Create a free account to save progress, earn certificates, and join the community.

Practice

Labs, simulations & CTF

Learn a technique in a guided lab, work a full incident in a simulation, or prove it with no hints in a CTF.

Difficulty

Hints

Category

LabBeginner
Gridline — Broken Access Control
Guided · 30 min
33 solved100 XPStart →
LabBeginner
Meridian Freight — SQL Injection Auth Bypass
Guided · 30 min
24 solved100 XPStart →
LabBeginner
Ledgerly — Insecure Direct Object Reference
Guided · 30 min
22 solved150 XPStart →
LabBeginner
Gatewright — Open Redirect
Guided · 30 min
17 solved150 XPStart →
LabBeginner
PixelSearch — Reflected XSS
Guided · 30 min
19 solved150 XPStart →
LabBeginner
Roost — Stored Cross-Site Scripting
Guided · 30 min
14 solved150 XPStart →
LabBeginner
Lumen — Weak Password-Reset Token
Guided · 30 min
13 solved150 XPStart →
LabBeginner
File Hash Reputation
Guided · 30 min
12 solved200 XPStart →
LabBeginner
Indicators of Compromise
Guided · 30 min
4 solved200 XPStart →
LabBeginner
Linux Authentication Logs
Guided · 30 min
9 solved200 XPStart →
LabBeginner
Archivr — Path Traversal
Guided · 30 min
13 solved200 XPStart →
LabBeginner
Introduction to SOC Workflow
Guided · 30 min
6 solved200 XPStart →
LabBeginner
SSH Brute Force Detection
Guided · 30 min
4 solved200 XPStart →
LabBeginner
Windows Event Log Analysis
Guided · 30 min
6 solved200 XPStart →
LabBeginner
MITRE ATT&CK Mapping
Guided · 30 min
1 solved250 XPStart →
LabBeginner
DNS Log Analysis
Guided · 30 min
1 solved250 XPStart →
LabBeginner
RDP Failed Login Analysis
Guided · 30 min
4 solved250 XPStart →
LabBeginner
Wazuh Alert Triage
Guided · 30 min
4 solved250 XPStart →
LabIntermediate
NetDiag — OS Command Injection
Guided · 30 min
17 solved300 XPStart →
LabIntermediate
Credential Dumping Investigation
Guided · 45 min
1 solved300 XPStart →
LabIntermediate
Relay — Insecure Deserialization
Guided · 30 min
6 solved300 XPStart →
LabIntermediate
Meridian Admin — JWT alg:none Bypass
Guided · 30 min
9 solved300 XPStart →
LabIntermediate
PowerShell Attack Investigation
Guided · 45 min
2 solved300 XPStart →
LabIntermediate
Tenderpay — Race Condition
Guided · 30 min
4 solved300 XPStart →
LabIntermediate
Linkscope — Server-Side Request Forgery
Guided · 30 min
9 solved300 XPStart →
LabIntermediate
Command & Control Beacon Analysis
Guided · 45 min
1 solved350 XPStart →
LabIntermediate
DNS Tunnelling Detection
Guided · 45 min
1 solved350 XPStart →
LabIntermediate
Wazuh Rule Tuning & False Positive Reduction
Guided · 45 min
1 solved350 XPStart →
LabAdvanced
Welcomely — Server-Side Template Injection
Guided · 30 min
10 solved450 XPStart →
LabAdvanced
Vaultline — Weak JWT Secret
Guided · 30 min
8 solved450 XPStart →
LabAdvanced
APT Intrusion Investigation
Guided · 60 min
3 solved500 XPStart →
LabAdvanced
Detection Engineering: Building a Rule That Survives Contact
Guided · 60 min
2 solved500 XPStart →
LabAdvanced
Memory & Malware Investigation
Guided · 60 min
2 solved500 XPStart →
LabAdvanced
Enterprise Ransomware Investigation
Guided · 60 min
2 solved500 XPStart →
LabAdvanced
Advanced Threat Hunting
Guided · 60 min
2 solved500 XPStart →
LabAdvanced
Full SOC Incident Response
Guided · 60 min
2 solved600 XPStart →
SimulationProIntermediate
Brute-Force Authentication Investigation
Scored on process · 35 min
0 solved350 XPStart →
SimulationProAdvanced
Suspicious PowerShell Activity
Scored on process · 50 min
1 solved500 XPStart →
