Medium
Academy·Phishing Analysislinux

Phishing Triage: Analyze a Reported Email

Medium
Lab·Phishing Analysislinux

Akira Ransomware: Threat-Intel Case

Hard
Lab·Threat Intelligencelinux

CTI: IOC Extraction and Infrastructure Pivoting

Medium
Lab·Threat Intelligencelinux

Web Logs Analysis

Easy
Lab·Web Attacklinux

Penetration Testing

72 items

Android Application Penetration Testing (ASM)

Easy
Academy

Android Application Penetration Testing (Setup)

Medium
Academy

Android Application Penetration Testing (Structure)

Easy
Academy

Brute Force with THC-Hydra

Easy
Academy

Business Logic Vulnerability

Medium
Academy

CVE-2022-34265 Exploitation

Medium
Academy

Cracking Passwords With john

Easy
Academy

FTP Brute Force

Easy
Academy

Finding IDOR Vulnerability

Easy
Academy

Finding SQL Injection Vulnerability

Easy
Academy

HTTP Basic Auth Brute Force

Easy
Academy

Hydra Fundamental

Easy
Academy

Learn Burp Suite

Easy
Academy

Learn Dirb

Easy
Academy

Learn Metasploit

Easy
Academy

Learn Phishing Attack

Medium
Academy

Learn SSH Tunneling

Medium
Academy

Linux 101

Easy
Academy

Login Brute Force

Medium
Academy

Make Wordlist with Crunch

Easy
Academy

Netcat for Penetration Testing

Easy
Academy

Nmap Fundamental

Easy
Academy

Penetration Testing Report Standards

Easy
Academy

Practical ICS Security

Medium
Academy

Privilege Escalation - Cronjobs

Easy
Academy

Privilege Escalation - Exploiting Capabilities

Medium
Academy

Privilege Escalation - Exploiting PATH

Easy
Academy

Privilege Escalation - File Permission SUID

Easy
Academy

Privilege Escalation - Introduction

Easy
Academy

Privilege Escalation - LD Preload Hijacking

Medium
Academy

Privilege Escalation - Misconfigured NFS

Easy
Academy

Privilege Escalation - Password Mining

Easy
Academy

Privilege Escalation - Su Brute Force

Easy
Academy

Privilege Escalation - Sudo Right

Easy
Academy

Privilege Escalation - Vulnerable Services

Easy
Academy

Pwn with Metasploit

Easy
Academy

Race Condition in Money Transfer

Hard
Academy

SQL Brute Force

Easy
Academy

SSH Brute Force

Easy
Academy

Scan Network with Nmap

Easy
Academy

VNC Brute Force

Easy
Academy

Web Cache Deception Attack

Hard
Academy

Web Cache Poisoning Attack

Hard
Academy

WordPress Penetration Testing

Easy
Academy

Brute Force Attack - HTTP

Medium
Lab·Brute Force Attacklinux

Brute Force Labs - Final Exam

Medium
Lab·Brute Force Attacklinux

Brute Force with THC-Hydra

Medium
Lab·Brute Force Attacklinux

FTP Brute Force

Medium
Lab·Brute Force Attacklinux

HTTP Brute Force

Medium
Lab·Brute Force Attacklinux

Login Brute Force

Medium
Lab·Brute Force Attacklinux

SQL Brute Force

Medium
Lab·Brute Force Attacklinux

SSH Brute Force

Medium
Lab·Brute Force Attacklinux

VNC Brute Force

Medium
Lab·Brute Force Attacklinux

Apache Log Poisoning

Medium
Lab·Introductionlinux

HTTP - CVE-2021-42013

Medium
Lab·Introductionlinux

Hacking MSSQL Server - Enumerating

Medium
Lab·Introductionlinux

Hacking MSSQL Server - Impersonate

Medium
Lab·Introductionlinux

Hacking MSSQL Server - xp_cmdshell

Medium
Lab·Introductionlinux

Hacking WordPress with Phishing Attack

Easy
Lab·Introductionlinux

Learn WordPress Hacking

