559 results
Red Team
16 items
Dumping Domain Controller Hashes Locally
Medium Lab·Active Directorylinux
Attack the CVE: Apache Path Traversal RCE
Medium Lab·Attack the CVElinux
Attack the CVE: Erlang/OTP SSH Pre-Auth RCE
Hard Lab·Attack the CVElinux
Attack the CVE: GeoServer OGNL RCE
Medium Lab·Attack the CVElinux
Attack the CVE: Jenkins Arbitrary File Read
Medium Lab·Attack the CVElinux
Attack the CVE: Log4Shell JNDI RCE
Hard Lab·Attack the CVElinux
Attack the CVE: Shellshock Bash CGI RCE
Easy Lab·Attack the CVElinux
Attack the CVE: Struts2 OGNL RCE (S2-045)
Medium Lab·Attack the CVElinux
Attack the CVE: TeamCity Auth Bypass
Medium Lab·Attack the CVElinux
Container Pentest: Docker Socket Breakout
Medium Lab·Container Pentestlinux
Container Pentest: Exposed Docker API
Medium Lab·Container Pentestlinux
Container Pentest: Exposed Registry Loot
Medium Lab·Container Pentestlinux
Container Pentest: Kubernetes Takeover
Hard Lab·Container Pentestlinux
Container Pentest: Leaky Vessels (runc CVE-2024-21626)
Hard Lab·Container Pentestlinux
Fix the Exploit: Log4Shell Wrong Sink
Hard Lab·Fix the Exploitlinux
Full Box: Foothold to Root
Medium Lab·Full Boxlinux
AI Red Team
5 items
AI Red Team: Indirect Prompt Injection
Medium Lablinux
AI Red Team: Jailbreak the Guardrail
Medium Lablinux
AI Red Team: Prompt Injection and Tool Abuse
Medium Lablinux
AI Red Team: RAG Data Leak
Medium Lablinux
AI Red Team: SSRF via Agent Tool
Medium Lablinux
Blue Team
105 items
Container Forensics: DockerDoor
Hard Lab·Container Forensicslinux
Container Forensics: DockerMiner
Medium Lab·Container Forensicslinux
Container Forensics: Exposed Docker API
Hard Lab·Container Forensicslinux
Container Forensics: Kinsing Cryptojacking
Medium Lab·Container Forensicslinux
Container Forensics: Kubernetes Cluster Compromise
Hard Lab·Container Forensicslinux
Container Forensics: Leaky Vessels Escape
Hard Lab·Container Forensicslinux
Container Forensics: The Poisoned Image
Hard Lab·Container Forensicslinux
Detection Engineering: Catch Akira with Sigma
Hard Lab·Detection Engineeringlinux
Detection Engineering: Falco Rule for Container Crypto-Mining
Hard Lab·Detection Engineeringlinux
Active Directory Attacks Investigation #1
Medium Lab·Forensicswindows
Active Directory Attacks Investigation #2
Medium Lab·Forensicswindows
Allow SAN
Hard Lab·Forensicswindows
Android Disc Forensics
Medium Lab·Forensicswindows
Android System Artifacts Analysis
Medium Lab·Forensicslinux
AsyncRAT Network Analysis
Medium Lab·Forensicslinux
BadSuccessor
Hard Lab·Forensicswindows
Browser Forensics: Chrome Bookmark Analysis
Medium Lab·Forensicslinux
Browser Forensics: Chrome History Analysis
Medium Lab·Forensicslinux
Browser Forensics: Firefox Bookmark Analysis
Medium Lab·Forensicslinux
Browser Forensics: Firefox Cookie Analysis
Medium Lab·Forensicslinux
Browser Forensics: Firefox History Analysis
Medium Lab·Forensicslinux
Browser Forensics: Firefox Master Password Cracking
Medium Lab·Forensicslinux
Browser Forensics: Firefox: Saved Login Information
Medium Lab·Forensicslinux
Data Carving with Scalpel
Medium Lab·Forensicslinux
EXT4 Forensics
Easy Lab·Forensicslinux
Enrollment Agent
Medium Lab·Forensicswindows
Hunting xworm in the Traffic
Easy Lab·Forensicslinux
Incognito Browser Forensics
Hard Lab·Forensicslinux
Jumplist Analysis
Medium Lab·Forensicswindows
Linux Disc Forensics Analysis with Autopsy
Medium Lab·Forensicswindows
MRU Analysis
Easy Lab·Forensicswindows
Masslogger Stealer Network Analysis
Easy Lab·Forensicslinux
