What do you want
to learn?
Every lab is tagged with the skill it teaches, so you can drill one weakness instead of bouncing between everything.
🐛
Web Application Security
Injection, traversal, deserialisation, broken access control.
0 labs
🔍
Reconnaissance
Service enumeration, content discovery, information leakage.
0 labs
🔑
Credential Access
Password reuse, secret extraction, token theft.
0 labs
👥
Privilege Escalation
sudo abuse, SUID, writable services, kernel exploits.
0 labs
📡
Network Services
Exploiting exposed daemons and legacy network protocols.
0 labs
🔑
Cryptography
Weak ciphers, key reuse, broken password hashing.
0 labs
🔍
Forensics & OSINT
Disk artefacts, logs, hidden data.
0 labs
〈
Reverse Engineering
Static and dynamic analysis of binaries.
0 labs
☁
Cloud Security
IAM, storage exposure, serverless and metadata endpoints.
0 labs
🔥
Detection & Incident Response
Log tampering, detection evasion, containment.
0 labs