Easy
Lab·Introductionlinux

Playground for Web Hackers

Easy
Lab·Introductionlinux

Pwn with Metasploit

Medium
Lab·Introductionlinux

Redis CVE-2022-0543

Medium
Lab·Introductionlinux

SSH Tunneling

Medium
Lab·Introductionlinux

Scan Network with Nmap

Medium
Lab·Introductionlinux

Static Analysis with MobSF

Easy
Lab·Introductionlinux

Tomcat Exploitation - Part 1

Medium
Lab·Introductionlinux

Lsass Dump Analysis with Mimikatz

Medium
Lab·Password Attackswindows

Protocol Hacking

Medium
Lab·Protocol Hackinglinux

Hacking Challenge

Easy
Lab·System Hackinglinux

System Hacking - ActiveMQ

Easy
Lab·System Hackinglinux

System Hacking - Apache Flink

Medium
Lab·System Hackinglinux

Web Attacks

99 items

Web Attacks: API BOLA (Broken Object Level Authorization)

Easy
Lab·Access Controllinux

Web Attacks: Broken Function Level Authorization (BFLA)

Medium
Lab·Access Controllinux

Web Attacks: File Download IDOR

Easy
Lab·Access Controllinux

Web Attacks: IDOR by Order Enumeration

Medium
Lab·Access Controllinux

Web Attacks: IDOR via Encoded ID

Medium
Lab·Access Controllinux

Web Attacks: IDOR with Leaked UUID

Medium
Lab·Access Controllinux

Web Attacks: Mass Assignment Privilege Escalation

Medium
Lab·Access Controllinux

Web Attacks: Numeric IDOR

Easy
Lab·Access Controllinux

Authentication Bypass

Easy
Lab·Authenticationlinux

Authentication Bypass (Reverrse)

Medium
Lab·Authenticationlinux

Authentication Bypass (Space)

Easy
Lab·Authenticationlinux

Chain Lab

Easy
Lab·Authenticationlinux

Juggling

Medium
Lab·Authenticationlinux

Patlak Web Application

Medium
Lab·Authenticationlinux

Web Attacks: JWT Algorithm Confusion (RS256 to HS256)

Hard
Lab·Authenticationlinux

Web Attacks: JWT Signature Not Verified

Medium
Lab·Authenticationlinux

Web Attacks: JWT Weak HMAC Secret

Medium
Lab·Authenticationlinux

Web Attacks: Client-Side Price and Tier Trust

Medium
Lab·Business Logiclinux

Web Attacks: Negative Quantity Price Manipulation

Medium
Lab·Business Logiclinux

Web Attacks: Password Reset Token Not Bound to Account

Medium
Lab·Business Logiclinux

Web Attacks: Payment Step Bypass

Medium
Lab·Business Logiclinux

Web Attacks: Race Condition Double-Spend

Hard
Lab·Business Logiclinux

PHP Strikes - CVE-2024-4577

Hard
Lab·CVElinux

Rejetto - CVE-2024-23692

Hard
Lab·CVElinux

Web CVE: Next.js Middleware Auth Bypass (CVE-2025-29927)

Medium
Lab·CVElinux

Web CVE: Vite Dev Server Arbitrary File Read (CVE-2025-30208)

Medium
Lab·CVElinux

Web CVE: aiohttp Path Traversal (CVE-2024-23334)

Easy
Lab·CVElinux

Web Attacks: Boss - Acme Intranet (recon to root)

Hard
Lab·Chainedlinux

Web Attacks: Boss - ReportPortal (SQLi to root)

Hard
Lab·Chainedlinux

Web Attacks: Corporate Network Pivot (web RCE to internal)

Hard
Lab·Chainedlinux

Code Execution

Medium
Lab·Code Executionlinux

SCA - Bypass Forbidden Route Protection

Medium
Lab·Code Reviewlinux

Source Code Analysis and Exploitation

Easy
Lab·Code Reviewlinux

Source Code Analysis and Exploitation #2

Easy
Lab·Code Reviewlinux

Web Attacks: White-Box SQLi to RCE Chain

Hard
Lab·Code Reviewlinux

Whitebox Web Application Pentest

Easy
Lab·Code Reviewlinux

Command Injection (Type 1)

