Create a free account to save progress, earn certificates, and join the community.

Practice

Labs, simulations & CTF

Learn a technique in a guided lab, work a full incident in a simulation, or prove it with no hints in a CTF.

Learn one technique, with hints and a walkthrough when you need them. 30–45 min.

Difficulty

Hints

Category

LabBeginner
Gridline — Broken Access Control
Guided · 30 min
33 solved100 XPStart →
LabBeginner
Meridian Freight — SQL Injection Auth Bypass
Guided · 30 min
24 solved100 XPStart →
LabBeginner
Ledgerly — Insecure Direct Object Reference
Guided · 30 min
22 solved150 XPStart →
LabBeginner
Gatewright — Open Redirect
Guided · 30 min
17 solved150 XPStart →
LabBeginner
PixelSearch — Reflected XSS
Guided · 30 min
19 solved150 XPStart →
LabBeginner
Roost — Stored Cross-Site Scripting
Guided · 30 min
14 solved150 XPStart →
LabBeginner
Lumen — Weak Password-Reset Token
Guided · 30 min
13 solved150 XPStart →
LabBeginner
File Hash Reputation
Guided · 30 min
12 solved200 XPStart →
LabBeginner
Indicators of Compromise
Guided · 30 min
4 solved200 XPStart →
LabBeginner
Linux Authentication Logs
Guided · 30 min
9 solved200 XPStart →
LabBeginner
Archivr — Path Traversal
Guided · 30 min
13 solved200 XPStart →
LabBeginner
Introduction to SOC Workflow
Guided · 30 min
6 solved200 XPStart →
LabBeginner
SSH Brute Force Detection
Guided · 30 min
4 solved200 XPStart →
LabBeginner
Windows Event Log Analysis
Guided · 30 min
6 solved200 XPStart →
LabBeginner
MITRE ATT&CK Mapping
Guided · 30 min
1 solved250 XPStart →
LabBeginner
DNS Log Analysis
Guided · 30 min
1 solved250 XPStart →
LabBeginner
RDP Failed Login Analysis
Guided · 30 min
4 solved250 XPStart →
LabBeginner
Wazuh Alert Triage
Guided · 30 min
4 solved250 XPStart →
LabIntermediate
NetDiag — OS Command Injection
Guided · 30 min
17 solved300 XPStart →
LabIntermediate
Credential Dumping Investigation
Guided · 45 min
1 solved300 XPStart →
LabIntermediate
Relay — Insecure Deserialization
Guided · 30 min
6 solved300 XPStart →
LabIntermediate
Meridian Admin — JWT alg:none Bypass
Guided · 30 min
9 solved300 XPStart →
LabIntermediate
PowerShell Attack Investigation
Guided · 45 min
2 solved300 XPStart →
LabIntermediate
Tenderpay — Race Condition
Guided · 30 min
4 solved300 XPStart →
LabIntermediate
Linkscope — Server-Side Request Forgery
Guided · 30 min
9 solved300 XPStart →
LabIntermediate
Command & Control Beacon Analysis
Guided · 45 min
1 solved350 XPStart →
LabIntermediate
DNS Tunnelling Detection
Guided · 45 min
1 solved350 XPStart →
LabIntermediate
Wazuh Rule Tuning & False Positive Reduction
Guided · 45 min
1 solved350 XPStart →
LabAdvanced
Welcomely — Server-Side Template Injection
Guided · 30 min
10 solved450 XPStart →
LabAdvanced
Vaultline — Weak JWT Secret
Guided · 30 min
8 solved450 XPStart →
LabAdvanced
APT Intrusion Investigation
Guided · 60 min
3 solved500 XPStart →
LabAdvanced
Detection Engineering: Building a Rule That Survives Contact
Guided · 60 min
2 solved500 XPStart →
LabAdvanced
Memory & Malware Investigation
Guided · 60 min
2 solved500 XPStart →
LabAdvanced
Enterprise Ransomware Investigation
Guided · 60 min
2 solved500 XPStart →
LabAdvanced
Advanced Threat Hunting
Guided · 60 min
2 solved500 XPStart →
LabAdvanced
Full SOC Incident Response
Guided · 60 min
2 solved600 XPStart →

Gridline — Broken Access Control

Meridian Freight — SQL Injection Auth Bypass

Ledgerly — Insecure Direct Object Reference

Gatewright — Open Redirect

PixelSearch — Reflected XSS

Roost — Stored Cross-Site Scripting

Lumen — Weak Password-Reset Token

File Hash Reputation

Indicators of Compromise

Linux Authentication Logs

Archivr — Path Traversal

Introduction to SOC Workflow

SSH Brute Force Detection

Windows Event Log Analysis

MITRE ATT&CK Mapping

DNS Log Analysis

RDP Failed Login Analysis

Wazuh Alert Triage

NetDiag — OS Command Injection

Credential Dumping Investigation

Relay — Insecure Deserialization

Meridian Admin — JWT alg:none Bypass

PowerShell Attack Investigation

Tenderpay — Race Condition

Linkscope — Server-Side Request Forgery

Command & Control Beacon Analysis

DNS Tunnelling Detection

Wazuh Rule Tuning & False Positive Reduction

Welcomely — Server-Side Template Injection

Vaultline — Weak JWT Secret

APT Intrusion Investigation

Detection Engineering: Building a Rule That Survives Contact

Memory & Malware Investigation

Enterprise Ransomware Investigation

Advanced Threat Hunting

Full SOC Incident Response