Memory Forensics with Volatility
Medium Lab·Forensicslinux
Mimic Ransomware Network Traffic Analysis
Hard Lab·Forensicslinux
ModiLoader Network Analysis
Medium Lab·Forensicslinux
Mozi Botnet Network Traffic Analysis
Medium Lab·Forensicslinux
NTFS Forensics
Medium Lab·Forensicswindows
Pagefile.sys Analysis
Medium Lab·Forensicslinux
Poisoned Packet
Medium Lab·Forensicslinux
Prefetch Analysis
Medium Lab·Forensicswindows
RDP Cache Analysis
Medium Lab·Forensicswindows
RemcosRat Network Analysis
Easy Lab·Forensicslinux
Skinny Guerrilla C2 Network Traffic
Hard Lab·Forensicslinux
Spray and Spawn
Medium Lab·Forensicswindows
Windows Disc Forensics Analysis with Autopsy
Medium Lab·Forensicswindows
Windows Registry Hive Analysis
Medium Lab·Forensicswindows
Writable Certificate
Medium Lab·Forensicswindows
Hardening - Incident Response Lab
Medium Lab·Hardeninglinux
Cisco IOS XE: CVE-2023-20198 Web UI Implant Hunt
Hard Lab·Incident Responselinux
Citrix Bleed: CVE-2023-4966 Session Hijack Hunt
Hard Lab·Incident Responselinux
Compromised Machine Analysis
Medium Lab·Incident Responsewindows
Confluence: CVE-2023-22515 Rogue-Admin Hunt
Medium Lab·Incident Responselinux
Detect Attacks with Sysmon
Medium Lab·Incident Responsewindows
Detect Backdoor Account
Medium Lab·Incident Responsewindows
Detect Before Hackers - 1
Medium Lab·Incident Responsewindows
Detect Before Hackers - 2
Medium Lab·Incident Responsewindows
Detect Before Hackers - 3
Medium Lab·Incident Responsewindows
Detect Before Hackers - 4
Medium Lab·Incident Responsewindows
Detect Before Hackers - 5
Medium Lab·Incident Responsewindows
Detecting HTTP Brute Force
Hard Lab·Incident Responselinux
Detecting-Open-Redirect-Attacks
Hard Lab·Incident Responselinux
Downloaded File for Persistence
Medium Lab·Incident Responsewindows
Exchange ProxyNotShell: CVE-2022-41040/41082 Hunt
Hard Lab·Incident Responselinux
FortiManager: FortiJump CVE-2024-47575 Threat Hunt
Hard Lab·Incident Responselinux
IR - Injector Process
Medium Lab·Incident Responsewindows
IR - Log Hunting
Hard Lab·Incident Responsewindows
IR - Registry Modification Investigation
Medium Lab·Incident Responsewindows
IR - Startup Application Analysis
Easy Lab·Incident Responsewindows
IR - Startup Application Analysis - 2
Easy Lab·Incident Responsewindows
IR - TASK - Time Trigger
Medium Lab·Incident Responsewindows
IR - User and Group Management
Medium Lab·Incident Responsewindows
IR - Who Invisible
Medium Lab·Incident Responsewindows
IR - Windows Services
Medium Lab·Incident Responsewindows
Introduction Incident Responce
Medium Lab·Incident Responselinux
Ivanti Connect Secure: CVE-2025-0282 Threat Hunt
Medium Lab·Incident Responselinux
Kansa
Medium Lab·Incident Responselinux
Live-Fire IR: Contain the Intrusion
Medium Lab·Incident Responselinux
Live-Fire IR: Ghost in the Machine
Hard Lab·Incident Responselinux
Live-Fire IR: The Miner That Won't Die
Hard Lab·Incident Responselinux
MOVEit Transfer: CVE-2023-34362 Data-Theft Hunt
Medium Lab·Incident Responselinux
PAN-OS GlobalProtect: CVE-2024-3400 Threat Hunt
Hard Lab·Incident Responselinux
Powershell for Persistence
Medium Lab·Incident Responsewindows
Ransomware Attack Simulation
Hard Lab·Incident Responsewindows
Ransomware IR: Triage the Intrusion
Hard Lab·Incident Responsewindows
Ransomware Incident Response
Hard Academy·Incident Responsewindows
ScreenConnect: CVE-2024-1709 Auth-Bypass Hunt
Medium Lab·Incident Responselinux
Services for Persistence
Medium Lab·Incident Responsewindows
Someone Phished Me!
