Locked
Reconnaissance
DNS Footprint
Map a target's DNS footprint with whois, nslookup and dig — recon without ever touching the box.
whoisnslookupdig
Opens soonPractice
Every lab, in one place.
What each lab teaches, the tools it puts in your hands, and how hard it is. Search by topic, or filter by difficulty.
8labs
1playable right now
24tools you will use
Locked
Scanning
Network Scan
Sweep a subnet with nmap and hping3 to find live hosts, open ports and the services behind them.
nmaphping3TCP flags
Opens soonLocked
Enumeration
Enumeration
Pull usernames, shares and service data straight off a live host across SMB, SNMP and LDAP.
SMBSNMPLDAP
Opens soonLocked
Vulnerability
Vulnerability Assessment
Scan for known weaknesses, read the findings and rate each one with CVSS like a real engagement.
NessusCVSSCVE
Opens soonLocked
Web Application
Hack a Web Application
Walk the OWASP Top 10 on a live-feeling app — intercept, tamper and inject your way inside.
Burp SuitesqlmapOWASP
Opens soonLocked
IoT & Smart Home
Hack & Defend a Smart Home
A 3D smart villa with 75+ devices — break five real IoT weaknesses, then lock every one down.
MQTTWiresharkReplay
Opens soonLocked
Cloud Security
Build & Secure a Cloud
Run a simulated cloud console — resource groups, networks, VMs and IAM — then pass the audit.
AzureIAMKey Vault
Opens soonLive
IT Service Management
ITSM Service Desk
Work a live incident through a real service desk — triage, SLA, escalation, change and review.
ITIL 4TicketingSLA
Start