Medium
Lab·Command Injectionlinux

Command Injection (Type 2)

Medium
Lab·Command Injectionlinux

Web Attacks: Deserialization Object Injection to Admin

Medium
Lab·Deserializationlinux

Web Attacks: Node.js node-serialize RCE

Hard
Lab·Deserializationlinux

Web Attacks: PHP Object Injection (unserialize)

Hard
Lab·Deserializationlinux

Web Attacks: PyYAML Unsafe Load RCE

Medium
Lab·Deserializationlinux

Web Attacks: Python Pickle Deserialization RCE

Hard
Lab·Deserializationlinux

Web Attacks: LFI Source Disclosure via php://filter

Medium
Lab·File Inclusionlinux

Web Attacks: LFI to RCE via Apache Log Poisoning

Hard
Lab·File Inclusionlinux

Web Attacks: LFI to RCE via data:// Wrapper

Hard
Lab·File Inclusionlinux

Web Attacks: Nginx Alias Traversal (off-by-slash)

Medium
Lab·File Inclusionlinux

Web Attacks: Path Traversal (Arbitrary File Read)

Easy
Lab·File Inclusionlinux

Web Attacks: Path Traversal Filter Bypass (non-recursive strip)

Medium
Lab·File Inclusionlinux

File Upload

Medium
Lab·File Uploadlinux

File Upload Vulnerability

Medium
Lab·File Uploadlinux

Web Attacks: .htaccess Upload to RCE

Hard
Lab·File Uploadlinux

Web Attacks: Unrestricted File Upload to Webshell (RCE)

Easy
Lab·File Uploadlinux

Web Attacks: Upload Content-Type (MIME) Bypass

Medium
Lab·File Uploadlinux

Web Attacks: Upload Extension Blocklist Bypass (.phtml)

Medium
Lab·File Uploadlinux

Web Attacks: Upload Magic-Byte (getimagesize) Bypass

Hard
Lab·File Uploadlinux

Web Attacks: GraphQL BOLA

Easy
Lab·GraphQLlinux

Web Attacks: GraphQL Batching Brute-Force

Medium
Lab·GraphQLlinux

Web Attacks: GraphQL Introspection Disclosure

Easy
Lab·GraphQLlinux

Web Attacks: GraphQL Mutation Missing Authorization

Medium
Lab·GraphQLlinux

Web Attacks: GraphQL Sensitive Field Exposure

Easy
Lab·GraphQLlinux

Web Attacks: SQL Injection via GraphQL

Medium
Lab·GraphQLlinux

Web Attacks: Directory Listing Backup Dump

Easy
Lab·Information Disclosurelinux

Web Attacks: Exposed .env File

Easy
Lab·Information Disclosurelinux

Web Attacks: Exposed .git Source Disclosure

Medium
Lab·Information Disclosurelinux

Web Attacks: Hardcoded API Key in JavaScript

Medium
Lab·Information Disclosurelinux

Web Attacks: Source Backup File Disclosure

Easy
Lab·Information Disclosurelinux

Web Attacks: Blind NoSQL Injection ($regex extraction)

Hard
Lab·NoSQL Injectionlinux

Web Attacks: NoSQL $where JavaScript Injection

Hard
Lab·NoSQL Injectionlinux

Web Attacks: NoSQL Authentication Bypass (Operator Injection)

Medium
Lab·NoSQL Injectionlinux

Web Attacks: NoSQL Operator Injection Data Leak

Medium
Lab·NoSQL Injectionlinux

Web Attacks: NoSQL Query-String Operator Injection

Medium
Lab·NoSQL Injectionlinux

Web Attacks: Blind Command Injection (OOB exfiltration)

Hard
Lab·Out-of-Bandlinux

Web Attacks: Blind SSTI (OOB exfiltration)

Hard
Lab·Out-of-Bandlinux

Web Attacks: Blind XSS (OOB session theft)