Hard Lab·Incident Responsewindows
ToolShell: SharePoint Threat Hunt
Hard Lab·Incident Responsewindows
WordPress TakeOver Investigation
Easy Lab·Incident Responselinux
wp2shell: Detecting the WordPress Batch RCE
Medium Lab·Incident Responselinux
Active Directory Attack Investigation
Medium Lab·Investigationlinux
Apache Log Analysis
Easy Lab·Investigationlinux
DNS Tunneling
Medium Lab·Investigationlinux
HTTP Tunneling
Medium Lab·Investigationlinux
ICMP Tunneling
Easy Lab·Investigationlinux
SSH Tunneling
Hard Lab·Investigationwindows
Splashtop - Remote Access Software
Medium Lab·Investigationlinux
Foxtopia: Supply-Chain Dropper Analysis
Medium Lab·Malware Analysislinux
Kali365: Phishing-as-a-Service Kit Triage
Hard Lab·Malware Analysislinux
Phishing Analysis
Medium Academy·Phishing Analysislinux
Phishing Triage: Analyze a Reported Email
Medium Lab·Phishing Analysislinux
Akira Ransomware: Threat-Intel Case
Hard Lab·Threat Intelligencelinux
CTI: IOC Extraction and Infrastructure Pivoting
Medium Lab·Threat Intelligencelinux
Web Logs Analysis
Easy Lab·Web Attacklinux
Penetration Testing
72 items
Android Application Penetration Testing (ASM)
Easy Academy
Android Application Penetration Testing (Setup)
Medium Academy
Android Application Penetration Testing (Structure)
Easy Academy
Brute Force with THC-Hydra
Easy Academy
Business Logic Vulnerability
Medium Academy
CVE-2022-34265 Exploitation
Medium Academy
Cracking Passwords With john
Easy Academy
FTP Brute Force
Easy Academy
Finding IDOR Vulnerability
Easy Academy
Finding SQL Injection Vulnerability
Easy Academy
HTTP Basic Auth Brute Force
Easy Academy
Hydra Fundamental
Easy Academy
Learn Burp Suite
Easy Academy
Learn Dirb
Easy Academy
Learn Metasploit
Easy Academy
Learn Phishing Attack
Medium Academy
Learn SSH Tunneling
Medium Academy
Linux 101
Easy Academy
Login Brute Force
Medium Academy
Make Wordlist with Crunch
Easy Academy
Netcat for Penetration Testing
Easy Academy
Nmap Fundamental
Easy Academy
Penetration Testing Report Standards
Easy Academy
Practical ICS Security
Medium Academy
Privilege Escalation - Cronjobs
Easy Academy
Privilege Escalation - Exploiting Capabilities
Medium Academy
Privilege Escalation - Exploiting PATH
Easy Academy
Privilege Escalation - File Permission SUID
Easy Academy
Privilege Escalation - Introduction
Easy Academy
Privilege Escalation - LD Preload Hijacking
Medium Academy
Privilege Escalation - Misconfigured NFS
Easy Academy
Privilege Escalation - Password Mining
Easy Academy
Privilege Escalation - Su Brute Force
Easy Academy
Privilege Escalation - Sudo Right
Easy Academy
Privilege Escalation - Vulnerable Services
Easy Academy
Pwn with Metasploit
Easy Academy
Race Condition in Money Transfer
Hard Academy
SQL Brute Force
Easy Academy
SSH Brute Force
Easy Academy
Scan Network with Nmap
Easy Academy
VNC Brute Force
Easy Academy
Web Cache Deception Attack
Hard Academy
Web Cache Poisoning Attack
Hard Academy
WordPress Penetration Testing
Easy Academy
Brute Force Attack - HTTP
Medium Lab·Brute Force Attacklinux
Brute Force Labs - Final Exam
Medium Lab·Brute Force Attacklinux
Brute Force with THC-Hydra
Medium Lab·Brute Force Attacklinux
FTP Brute Force
Medium Lab·Brute Force Attacklinux
HTTP Brute Force
Medium Lab·Brute Force Attacklinux
Login Brute Force
Medium Lab·Brute Force Attacklinux
SQL Brute Force
Medium Lab·Brute Force Attacklinux
SSH Brute Force
Medium Lab·Brute Force Attacklinux
VNC Brute Force
Medium Lab·Brute Force Attacklinux
Apache Log Poisoning
Medium Lab·Introductionlinux
HTTP - CVE-2021-42013
Medium Lab·Introductionlinux
Hacking MSSQL Server - Enumerating
Medium Lab·Introductionlinux
Hacking MSSQL Server - Impersonate
Medium Lab·Introductionlinux
Hacking MSSQL Server - xp_cmdshell
Medium Lab·Introductionlinux
Hacking WordPress with Phishing Attack
Easy Lab·Introductionlinux
Learn WordPress Hacking
Easy Lab·Introductionlinux
Playground for Web Hackers
Easy Lab·Introductionlinux
Pwn with Metasploit
Medium Lab·Introductionlinux
Redis CVE-2022-0543
Medium Lab·Introductionlinux
SSH Tunneling
Medium Lab·Introductionlinux
Scan Network with Nmap
