Browse labs and rooms
Filter by topic, path, room type, and difficulty. Answers stay server-side.
Prompt Injection Primer
Understand why untrusted instructions can manipulate AI workflows.
Least Privilege Lab
Review fake cloud permissions and identify risky access.
Windows Event Clues
Learn how Windows event IDs help investigations.
First Alert Triage
Investigate a fake suspicious login alert and decide what to do next.
Finding to Fix
Write a clear issue summary, evidence, risk, and remediation.
OWASP Mini Map
A beginner-friendly overview of common web risk categories.
HTTP Requests Under the Hood
Understand methods, headers, status codes, and cookies before touching tools.
DNS Detective
Explore how names become IPs and how DNS records support web infrastructure.
Ports, Services and Banners
Learn how ports map to services and why service banners help defenders and testers.
Responsible Disclosure Basics
Understand permission, scope, safe reporting, and why screenshots matter.
Start Safe: Your First Lab
Launch a simulated training machine, read the rules, and submit your first proof token.