Hard
Lab·Out-of-Bandlinux

Web Attacks: Prototype Pollution to Auth Bypass

Medium
Lab·Prototype Pollutionlinux

Web Attacks: Prototype Pollution to RCE

Hard
Lab·Prototype Pollutionlinux

Web Attacks: Prototype Pollution via constructor.prototype

Hard
Lab·Prototype Pollutionlinux

Web Attacks: HTTP Request Smuggling (CL.TE)

Hard
Lab·Request Smugglinglinux

Sqlmap for Beginners

Easy
Lab·SQL Injectionlinux

Web Attacks: Boolean-Blind SQL Injection

Medium
Lab·SQL Injectionlinux

Web Attacks: Error-Based SQL Injection

Medium
Lab·SQL Injectionlinux

Web Attacks: SQL Injection Authentication Bypass

Easy
Lab·SQL Injectionlinux

Web Attacks: UNION-Based SQL Injection

Easy
Lab·SQL Injectionlinux

DNS Rebinding

Hard
Lab·SSRFlinux

Web Attacks: SSRF Filter Bypass (IP encoding to IMDS user-data)

Medium
Lab·SSRFlinux

Web Attacks: SSRF to Cloud Metadata (IMDS credential theft)

Medium
Lab·SSRFlinux

Web Attacks: SSRF via gopher:// to Internal Redis

Hard
Lab·SSRFlinux

SSTI Injection

Hard
Lab·SSTIlinux

Web Attacks: Blind SSTI (Jinja2, out-of-band exfil)

Hard
Lab·SSTIlinux

Web Attacks: SSTI Filter Bypass (Jinja2 /attr)

Hard
Lab·SSTIlinux

Web Attacks: SSTI in Mako (RCE)

Medium
Lab·SSTIlinux

Web Attacks: SSTI in Nunjucks (Node RCE)

Hard
Lab·SSTIlinux

Web Attacks: Server-Side Template Injection (Jinja2 RCE)

Medium
Lab·SSTIlinux

Web Attacks: DOM-Based XSS

Medium
Lab·XSSlinux

Web Attacks: Reflected XSS (cookie theft)

Medium
Lab·XSSlinux

Web Attacks: Stored XSS (admin cookie theft)

Medium
Lab·XSSlinux

Web Attacks: XSS Blocklist Bypass

Medium
Lab·XSSlinux

Web Attacks: XSS with CSP Bypass

Hard
Lab·XSSlinux

Privilege Escalation

10 items

Copy Fail (CVE-2026-31431)