Medium Lab·Introductionlinux
Static Analysis with MobSF
Easy Lab·Introductionlinux
Tomcat Exploitation - Part 1
Medium Lab·Introductionlinux
Lsass Dump Analysis with Mimikatz
Medium Lab·Password Attackswindows
Protocol Hacking
Medium Lab·Protocol Hackinglinux
Hacking Challenge
Easy Lab·System Hackinglinux
System Hacking - ActiveMQ
Easy Lab·System Hackinglinux
System Hacking - Apache Flink
Medium Lab·System Hackinglinux
Web Attacks
99 items
Web Attacks: API BOLA (Broken Object Level Authorization)
Easy Lab·Access Controllinux
Web Attacks: Broken Function Level Authorization (BFLA)
Medium Lab·Access Controllinux
Web Attacks: File Download IDOR
Easy Lab·Access Controllinux
Web Attacks: IDOR by Order Enumeration
Medium Lab·Access Controllinux
Web Attacks: IDOR via Encoded ID
Medium Lab·Access Controllinux
Web Attacks: IDOR with Leaked UUID
Medium Lab·Access Controllinux
Web Attacks: Mass Assignment Privilege Escalation
Medium Lab·Access Controllinux
Web Attacks: Numeric IDOR
Easy Lab·Access Controllinux
Authentication Bypass
Easy Lab·Authenticationlinux
Authentication Bypass (Reverrse)
Medium Lab·Authenticationlinux
Authentication Bypass (Space)
Easy Lab·Authenticationlinux
Chain Lab
Easy Lab·Authenticationlinux
Juggling
Medium Lab·Authenticationlinux
Patlak Web Application
Medium Lab·Authenticationlinux
Web Attacks: JWT Algorithm Confusion (RS256 to HS256)
Hard Lab·Authenticationlinux
Web Attacks: JWT Signature Not Verified
Medium Lab·Authenticationlinux
Web Attacks: JWT Weak HMAC Secret
Medium Lab·Authenticationlinux
Web Attacks: Client-Side Price and Tier Trust
Medium Lab·Business Logiclinux
Web Attacks: Negative Quantity Price Manipulation
Medium Lab·Business Logiclinux
Web Attacks: Password Reset Token Not Bound to Account
Medium Lab·Business Logiclinux
Web Attacks: Payment Step Bypass
Medium Lab·Business Logiclinux
Web Attacks: Race Condition Double-Spend
Hard Lab·Business Logiclinux
PHP Strikes - CVE-2024-4577
Hard Lab·CVElinux
Rejetto - CVE-2024-23692
Hard Lab·CVElinux
Web CVE: Next.js Middleware Auth Bypass (CVE-2025-29927)
Medium Lab·CVElinux
Web CVE: Vite Dev Server Arbitrary File Read (CVE-2025-30208)
Medium Lab·CVElinux
Web CVE: aiohttp Path Traversal (CVE-2024-23334)
Easy Lab·CVElinux
Web Attacks: Boss - Acme Intranet (recon to root)
Hard Lab·Chainedlinux
Web Attacks: Boss - ReportPortal (SQLi to root)
Hard Lab·Chainedlinux
Web Attacks: Corporate Network Pivot (web RCE to internal)
Hard Lab·Chainedlinux
Code Execution
Medium Lab·Code Executionlinux
SCA - Bypass Forbidden Route Protection
Medium Lab·Code Reviewlinux
Source Code Analysis and Exploitation
Easy Lab·Code Reviewlinux
Source Code Analysis and Exploitation #2
Easy Lab·Code Reviewlinux
Web Attacks: White-Box SQLi to RCE Chain
Hard Lab·Code Reviewlinux
Whitebox Web Application Pentest
Easy Lab·Code Reviewlinux
Command Injection (Type 1)
Medium Lab·Command Injectionlinux
Command Injection (Type 2)
Medium Lab·Command Injectionlinux
Web Attacks: Deserialization Object Injection to Admin
Medium Lab·Deserializationlinux
Web Attacks: Node.js node-serialize RCE
Hard Lab·Deserializationlinux
Web Attacks: PHP Object Injection (unserialize)
Hard Lab·Deserializationlinux
Web Attacks: PyYAML Unsafe Load RCE
Medium Lab·Deserializationlinux
Web Attacks: Python Pickle Deserialization RCE
Hard Lab·Deserializationlinux
Web Attacks: LFI Source Disclosure via php://filter
Medium Lab·File Inclusionlinux
Web Attacks: LFI to RCE via Apache Log Poisoning
Hard Lab·File Inclusionlinux
Web Attacks: LFI to RCE via data:// Wrapper
Hard Lab·File Inclusionlinux
Web Attacks: Nginx Alias Traversal (off-by-slash)
Medium Lab·File Inclusionlinux
Web Attacks: Path Traversal (Arbitrary File Read)
Easy Lab·File Inclusionlinux
Web Attacks: Path Traversal Filter Bypass (non-recursive strip)
Medium Lab·File Inclusionlinux
File Upload
Medium Lab·File Uploadlinux
File Upload Vulnerability
Medium Lab·File Uploadlinux
Web Attacks: .htaccess Upload to RCE
Hard Lab·File Uploadlinux
Web Attacks: Unrestricted File Upload to Webshell (RCE)
Easy Lab·File Uploadlinux
