Search

SOC L2 Alert Triage

Learn how to triage escalated alerts and respond to cyber threats.

easy

AI & Automation in Detection Engineering

Learn to automate detection rules development and how AI can boost this process effectively.

medium

Source Code Review: PHP

Learn the basics of source code review for PHP.

easy

Premium Walkthrough

AI Security Threats

Explore the vulnerabilities AI introduces, how attackers exploit it, and how defenders fight back.

easy

Web Frameworks: Code Review

Read web app source like an attacker: trace user input to dangerous sinks, triage with Semgrep.

medium

CVE-2026-46331: pedit COW

Exploit pedit COW, a copy-on-write flaw in the Linux kernel's packet-editing action.

easy

Fools Mate, Revenge

Do you have what it takes to defeat me and claim your prize?

medium

Free Challenge

Fools Mate

Can you bypass the engine?

easy

Free Challenge

Advanced Packet Analysis

Triage alerts, reassemble streams, extract files, and detect protocol abuse via Wireshark & TShark.

medium

CTI for Alert Triage

Explore how security analysts can use CTI in their daily operations.

easy

Threat Hunting: Introduction

Learn the foundational concepts, approaches, and techniques of threat hunting.

easy

NoScope: Finding RCE

NoScope found an Alf.io RCE zero-day (CVE-2026-35482). Exploit it manually and watch AI solve it.

medium

Senior Security Analyst Intro

Explore the duties and exciting opportunities of a SOC Level 2 analyst.

easy

The Oversharing Container

A container without its own role inherits the host's. See how this is an issue of its own.

medium

The Leaky Metadata

IMDSv1 turns any SSRF bug into credential theft. Find it, fix it, and build without it.

medium

The Unpatched Instance

Patch debt accumulates silently. Learn to find, fix, and prevent it using Systems Manager.

medium

The Exposed Port

An open management port is a standing invitation. Find it, close it, and build without it.

medium

The Invisible Network

VPC Flow Logs were not enabled. The network was invisible.

medium

The Forgotten NACL

Security groups protect instances. NACLs protect subnets. This one was forgotten.

medium

The Not So Private Subnet

The subnet is named private. The route table says otherwise. Find it, fix it, and build it right.

medium

The Shared Snapshot

Sharing is caring, but sometimes oversharing is a security breach.

medium

The Wide-Open Security Group

Learn how to ensure your Security Groups are well-scoped.

medium

The Blind Bucket

You have locked the bucket and encrypted the data, but there is a missing ingredient.

medium