Easy
SOC Hub

CVE-2024-3094 - Playground

Hard
Lab·Linuxlinux

Cronjobs

Medium
Lab·Linuxlinux

Exploiting PATH

Medium
Lab·Linuxlinux

Looney Tunables

Medium
Lab·Linuxlinux

Password Mining

Medium
Lab·Linuxlinux

Privilege Escalation - Final Exam

Hard
Lab·Linuxlinux

SUID

Medium
Lab·Linuxlinux

Sudo Rights

Medium
Lab·Linuxlinux

Vulnerable Service

Medium
Lab·Linuxlinux

MITRE

18 items

MITRE: Credential Access: T1110.004

Medium
Lab·Credential Accesswindows

MITRE: Credential Access: T1003-008

Medium
Lab·Credential Accesslinux

MITRE: Credential Access: T1110.001

Medium
Lab·Credential Accesswindows

MITRE: Credential Access: T1552.004

Medium
Lab·Credential Accesslinux

MITRE: Defense Evasion: T1053.003

Hard
Lab·Defense-Evasionlinux

MITRE: Defense Evasion: T1548.003

Medium
Lab·Defense-Evasionlinux

MITRE: Defense Evasion: Masquerading

Medium
Lab·Defense-Evasionlinux

MITRE: Defense Evasion: T1027.001

Hard
Lab·Defense-Evasionlinux

MITRE: Defense Evasion: T1070.002

Medium
Lab·Defense-Evasionlinux

MITRE: Defense Evasion: T1222.002

Medium
Lab·Defense-Evasionlinux

MITRE: Defense Evasion: T1574.006

Hard
Lab·Defense-Evasionlinux

MITRE: Discovery - T1087.001

Medium
Lab·Discoverylinux

MITRE: Discovery Techniques

Medium
Lab·Discoverylinux

MITRE: Discovery: T1040

Medium
Lab·Discoverylinux

MITRE: Dumping Browsers: T1217, T1555.003, T1176

Medium
Lab·Dumping Browserslinux

MITRE: Execution: T1059.004

Medium
Lab·Executionlinux

MITRE: Operation Sneaky Sloth

Hard
Lab·Finallinux

MITRE: Persistence: T1136.001

Medium
Lab·Persistencelinux

Paths & Modules

46 items

Active Directory Forensics

Medium
Module

Bug Hunter

Medium
Career Path

Code Review and Exploitation

Medium
Module

Cyber Threat Intelligence Analyst

Medium
Career Path

Detecting Web Attacks

Medium
Module

Hacking SQL Server (Begineer)

Medium
Module

Introduction to Low-Level Research

Medium
Module

Introduction to MQTT Protocol

Medium
Module

Introduction to Penetration Testing

Medium
Module

Learn Brute Force Attacks

Medium
Module

Learn Linux Fundamentals

Medium
Module

Learn Windows (OS) Fundamentals

Medium
Module

Linux Privilege Escalation

Medium
Module

Log Analysis RMM Softwares

Medium
Module

MITRE ATT&CK: Credential Access

Medium
Module

MITRE ATT&CK: Defense Evasion

Medium
Module

MITRE / ATT&CK

Medium
Module

Memory Forensics

Medium
Module

Penetration Tester

Medium
Career Path

SOC Analyst L1

Medium
Career Path

SOC Analyst L2

Medium
Career Path

Web App Security Exam Preparation

Medium
Module

Web Application Pentester

Medium
Career Path

WiFi Attack Detection Challenges

Medium
Module

WiFi Penetration Testing

Medium
Module

Windows Artifacts Analysis

Medium
Module

Blue Team: Container Forensics & Detection Engineering

Hard
Modulelinux

Blue Team: Digital Forensics & Log Analysis

Medium
Modulelinux

Blue Team: Email & Threat Intelligence

Medium
Modulelinux

Blue Team: Malware Analysis & Threat Hunting

Hard
Modulelinux

Blue Team: Network & Host Forensics

Medium
Modulelinux

Fraud Analyst

Medium
Career Path

Fraud Analytics: AML, Crypto & Detection

Hard
Modulelinux

Fraud Analytics: Payment, Card & Account Fraud

Medium
Modulelinux

Network Pentest: Pivoting & Tunneling

Hard
Modulelinux

Network Pentest: Service Exploitation

Medium
Modulelinux

SOC Analyst L3

Hard
Career Path

Web Attacks: CVEs, White-Box & Boss Chains

Hard
Modulelinux

Web Attacks: Client-Side & Access Control

Medium
Modulelinux

Web Attacks: Injection

Medium
Modulelinux

Web Attacks: Recon, Out-of-Band & Smuggling

Medium
Modulelinux

Web Attacks: SSRF, File Inclusion & Upload

Medium
Modulelinux

Web Attacks: Template & Code Injection

Hard
Modulelinux

Linux Server Hardening

Medium
Hardening

Trace a Hacker

Medium
SOC Hub

Windows Baseline Hardening

Medium
Hardening

Digital Forensics

32 items

AnyDesk Log Analysis

Easy
Academy

CyberChef for Security Analysts

Medium
Academy

Detecting Directory Traversal Attacks

Medium
Academy

Detecting HTTP Brute Force

Medium
Academy

Detecting IDOR Attacks

Medium
Academy

Detecting LFI and RFI Attacks

Medium
Academy

Detecting Open Redirect Attacks

Medium
Academy

Detecting SQL Injection Attacks

Medium
Academy

Detecting XSS Attacks

Medium
Academy

Introduction to Forensics and Incident Response

Medium
Academy

Introduction to Linux System Hardening

Medium
Academy

Introduction to MITRE ATT&CK Framework

Easy
Academy

Learn Cyber Kill Chain

Easy
Academy

Learn Log Analysis of the Security Products

Medium
Academy

Learn NetworkMiner

Easy
Academy

Learn Splunk

Easy
Academy

Learn VirusTotal (VT)