Web Attacks: Upload Content-Type (MIME) Bypass
Medium Lab·File Uploadlinux
Web Attacks: Upload Extension Blocklist Bypass (.phtml)
Medium Lab·File Uploadlinux
Web Attacks: Upload Magic-Byte (getimagesize) Bypass
Hard Lab·File Uploadlinux
Web Attacks: GraphQL BOLA
Easy Lab·GraphQLlinux
Web Attacks: GraphQL Batching Brute-Force
Medium Lab·GraphQLlinux
Web Attacks: GraphQL Introspection Disclosure
Easy Lab·GraphQLlinux
Web Attacks: GraphQL Mutation Missing Authorization
Medium Lab·GraphQLlinux
Web Attacks: GraphQL Sensitive Field Exposure
Easy Lab·GraphQLlinux
Web Attacks: SQL Injection via GraphQL
Medium Lab·GraphQLlinux
Web Attacks: Directory Listing Backup Dump
Easy Lab·Information Disclosurelinux
Web Attacks: Exposed .env File
Easy Lab·Information Disclosurelinux
Web Attacks: Exposed .git Source Disclosure
Medium Lab·Information Disclosurelinux
Web Attacks: Hardcoded API Key in JavaScript
Medium Lab·Information Disclosurelinux
Web Attacks: Source Backup File Disclosure
Easy Lab·Information Disclosurelinux
Web Attacks: Blind NoSQL Injection ($regex extraction)
Hard Lab·NoSQL Injectionlinux
Web Attacks: NoSQL $where JavaScript Injection
Hard Lab·NoSQL Injectionlinux
Web Attacks: NoSQL Authentication Bypass (Operator Injection)
Medium Lab·NoSQL Injectionlinux
Web Attacks: NoSQL Operator Injection Data Leak
Medium Lab·NoSQL Injectionlinux
Web Attacks: NoSQL Query-String Operator Injection
Medium Lab·NoSQL Injectionlinux
Web Attacks: Blind Command Injection (OOB exfiltration)
Hard Lab·Out-of-Bandlinux
Web Attacks: Blind SSTI (OOB exfiltration)
Hard Lab·Out-of-Bandlinux
Web Attacks: Blind XSS (OOB session theft)
Hard Lab·Out-of-Bandlinux
Web Attacks: Prototype Pollution to Auth Bypass
Medium Lab·Prototype Pollutionlinux
Web Attacks: Prototype Pollution to RCE
Hard Lab·Prototype Pollutionlinux
Web Attacks: Prototype Pollution via constructor.prototype
Hard Lab·Prototype Pollutionlinux
Web Attacks: HTTP Request Smuggling (CL.TE)
Hard Lab·Request Smugglinglinux
Sqlmap for Beginners
Easy Lab·SQL Injectionlinux
Web Attacks: Boolean-Blind SQL Injection
Medium Lab·SQL Injectionlinux
Web Attacks: Error-Based SQL Injection
Medium Lab·SQL Injectionlinux
Web Attacks: SQL Injection Authentication Bypass
Easy Lab·SQL Injectionlinux
Web Attacks: UNION-Based SQL Injection
Easy Lab·SQL Injectionlinux
DNS Rebinding
Hard Lab·SSRFlinux
Web Attacks: SSRF Filter Bypass (IP encoding to IMDS user-data)
Medium Lab·SSRFlinux
Web Attacks: SSRF to Cloud Metadata (IMDS credential theft)
Medium Lab·SSRFlinux
Web Attacks: SSRF via gopher:// to Internal Redis
Hard Lab·SSRFlinux
SSTI Injection
Hard Lab·SSTIlinux
Web Attacks: Blind SSTI (Jinja2, out-of-band exfil)
Hard Lab·SSTIlinux
Web Attacks: SSTI Filter Bypass (Jinja2 /attr)
Hard Lab·SSTIlinux
Web Attacks: SSTI in Mako (RCE)
Medium Lab·SSTIlinux
Web Attacks: SSTI in Nunjucks (Node RCE)
Hard Lab·SSTIlinux
Web Attacks: Server-Side Template Injection (Jinja2 RCE)
Medium Lab·SSTIlinux
Web Attacks: DOM-Based XSS
Medium Lab·XSSlinux
Web Attacks: Reflected XSS (cookie theft)
Medium Lab·XSSlinux
Web Attacks: Stored XSS (admin cookie theft)
Medium Lab·XSSlinux
Web Attacks: XSS Blocklist Bypass
Medium Lab·XSSlinux
Web Attacks: XSS with CSP Bypass
Hard Lab·XSSlinux
Privilege Escalation
10 items
Copy Fail (CVE-2026-31431)
Easy SOC Hub
CVE-2024-3094 - Playground
Hard Lab·Linuxlinux
Cronjobs
Medium Lab·Linuxlinux
Exploiting PATH
Medium Lab·Linuxlinux
Looney Tunables
Medium Lab·Linuxlinux
Password Mining
Medium Lab·Linuxlinux
Privilege Escalation - Final Exam
Hard Lab·Linuxlinux
SUID
Medium Lab·Linuxlinux
Sudo Rights
Medium Lab·Linuxlinux
Vulnerable Service
Medium Lab·Linuxlinux
MITRE
18 items
MITRE: Credential Access: T1110.004
Medium Lab·Credential Accesswindows
MITRE: Credential Access: T1003-008
Medium Lab·Credential Accesslinux
MITRE: Credential Access: T1110.001
Medium Lab·Credential Accesswindows
MITRE: Credential Access: T1552.004
Medium Lab·Credential Accesslinux
MITRE: Defense Evasion: T1053.003
Hard Lab·Defense-Evasionlinux
MITRE: Defense Evasion: T1548.003
Medium Lab·Defense-Evasionlinux
MITRE: Defense Evasion: Masquerading
