Skip to main content

1,537 results

Threat Hunting: Introduction
room

Threat Hunting: Introduction

Learn the foundational concepts, approaches, and techniques of threat hunting.

easy

Free Walkthrough
NoScope: Finding RCE
room

NoScope: Finding RCE

NoScope found an Alf.io RCE zero-day (CVE-2026-35482). Exploit it manually and watch AI solve it.

medium

Free Walkthrough
Senior Security Analyst Intro
room

Senior Security Analyst Intro

Explore the duties and exciting opportunities of a SOC Level 2 analyst.

easy

Free Walkthrough
The Oversharing Container
room

The Oversharing Container

A container without its own role inherits the host's. See how this is an issue of its own.

medium

MAX Walkthrough
The Leaky Metadata
room

The Leaky Metadata

IMDSv1 turns any SSRF bug into credential theft. Find it, fix it, and build without it.

medium

MAX Walkthrough
The Unpatched Instance
room

The Unpatched Instance

Patch debt accumulates silently. Learn to find, fix, and prevent it using Systems Manager.

medium

MAX Walkthrough
The Exposed Port
room

The Exposed Port

An open management port is a standing invitation. Find it, close it, and build without it.

medium

MAX Walkthrough
The Invisible Network
room

The Invisible Network

VPC Flow Logs were not enabled. The network was invisible.

medium

MAX Walkthrough
The Forgotten NACL
room

The Forgotten NACL

Security groups protect instances. NACLs protect subnets. This one was forgotten.

medium

MAX Walkthrough
The Not So Private Subnet
room

The Not So Private Subnet

The subnet is named private. The route table says otherwise. Find it, fix it, and build it right.

medium

MAX Walkthrough
The Shared Snapshot
room

The Shared Snapshot

Sharing is caring, but sometimes oversharing is a security breach.

medium

MAX Walkthrough
The Wide-Open Security Group
room

The Wide-Open Security Group

Learn how to ensure your Security Groups are well-scoped.

medium

MAX Walkthrough
The Blind Bucket
room

The Blind Bucket

You have locked the bucket and encrypted the data, but there is a missing ingredient.

medium

MAX Walkthrough
The Silence of the IAMs
room

The Silence of the IAMs

You cannot secure what you do not see. Understand why silent IAM changes can lead to security incidents.

medium

MAX Walkthrough
The Overpowered Role
room

The Overpowered Role

Investigate how an over-permissive role can be leveraged to escalate permissions and compromise an infrastructure.

medium

MAX Walkthrough
The Plain Bucket
room

The Plain Bucket

Learn to secure S3 data at rest by finding unencrypted buckets, fixing them, and building securely.

medium

MAX Walkthrough
The Forgotten Access Key
room

The Forgotten Access Key

An IAM user has long-lived, unrotated access keys. See how to identify, remediate, and prevent this security misconfiguration.

medium

MAX Walkthrough
The Leaky Bucket
room

The Leaky Bucket

Understand one of the most common S3 misconfigurations and learn how to remediate it.

medium

MAX Walkthrough
The Over-Privileged User
room

The Over-Privileged User

Dive into a common IAM misconfiguration: a user is "temporarily" granted far too much power, then learn to spot it and scope it down.

medium

MAX Walkthrough
Introduction to AWS Security Tools
room

Introduction to AWS Security Tools

Learn and explore the most common AWS Security Tools.

easy

MAX Walkthrough
Introduction to Cloud Storage
room

Introduction to Cloud Storage

Learn about storage services and capabilities in AWS.

easy

MAX Walkthrough
Introduction to Cloud Computing
room

Introduction to Cloud Computing

Learn about compute capabilities and workloads in AWS.

easy

MAX Walkthrough
Introduction to Cloud Networking
room

Introduction to Cloud Networking

Learn about networking concepts and services applied to the AWS cloud.

easy

MAX Walkthrough
Showing 24 of 1537 results

We use cookies to ensure you get the best user experience. For more information see our cookie policy.