Easy
Academy

Log Analysis with Linux Commands

Medium
Academy

Malware Analysis Environment Setup

Easy
Academy

Phishing Email Analysis

Easy
Academy

Practical Amcache Forensics

Medium
Academy

TShark for Security Analysts

Medium
Academy

TeamViewer Log Forensics

Medium
Academy

Timesketch / Forensic timeline analysis

Medium
Academy

Windows Forensics - Jump List

Easy
Academy

Windows Forensics - LNK File

Easy
Academy

Windows Forensics - RDP Cache

Easy
Academy

Windows Forensics - Recycle Bin

Easy
Academy

Windows Forensics - User Assist

Easy
Academy

Windows Forensics Registry 1

Easy
Academy

Windows Forensics Registry 2

Easy
Academy

Wireshark Tips for SOC Analysts

Easy
Academy

Fraud Analytics

25 items

Fraud Analytics: Account Takeover & Identity

Medium
Academy

Fraud Analytics: Crypto & Blockchain Tracing

Medium
Academy

Fraud Analytics: Crypto Mixer Detection

Hard
Academy

Fraud Analytics: Detection Engineering

Hard
Academy

Fraud Analytics: Fundamentals

Easy
Academy

Fraud Analytics: Insider & Accounting Fraud

Medium
Academy

Fraud Analytics: Money Mule Networks

Medium
Academy

Fraud Analytics: Payment & Card Fraud

Easy
Academy

Money Laundering & Structuring

Easy
Academy

Fraud Analytics: AML Structuring (Smurfing)

Medium
Lab·AMLlinux

Fraud Analytics: Money Mule Network

Hard
Lab·AMLlinux

Fraud Analytics: Account Takeover Triage

Medium
Lab·Account Fraudlinux

Fraud Analytics: Synthetic Identity

Hard
Lab·Account Fraudlinux

Ad Fraud & Mobile Attribution

Medium
Academy·Ad Fraudlinux

Ad Fraud: Catch the Click Flooder

Medium
Lab·Ad Fraudlinux

Ad Fraud: Catch the Click Injection

Medium
Lab·Ad Fraudlinux

Ad Fraud: Catch the Install Farm

Hard
Lab·Ad Fraudlinux

Fraud Analytics: Crypto Mixer Detection

Hard
Lab·Cryptolinux

Fraud Analytics: Crypto Tracing to an Exchange

Medium
Lab·Cryptolinux

Fraud Analytics: Train a Fraud Model

Hard
Lab·Detectionlinux

Fraud Analytics: Write a Fraud Detection Rule

Hard
Lab·Detectionlinux

Fraud Analytics: Benford's Law (Fabricated Numbers)

Medium
Lab·Insiderlinux

Fraud Analytics: Card Testing Detection

Easy
Lab·Payment Fraudlinux

Fraud Analytics: Card-Not-Present (CNP) Fraud

Medium
Lab·Payment Fraudlinux

Fraud Analytics: Chargeback (Friendly Fraud)

Medium
Lab·Payment Fraudlinux

New In Cyber

23 items

3-way Handshake

Easy
Academy

About the Computer

Easy
Academy

FTP Protocol Fundamentals

Easy
Academy

Hashing and Encoding for Cybersecurity Beginners

Easy
Academy

IP (Internet Protocol)