Medium Lab·Defense-Evasionlinux
MITRE: Defense Evasion: T1027.001
Hard Lab·Defense-Evasionlinux
MITRE: Defense Evasion: T1070.002
Medium Lab·Defense-Evasionlinux
MITRE: Defense Evasion: T1222.002
Medium Lab·Defense-Evasionlinux
MITRE: Defense Evasion: T1574.006
Hard Lab·Defense-Evasionlinux
MITRE: Discovery - T1087.001
Medium Lab·Discoverylinux
MITRE: Discovery Techniques
Medium Lab·Discoverylinux
MITRE: Discovery: T1040
Medium Lab·Discoverylinux
MITRE: Dumping Browsers: T1217, T1555.003, T1176
Medium Lab·Dumping Browserslinux
MITRE: Execution: T1059.004
Medium Lab·Executionlinux
MITRE: Operation Sneaky Sloth
Hard Lab·Finallinux
MITRE: Persistence: T1136.001
Medium Lab·Persistencelinux
Paths & Modules
46 items
Active Directory Forensics
Medium Module
Bug Hunter
Medium Career Path
Code Review and Exploitation
Medium Module
Cyber Threat Intelligence Analyst
Medium Career Path
Detecting Web Attacks
Medium Module
Hacking SQL Server (Begineer)
Medium Module
Introduction to Low-Level Research
Medium Module
Introduction to MQTT Protocol
Medium Module
Introduction to Penetration Testing
Medium Module
Learn Brute Force Attacks
Medium Module
Learn Linux Fundamentals
Medium Module
Learn Windows (OS) Fundamentals
Medium Module
Linux Privilege Escalation
Medium Module
Log Analysis RMM Softwares
Medium Module
MITRE ATT&CK: Credential Access
Medium Module
MITRE ATT&CK: Defense Evasion
Medium Module
MITRE / ATT&CK
Medium Module
Memory Forensics
Medium Module
Penetration Tester
Medium Career Path
SOC Analyst L1
Medium Career Path
SOC Analyst L2
Medium Career Path
Web App Security Exam Preparation
Medium Module
Web Application Pentester
Medium Career Path
WiFi Attack Detection Challenges
Medium Module
WiFi Penetration Testing
Medium Module
Windows Artifacts Analysis
Medium Module
Blue Team: Container Forensics & Detection Engineering
Hard Modulelinux
Blue Team: Digital Forensics & Log Analysis
Medium Modulelinux
Blue Team: Email & Threat Intelligence
Medium Modulelinux
Blue Team: Malware Analysis & Threat Hunting
Hard Modulelinux
Blue Team: Network & Host Forensics
Medium Modulelinux
Fraud Analyst
Medium Career Path
Fraud Analytics: AML, Crypto & Detection
Hard Modulelinux
Fraud Analytics: Payment, Card & Account Fraud
Medium Modulelinux
Network Pentest: Pivoting & Tunneling
Hard Modulelinux
Network Pentest: Service Exploitation
Medium Modulelinux
SOC Analyst L3
Hard Career Path
Web Attacks: CVEs, White-Box & Boss Chains
Hard Modulelinux
Web Attacks: Client-Side & Access Control
Medium Modulelinux
Web Attacks: Injection
Medium Modulelinux
Web Attacks: Recon, Out-of-Band & Smuggling
Medium Modulelinux
Web Attacks: SSRF, File Inclusion & Upload
Medium Modulelinux
Web Attacks: Template & Code Injection
Hard Modulelinux
Linux Server Hardening
Medium Hardening
Trace a Hacker
Medium SOC Hub
Windows Baseline Hardening
Medium Hardening
Digital Forensics
32 items
AnyDesk Log Analysis
Easy Academy
CyberChef for Security Analysts
Medium Academy
Detecting Directory Traversal Attacks
Medium Academy
Detecting HTTP Brute Force
Medium Academy
Detecting IDOR Attacks
Medium Academy
Detecting LFI and RFI Attacks
Medium Academy
Detecting Open Redirect Attacks
Medium Academy
Detecting SQL Injection Attacks
Medium Academy
Detecting XSS Attacks
Medium Academy
Introduction to Forensics and Incident Response
Medium Academy
Introduction to Linux System Hardening
Medium Academy
Introduction to MITRE ATT&CK Framework
Easy Academy
Learn Cyber Kill Chain
Easy Academy
Learn Log Analysis of the Security Products
Medium Academy
Learn NetworkMiner
Easy Academy
Learn Splunk
Easy Academy
Learn VirusTotal (VT)
Easy Academy
Log Analysis with Linux Commands
Medium Academy
Malware Analysis Environment Setup
Easy Academy
Phishing Email Analysis
Easy Academy
Practical Amcache Forensics
Medium Academy
TShark for Security Analysts
Medium Academy
TeamViewer Log Forensics
Medium Academy
Timesketch / Forensic timeline analysis
Medium Academy
Windows Forensics - Jump List
Easy Academy
Windows Forensics - LNK File
Easy Academy
Windows Forensics - RDP Cache
Easy Academy