SimulationProIntermediate
Enterprise Network Outage
Scored on process · 40 min
0 solved350 XPStart →
SimulationProAdvanced
Compromised Linux Server
Scored on process · 50 min
0 solved500 XPStart →
SimulationProAdvanced
Suspicious DNS Traffic
Scored on process · 45 min
0 solved500 XPStart →
SimulationProExpert
Web Server Compromise
Scored on process · 60 min
0 solved650 XPStart →
SimulationProAdvanced
Kerberoasting: Active Directory Compromise
Scored on process · 50 min
0 solved500 XPStart →
SimulationProExpert
Cloud Security Incident: The Leaked Access Key
Scored on process · 60 min
0 solved650 XPStart →
SimulationProAdvanced
Malware Analysis: Dissecting a Phishing Payload
Scored on process · 50 min
0 solved500 XPStart →
SimulationProAdvanced
API Security Assessment
Scored on process · 50 min
0 solved500 XPStart →
SimulationProExpert
Active Directory Attack Path
Scored on process · 70 min
0 solved750 XPStart →
SimulationProAdvanced
External Network Pentest
Scored on process · 60 min
0 solved600 XPStart →
SimulationProAdvanced
Linux Privilege Escalation: Foothold to Root
Scored on process · 50 min
0 solved500 XPStart →
SimulationProIntermediate
Red Team Recon Operation
Scored on process · 40 min
0 solved400 XPStart →
SimulationProIntermediate
SQL Injection Exploitation
Scored on process · 40 min
0 solved400 XPStart →
SimulationProAdvanced
SSRF Attack Path
Scored on process · 50 min
0 solved500 XPStart →
SimulationProAdvanced
Web Application Pentest
Scored on process · 60 min
0 solved650 XPStart →
SimulationProAdvanced
Windows Privilege Escalation: Foothold to SYSTEM
Scored on process · 50 min
0 solved500 XPStart →
CTFVery Easy
Secret Admin Panel
Capture the flag · 8 min
126 solved100 XPStart →
CTFVery Easy
HTTP Headers
Capture the flag · 6 min
100 solved50 XPStart →
CTFVery Easy
Developer Notes
Capture the flag · 5 min
99 solved50 XPStart →
CTFVery Easy
Cookie Monster
Capture the flag · 8 min
92 solved100 XPStart →
CTFEasy
VaultSync — Recon Shell
Capture the flag · 30 min
72 solved400 XPStart →
CTFEasy
Mail Forensics — Header Hunt
Capture the flag · 10 min
71 solved250 XPStart →
CTFEasy
Single-byte XOR
Capture the flag · 12 min
66 solved200 XPStart →
CTFEasy
Vigenère
Capture the flag · 12 min
62 solved250 XPStart →
CTFEasy
ShopBot — Prompt Injection 101
Capture the flag · 10 min
27 solved300 XPStart →
CTFEasy
Stego Image
Capture the flag · 12 min
56 solved100 XPStart →
CTFEasy
Simple Cipher
Capture the flag · 8 min
58 solved100 XPStart →
CTFEasy
Robots Explorer
Capture the flag · 10 min
70 solved100 XPStart →
CTFEasy
Search Challenge
Capture the flag · 15 min
54 solved200 XPStart →
CTFEasy
README Leak
Capture the flag · 8 min
57 solved100 XPStart →
CTFEasy
Metadata Hunter
Capture the flag · 15 min
53 solved200 XPStart →
CTFEasy
Log Explorer
Capture the flag · 8 min
50 solved100 XPStart →
CTFEasy
JWT Explorer
Capture the flag · 10 min
53 solved100 XPStart →
CTFEasy
Hidden Sitemap
Capture the flag · 8 min
54 solved100 XPStart →
CTFEasy
Git History
Capture the flag · 15 min
46 solved100 XPStart →
CTFEasy
Forgotten Backup
Capture the flag · 12 min
48 solved120 XPStart →
CTFEasy
Employee Directory
Capture the flag · 12 min
46 solved150 XPStart →
CTFEasy
NimbusPay — SQL Injection Auth Bypass
Capture the flag · 20 min
43 solved100 XPStart →
CTFEasy
HelpHub — IDOR / Broken Access Control
Capture the flag · 20 min
49 solved120 XPStart →
CTFMedium
SUID Treasure Hunt
Capture the flag · 35 min
