Search

GhostLock: CVE-2026-43499

Investigate GhostLock CVE-2026-43499, analyse Linux futex evidence, and plan kernel mitigation.

medium

Web Frameworks: Python

Review Django and Flask source for framework-specific sinks, then exploit each on the lab machine.

medium

Web Frameworks: Java

Review Spring Boot source, find the framework-specific sinks, and exploit each on the lab machine.

medium

Brr

You've been called in to assess an OT environment.

easy

Premium Challenge

SOC L2 Alert Triage

Learn how to triage escalated alerts and respond to cyber threats.

easy

AI & Automation in Detection Engineering

Learn to automate detection rules development and how AI can boost this process effectively.

medium

Source Code Review: PHP

Learn the basics of source code review for PHP.

easy

AI Security Threats

Explore the vulnerabilities AI introduces, how attackers exploit it, and how defenders fight back.

easy

Web Frameworks: Code Review

Read web app source like an attacker: trace user input to dangerous sinks, triage with Semgrep.

medium

CVE-2026-46331: pedit COW

Exploit pedit COW, a copy-on-write flaw in the Linux kernel's packet-editing action.

easy

Fools Mate, Revenge

Do you have what it takes to defeat me and claim your prize?

medium

Free Challenge

Fools Mate

Can you bypass the engine?

easy

Free Challenge

Advanced Packet Analysis

Triage alerts, reassemble streams, extract files, and detect protocol abuse via Wireshark & TShark.

medium

CTI for Alert Triage

Explore how security analysts can use CTI in their daily operations.

easy

Threat Hunting: Introduction

Learn the foundational concepts, approaches, and techniques of threat hunting.

easy

NoScope: Finding RCE

NoScope found an Alf.io RCE zero-day (CVE-2026-35482). Exploit it manually and watch AI solve it.

medium

Senior Security Analyst Intro

Explore the duties and exciting opportunities of a SOC Level 2 analyst.

easy

The Oversharing Container

A container without its own role inherits the host's. See how this is an issue of its own.

medium

The Leaky Metadata

IMDSv1 turns any SSRF bug into credential theft. Find it, fix it, and build without it.

medium

The Unpatched Instance

Patch debt accumulates silently. Learn to find, fix, and prevent it using Systems Manager.

medium

The Exposed Port

An open management port is a standing invitation. Find it, close it, and build without it.

medium

The Invisible Network

VPC Flow Logs were not enabled. The network was invisible.

medium

The Forgotten NACL

Security groups protect instances. NACLs protect subnets. This one was forgotten.

medium