Easy
Academy

Linux Commands

Easy
Academy

Linux Network Settings

Easy
Academy

Linux Permissions

Easy
Academy

Linux Scheduler Tasks

Easy
Academy

Network Devices - Part 1

Easy
Academy

Protocols - DHCP Fundamentals

Easy
Academy

Protocols - DNS Fundamentals

Easy
Academy

Protocols - FTP Fundamentals

Easy
Academy

Protocols - HTTP Fundamentals

Easy
Academy

Protocols - ICMP Fundamentals

Easy
Academy

SOC Fundamentals

Easy
Academy

SQL Fundamentals

Easy
Academy

Web Application Technologies

Easy
Academy

Windows Commands

Easy
Academy

Windows Network Settings

Easy
Academy

Windows Scheduler Tasks

Easy
Academy

Windows Users and Groups

Easy
Academy

Wireshark Fundamentals

Easy
Academy

WiFi

11 items

Detecting Fake AP

Medium
Lab·Detecting Attackslinux

Detecting Hidden WiFi Network

Easy
Lab·Detecting Attackslinux

Detecting KARMA Attack

Medium
Lab·Detecting Attackslinux

Detecting WiFi Pineapple Activities

Medium
Lab·Detecting Attackslinux

PMF Network Analysis

Medium
Lab·Detecting Attackslinux

Ethical Wireless Hacking Challenges

Hard
Lab·Gamelinux

WEP Crack (Live)

Medium
Lab·WEPlinux

Uncovering Hidden SSID

Medium
Lab·WPA2linux

WPA2 Cracking (Live)

Medium
Lab·WPA2linux

WPA2 Enterprise Hacking

Hard
Lab·WPA2linux

WPA2 Network Pentest

Hard
Lab·WPA2linux

Network Pentest

9 items

Network Pentest: Double Pivot across three segments

Hard
Lab·Pivotinglinux

Network Pentest: Recon-Driven Pivot (internal port scan)

Medium
Lab·Pivotinglinux

Network Pentest: Reverse SOCKS Pivot with chisel (no SSH)

Hard
Lab·Pivotinglinux

Network Pentest: SSH Local Port Forward to a localhost-only service

Medium
Lab·Pivotinglinux

Network Pentest: Anonymous SMB Share Loot

Easy
Lab·Service Exploitationlinux

Network Pentest: Anonymous rsync Module Loot

Easy
Lab·Service Exploitationlinux

Network Pentest: PostgreSQL COPY FROM PROGRAM RCE

Medium
Lab·Service Exploitationlinux

Network Pentest: SNMP Public Community Disclosure

Easy
Lab·Service Exploitationlinux

Network Pentest: Unauthenticated Redis to RCE (SSH key write)

Hard
Lab·Service Exploitationlinux

Password Cracking

8 items

Crack Docx File

Medium
Lab·Generallinux

Crack PDF File

Medium
Lab·Generallinux

Crack Private Key

Medium
Lab·Generallinux

Crack Rar File

Medium
Lab·Generallinux

Crack Shadow File

Easy
Lab·Generallinux

Crack Zip File

Medium
Lab·Generallinux

Cracking Passwords With john

Medium
Lab·Generallinux

Make Wordlist with Crunch

Medium
Lab·Generallinux

Bug Bounty

7 items

Documentation and Logging

Easy
Academy

Introduction to Bug Bounty

Easy
Academy

Learn File Upload Exploitation

Easy
Academy

Learn Open Redirect Attacks

Easy
Academy

Learn XSS Exploitations

Easy
Academy

Payment System Hacking

Medium
Academy

Practical Information Gathering

Medium
Academy

IoT Hacking

7 items

MQTT - Configure Wireshark

Easy
Academy

MQTT - Introduction

Easy
Academy

MQTT - Setup

Easy
Academy

MQTT - Topics

Medium
Academy

MQTT Attack Analysis

Hard
Lab·MQTTlinux

MQTT Exploitation

Hard
Lab·MQTTlinux

Smart Plug Hack

Hard
Lab·Real Scenarioslinux

Malware

7 items

ClickFix

Medium
SOC Hub

Gorilla

Easy
SOC Hub

Maldoc Analysis

Easy
SOC Hub

Malware Infection

Easy
SOC Hub

Quasar RAT

Medium
SOC Hub

Sliver C2

Medium
SOC Hub

Soup Dealer

Medium
SOC Hub

Cyber Threat Intelligence

6 items

CTI Methodologies and Models

Medium
Academy

Human intelligence (HUMINT)

