Hacking Labs

137 hands-on labs + 75 AI-generated puzzles across 13 domains — web, AD, cloud, mobile, network, crypto, forensics, OSINT, RE, DevSecOps, AI/ML, hardware & blockchain. Capture the flag, earn XP.

// domain

New to hacking? Start with a Learning Path.

open academy

13 domains·137 labs·6 career tracks·capstone exams·real CVEs

open academy

// filter by

Memory Forensics with Volatility

Run pslist/cmdline/malfind against a memory image to spot the injected process.

medium+45xp

forensicsINTERACTIVEmedium+45 XP

Write a YARA Rule

Examine 4 binary samples, write a YARA rule that fires on the 2 malicious ones.

hard+55xp

forensicsINTERACTIVEhard+55 XP

Live Process Triage

Examine `ps aux` + `netstat` output. One process is exfilling data to the internet.

easy+30xp

forensicsINTERACTIVEeasy+30 XP

MFT Timeline Reconstruction

Build a forensic timeline from $MFT entries. Find the first-seen timestamp of the dropper.

hard+55xp

forensicsINTERACTIVEhard+55 XP

File Carving from Raw Disk

A raw disk image has a deleted JPG. Find its magic bytes, carve it out, identify it.

medium+45xp

forensicsINTERACTIVEmedium+45 XP

Windows Event-Log Triage

Parse 50 Windows Security events. One records a successful logon from an external IP.

easy+35xp

forensicsINTERACTIVEeasy+35 XP

Volatile Memory Acquisition

Acquire RAM from a running host without writing to the target's own disk (anti-contamination).

easy+35xp

forensicsINTERACTIVEeasy+35 XP

Detect DLL Injection in Memory

Find the injected DLL hiding in a process via Volatility-style memdump diff.

medium+45xp

forensicsINTERACTIVEmedium+45 XP

Browser History Carve from RAM

Carve URLs out of a Chrome process RAM dump — find the C2 panel URL the attacker visited.

medium+45xp

forensicsINTERACTIVEmedium+45 XP

Spot C2 Beaconing in Zeek Logs

Detect a low-and-slow C2 beacon by analysing inter-arrival times in `conn.log`.

medium+45xp

forensicsINTERACTIVEmedium+45 XP

Static Malware Triage

Identify a malware family from imports + strings + behavioural fingerprints, no execution.

hard+55xp

forensicsINTERACTIVEhard+55 XPPRO

ATT&CK-Mapped Threat Hunt

Hunt T1059.001 (PowerShell) + T1218.005 (Mshta) chains across 50 SIEM-style events.

hard+55xp

forensicsINTERACTIVEhard+55 XP