43 solved900 XPStart →
CTFMedium
Session Fixation
Capture the flag · 30 min
28 solved700 XPStart →
CTFMedium
PCAP Investigation
Capture the flag · 35 min
40 solved800 XPStart →
CTFMedium
CORS Misconfiguration
Capture the flag · 35 min
39 solved800 XPStart →
CTFMedium
Browser History Forensics
Capture the flag · 30 min
39 solved800 XPStart →
CTFMedium
Bytecode — License Validator
Capture the flag · 20 min
23 solved400 XPStart →
CTFMedium
NetTrace — PCAP Credentials
Capture the flag · 15 min
35 solved350 XPStart →
CTFMedium
MemScope — Memory Dump
Capture the flag · 12 min
31 solved350 XPStart →
CTFMedium
RSA — Low Exponent
Capture the flag · 20 min
31 solved400 XPStart →
CTFMedium
NimbusOps — Kill Chain (multi-flag)
Capture the flag · 25 min
30 solved800 XPStart →
CTFMedium
Helios — System Prompt Extraction
Capture the flag · 15 min
9 solved400 XPStart →
CTFMedium
TownWall — Stored XSS
Capture the flag · 20 min
31 solved350 XPStart →
CTFMedium
PixelSearch — Reflected XSS (filter bypass)
Capture the flag · 20 min
29 solved300 XPStart →
CTFMedium
DocVault — Directory Traversal
Capture the flag · 20 min
23 solved350 XPStart →
CTFMedium
Meridian Admin — JWT alg:none
Capture the flag · 25 min
16 solved450 XPStart →
CTFMedium
Ledgerly API — Broken Object Authorization
Capture the flag · 20 min
14 solved500 XPStart →
CTFMedium
GreetGen — Server-Side Template Injection
Capture the flag · 35 min
22 solved220 XPStart →
CTFMedium
NetDiag — OS Command Injection
Capture the flag · 30 min
27 solved200 XPStart →
CTFHard
Race Condition Wallet
Capture the flag · 45 min
22 solved1500 XPStart →
CTFHard
Password Reset Poisoning
Capture the flag · 45 min
13 solved1200 XPStart →
CTFHard
Kerberoast Lab
Capture the flag · 60 min
8 solved2500 XPStart →
CTFHard
IAM Privilege Escalation
Capture the flag · 45 min
13 solved2000 XPStart →
CTFHard
GTFOBins Escape
Capture the flag · 40 min
25 solved1500 XPStart →
CTFHard
BloodHound Path
Capture the flag · 45 min
15 solved2000 XPStart →
CTFHard
Kubernetes Nightmare — Cluster Audit
Capture the flag · 40 min
21 solved3500 XPStart →
CTFHard
Ghost Protocol — Active Directory Audit
Capture the flag · 60 min
17 solved2500 XPStart →
CTFHard
Cloud Apocalypse — AWS Audit
Capture the flag · 45 min
15 solved900 XPStart →
CTFHard
Crackme — Password Check
Capture the flag · 40 min
9 solved700 XPStart →
CTFHard
Vault — Guardrail Bypass
Capture the flag · 25 min
2 solved600 XPStart →
CTFHard
PrivEsc Audit — Find the Root Path
Capture the flag · 25 min
19 solved800 XPStart →
CTFHard
Docker Escape Audit — Spot the Misconfig
Capture the flag · 25 min
17 solved900 XPStart →
CTFHard
BillFlow — XXE Invoice Importer
Capture the flag · 30 min
13 solved700 XPStart →
CTFHard
ShopEasy — Business Logic Flaw
Capture the flag · 25 min
13 solved600 XPStart →
CTFInsane
Project Chimera
Capture the flag · 180 min
16 solved15000 XPStart →
CTFInsane
Codelivly Grand Finale
Capture the flag · 300 min
15 solved25000 XPStart →
CTFInsane
Ghost Network
Capture the flag · 120 min
16 solved9000 XPStart →
CTFInsane
Bank Heist
Capture the flag · 120 min
9 solved8000 XPStart →
CTFInsane
MegaCorp SOC Investigation
Capture the flag · 120 min
21 solved6000 XPStart →
CTFInsane
Red vs Blue
Capture the flag · 120 min
25 solved6000 XPStart →
CTFInsane
Nation-State Attack Simulation
Capture the flag · 180 min
26 solved10000 XPStart →
CTFInsane
BlackVault Banking
Capture the flag · 90 min
9 solved5000 XPStart →