Windows Forensics - Recycle Bin
Easy Academy
Windows Forensics - User Assist
Easy Academy
Windows Forensics Registry 1
Easy Academy
Windows Forensics Registry 2
Easy Academy
Wireshark Tips for SOC Analysts
Easy Academy
Fraud Analytics
25 items
Fraud Analytics: Account Takeover & Identity
Medium Academy
Fraud Analytics: Crypto & Blockchain Tracing
Medium Academy
Fraud Analytics: Crypto Mixer Detection
Hard Academy
Fraud Analytics: Detection Engineering
Hard Academy
Fraud Analytics: Fundamentals
Easy Academy
Fraud Analytics: Insider & Accounting Fraud
Medium Academy
Fraud Analytics: Money Mule Networks
Medium Academy
Fraud Analytics: Payment & Card Fraud
Easy Academy
Money Laundering & Structuring
Easy Academy
Fraud Analytics: AML Structuring (Smurfing)
Medium Lab·AMLlinux
Fraud Analytics: Money Mule Network
Hard Lab·AMLlinux
Fraud Analytics: Account Takeover Triage
Medium Lab·Account Fraudlinux
Fraud Analytics: Synthetic Identity
Hard Lab·Account Fraudlinux
Ad Fraud & Mobile Attribution
Medium Academy·Ad Fraudlinux
Ad Fraud: Catch the Click Flooder
Medium Lab·Ad Fraudlinux
Ad Fraud: Catch the Click Injection
Medium Lab·Ad Fraudlinux
Ad Fraud: Catch the Install Farm
Hard Lab·Ad Fraudlinux
Fraud Analytics: Crypto Mixer Detection
Hard Lab·Cryptolinux
Fraud Analytics: Crypto Tracing to an Exchange
Medium Lab·Cryptolinux
Fraud Analytics: Train a Fraud Model
Hard Lab·Detectionlinux
Fraud Analytics: Write a Fraud Detection Rule
Hard Lab·Detectionlinux
Fraud Analytics: Benford's Law (Fabricated Numbers)
Medium Lab·Insiderlinux
Fraud Analytics: Card Testing Detection
Easy Lab·Payment Fraudlinux
Fraud Analytics: Card-Not-Present (CNP) Fraud
Medium Lab·Payment Fraudlinux
Fraud Analytics: Chargeback (Friendly Fraud)
Medium Lab·Payment Fraudlinux
New In Cyber
23 items
3-way Handshake
Easy Academy
About the Computer
Easy Academy
FTP Protocol Fundamentals
Easy Academy
Hashing and Encoding for Cybersecurity Beginners
Easy Academy
IP (Internet Protocol)
Easy Academy
Linux Commands
Easy Academy
Linux Network Settings
Easy Academy
Linux Permissions
Easy Academy
Linux Scheduler Tasks
Easy Academy
Network Devices - Part 1
Easy Academy
Protocols - DHCP Fundamentals
Easy Academy
Protocols - DNS Fundamentals
Easy Academy
Protocols - FTP Fundamentals
Easy Academy
Protocols - HTTP Fundamentals
Easy Academy
Protocols - ICMP Fundamentals
Easy Academy
SOC Fundamentals
Easy Academy
SQL Fundamentals
Easy Academy
Web Application Technologies
Easy Academy
Windows Commands
Easy Academy
Windows Network Settings
Easy Academy
Windows Scheduler Tasks
Easy Academy
Windows Users and Groups
Easy Academy
Wireshark Fundamentals
Easy Academy
WiFi
11 items
Detecting Fake AP
Medium Lab·Detecting Attackslinux
Detecting Hidden WiFi Network
Easy Lab·Detecting Attackslinux
Detecting KARMA Attack
Medium Lab·Detecting Attackslinux
Detecting WiFi Pineapple Activities
Medium Lab·Detecting Attackslinux
PMF Network Analysis
Medium Lab·Detecting Attackslinux
Ethical Wireless Hacking Challenges
Hard Lab·Gamelinux
WEP Crack (Live)
Medium Lab·WEPlinux
Uncovering Hidden SSID
Medium Lab·WPA2linux
WPA2 Cracking (Live)
Medium Lab·WPA2linux
WPA2 Enterprise Hacking
Hard Lab·WPA2linux
WPA2 Network Pentest
Hard Lab·WPA2linux
Network Pentest
9 items
Network Pentest: Double Pivot across three segments
Hard Lab·Pivotinglinux
Network Pentest: Recon-Driven Pivot (internal port scan)
Medium Lab·Pivotinglinux
Network Pentest: Reverse SOCKS Pivot with chisel (no SSH)
Hard Lab·Pivotinglinux
Network Pentest: SSH Local Port Forward to a localhost-only service
Medium Lab·Pivotinglinux
Network Pentest: Anonymous SMB Share Loot
Easy Lab·Service Exploitationlinux
Network Pentest: Anonymous rsync Module Loot
Easy Lab·Service Exploitationlinux
Network Pentest: PostgreSQL COPY FROM PROGRAM RCE
Medium Lab·Service Exploitationlinux
Network Pentest: SNMP Public Community Disclosure
Easy Lab·Service Exploitationlinux
Network Pentest: Unauthenticated Redis to RCE (SSH key write)
Hard Lab·Service Exploitationlinux
Password Cracking
8 items
Crack Docx File
Medium Lab·Generallinux
Crack PDF File
Medium Lab·Generallinux