Easy
Academy

Introduction to Cyber Threat Intelligence

Medium
Academy

Practical Open Source Intelligence

Medium
Academy

Threat Group Profiling

Medium
Academylinux

Threat Profiling: Map an Intrusion

Medium
Lablinux

Malware Analysis

6 items

Analysis of Malicious Documents

Easy
Academy

Basic Dynamic Analysis

Medium
Academy

Basic Static Analysis

Medium
Academy

Practical Android Malware Analysis

Hard
Academy

Windows Internals

Medium
Academy

X86 Assembly and Reverse Engineering

Hard
Academy

WiFi Security

6 items

WiFi Hacking (Aircrack-ng Tools)

Easy
Academy

WiFi Hacking (Configuration)

Medium
Academy

WiFi Hacking (Information Gathering)

Medium
Academy

WiFi Hacking (Packets and Communication)

Easy
Academy

WiFi Hacking (Understanding the Access Point)

Easy
Academy

WiFi Hacking (Windows Systems)

Medium
Academy

Mobile

5 items

Android Application Pentesting with ADB

Medium
Academy

Mobile App Analysis: APK Recon

Medium
Lab·Androidlinux

Mobile App Analysis: Exported Component Exploitation

Hard
Lab·Androidlinux

Mobile App Analysis: Insecure Communication

Medium
Lab·Androidlinux

Mobile App Analysis: Insecure Data Storage

Medium
Lab·Androidlinux

AWS

3 items

EC2 Cryptojacking

Easy
SOC Hub

Magecart

Easy
SOC Hub

S3 SSE-C

Easy
SOC Hub

Defend System

3 items

Analyzing Live Attack

Medium
Lab·Live Attackslinux

Hacked Redis Server Part-1

Hard
Lab·Live Attackslinux

Hacked Redis Server Part-2

Hard
Lab·Live Attackslinux

Email

3 items

Fake Recruitment

Easy
SOC Hub

Phishing

Easy
SOC Hub

RDP Phishing

Medium
SOC Hub

Defense Evasion

2 items

Blind Stop

Easy
SOC Hub

Tunnelling

Easy
SOC Hub

Persistence

2 items

LOLBin Carnival

Easy
SOC Hub

Web to Shell

Easy
SOC Hub

RAT

2 items

AsyncRAT

Easy
SOC Hub

RemcosRat

Easy
SOC Hub

Ransomware

2 items

Black Basta

Medium
SOC Hub

Mimic

Easy
SOC Hub

Threat Hunting

2 items

Introduction to Threat Hunting with Yara

Medium
Academy

Loki Command & Control

Medium
Academy

dfir

2 items

Kuzeybank: Web Server Attack Analysis

Medium
Lab

NorthBank: SOC Attack Analysis (Threat Hunt)

Medium
Lab

web

2 items

MediBook: Broken Appointment Access Control

Easy
Lab

ShopFast: Blind SQL Injection in Product Search

Easy
Lab

APT28

1 item

APT28 Fancy Bear

Medium
SOC Hub

Active Directory

1 item

Introduction to Active Directory

Easy
Academywindows

Execution

1 item

Silent Harvest

Easy
SOC Hub

Fraud Detection

1 item

Fraud Detection 101 - Finance & E-Commerce

Medium
Academy

Google Cloud

1 item

Exfiltration

Medium
SOC Hub

Hayabusa

1 item

Hayabusa

Medium
SOC Hub

KAPE

1 item

KAPE

Easy
SOC Hub

MemProcFS

1 item

MemProcFS

Medium
SOC Hub

Network Hacking

1 item

Packet Manipulation with Scapy

Medium
Academy

NoName

1 item

NoName

Medium
SOC Hub

Programming

1 item

Python Challenges

Medium
Lab·Pythonlinux

Secure Coding

1 item

RXSS Filter Bypass

Easy
Academy

Stealer

1 item

MassLogger

Easy
SOC Hub

Want your team on these?

New content ships every month. Book a walkthrough and we will tailor a track for your organization.

Request access