Gridline — Broken Access Control

Meridian Freight — SQL Injection Auth Bypass

Ledgerly — Insecure Direct Object Reference

Gatewright — Open Redirect

PixelSearch — Reflected XSS

Roost — Stored Cross-Site Scripting

Lumen — Weak Password-Reset Token

File Hash Reputation

Indicators of Compromise

Linux Authentication Logs

Archivr — Path Traversal

Introduction to SOC Workflow

SSH Brute Force Detection

Windows Event Log Analysis

MITRE ATT&CK Mapping

DNS Log Analysis

RDP Failed Login Analysis

Wazuh Alert Triage

NetDiag — OS Command Injection

Credential Dumping Investigation

Relay — Insecure Deserialization

Meridian Admin — JWT alg:none Bypass

PowerShell Attack Investigation

Tenderpay — Race Condition

Linkscope — Server-Side Request Forgery

Command & Control Beacon Analysis

DNS Tunnelling Detection

Wazuh Rule Tuning & False Positive Reduction

Welcomely — Server-Side Template Injection

Vaultline — Weak JWT Secret

APT Intrusion Investigation

Detection Engineering: Building a Rule That Survives Contact

Memory & Malware Investigation

Enterprise Ransomware Investigation

Advanced Threat Hunting

Full SOC Incident Response

Brute-Force Authentication Investigation

Suspicious PowerShell Activity

Enterprise Network Outage

Compromised Linux Server

Suspicious DNS Traffic

Web Server Compromise

Kerberoasting: Active Directory Compromise

Cloud Security Incident: The Leaked Access Key

Malware Analysis: Dissecting a Phishing Payload

API Security Assessment

Active Directory Attack Path

External Network Pentest

Linux Privilege Escalation: Foothold to Root

Red Team Recon Operation

SQL Injection Exploitation

SSRF Attack Path

Web Application Pentest

Windows Privilege Escalation: Foothold to SYSTEM

Secret Admin Panel

HTTP Headers

Developer Notes

Cookie Monster

VaultSync — Recon Shell

Mail Forensics — Header Hunt

Single-byte XOR

Vigenère

ShopBot — Prompt Injection 101

Stego Image

Simple Cipher

Robots Explorer

Search Challenge

README Leak

Metadata Hunter

Log Explorer

JWT Explorer

Hidden Sitemap

Git History

Forgotten Backup

Employee Directory

NimbusPay — SQL Injection Auth Bypass

HelpHub — IDOR / Broken Access Control

SUID Treasure Hunt

Session Fixation

PCAP Investigation