Crack Private Key
Medium Lab·Generallinux
Crack Rar File
Medium Lab·Generallinux
Crack Shadow File
Easy Lab·Generallinux
Crack Zip File
Medium Lab·Generallinux
Cracking Passwords With john
Medium Lab·Generallinux
Make Wordlist with Crunch
Medium Lab·Generallinux
Bug Bounty
7 items
Documentation and Logging
Easy Academy
Introduction to Bug Bounty
Easy Academy
Learn File Upload Exploitation
Easy Academy
Learn Open Redirect Attacks
Easy Academy
Learn XSS Exploitations
Easy Academy
Payment System Hacking
Medium Academy
Practical Information Gathering
Medium Academy
IoT Hacking
7 items
MQTT - Configure Wireshark
Easy Academy
MQTT - Introduction
Easy Academy
MQTT - Setup
Easy Academy
MQTT - Topics
Medium Academy
MQTT Attack Analysis
Hard Lab·MQTTlinux
MQTT Exploitation
Hard Lab·MQTTlinux
Smart Plug Hack
Hard Lab·Real Scenarioslinux
Malware
7 items
ClickFix
Medium SOC Hub
Gorilla
Easy SOC Hub
Maldoc Analysis
Easy SOC Hub
Malware Infection
Easy SOC Hub
Quasar RAT
Medium SOC Hub
Sliver C2
Medium SOC Hub
Soup Dealer
Medium SOC Hub
Cyber Threat Intelligence
6 items
CTI Methodologies and Models
Medium Academy
Human intelligence (HUMINT)
Easy Academy
Introduction to Cyber Threat Intelligence
Medium Academy
Practical Open Source Intelligence
Medium Academy
Threat Group Profiling
Medium Academylinux
Threat Profiling: Map an Intrusion
Medium Lablinux
Malware Analysis
6 items
Analysis of Malicious Documents
Easy Academy
Basic Dynamic Analysis
Medium Academy
Basic Static Analysis
Medium Academy
Practical Android Malware Analysis
Hard Academy
Windows Internals
Medium Academy
X86 Assembly and Reverse Engineering
Hard Academy
WiFi Security
6 items
WiFi Hacking (Aircrack-ng Tools)
Easy Academy
WiFi Hacking (Configuration)
Medium Academy
WiFi Hacking (Information Gathering)
Medium Academy
WiFi Hacking (Packets and Communication)
Easy Academy
WiFi Hacking (Understanding the Access Point)
Easy Academy
WiFi Hacking (Windows Systems)
Medium Academy
Mobile
5 items
Android Application Pentesting with ADB
Medium Academy
Mobile App Analysis: APK Recon
Medium Lab·Androidlinux
Mobile App Analysis: Exported Component Exploitation
Hard Lab·Androidlinux
Mobile App Analysis: Insecure Communication
Medium Lab·Androidlinux
Mobile App Analysis: Insecure Data Storage
Medium Lab·Androidlinux
AWS
3 items
EC2 Cryptojacking
Easy SOC Hub
Magecart
Easy SOC Hub
S3 SSE-C
Easy SOC Hub
Defend System
3 items
Analyzing Live Attack
Medium Lab·Live Attackslinux
Hacked Redis Server Part-1
Hard Lab·Live Attackslinux
Hacked Redis Server Part-2
Hard Lab·Live Attackslinux
3 items
Fake Recruitment
Easy SOC Hub
Phishing
Easy SOC Hub
RDP Phishing
Medium SOC Hub
Defense Evasion
2 items
Blind Stop
Easy SOC Hub
Tunnelling
Easy SOC Hub
Persistence
2 items
LOLBin Carnival
Easy SOC Hub
Web to Shell
Easy SOC Hub
RAT
2 items
AsyncRAT
Easy SOC Hub
RemcosRat
Easy SOC Hub
Ransomware
2 items
Black Basta
Medium SOC Hub
Mimic
Easy SOC Hub
Threat Hunting
2 items
Introduction to Threat Hunting with Yara
Medium Academy
Loki Command & Control
Medium Academy
dfir
2 items
Kuzeybank: Web Server Attack Analysis
Medium Lab
NorthBank: SOC Attack Analysis (Threat Hunt)
Medium Lab
web
2 items
MediBook: Broken Appointment Access Control
Easy Lab
ShopFast: Blind SQL Injection in Product Search
Easy Lab
APT28
1 item
APT28 Fancy Bear
Medium SOC Hub
Active Directory
1 item
Introduction to Active Directory
Easy Academywindows
Execution
1 item
Silent Harvest
Easy SOC Hub
Fraud Detection
1 item
Fraud Detection 101 - Finance & E-Commerce
Medium Academy
Google Cloud
1 item
Exfiltration
Medium SOC Hub
Hayabusa
1 item
Hayabusa
Medium SOC Hub
KAPE
1 item
KAPE
Easy SOC Hub
MemProcFS
1 item
MemProcFS
Medium SOC Hub
Network Hacking
1 item
Packet Manipulation with Scapy
Medium Academy
NoName
1 item
NoName
Medium SOC Hub
Programming
1 item
Python Challenges
Medium Lab·Pythonlinux
Secure Coding
1 item
RXSS Filter Bypass
Easy Academy
Stealer
1 item
MassLogger
Easy SOC Hub
Want your team on these?
New content ships every month. Book a walkthrough and we will tailor a track for your organization.
Request access