Search

Threat Hunting with Zui

Learn how to hunt for threats using Zui.

medium

Script Static Analysis

Learn why attackers rely on scripts, and analyze various real-world samples.

medium

Network Monitoring with Zeek

Use Zeek logs to trace beaconing, DNS tunnelling, exfiltration, and noisy detections.

medium

Sigma Language

Introduction to Sigma: the vendor-agnostic detection language. Learn to read and write Sigma rules.

medium

Detection Engineering With Snort

Build production-ready Snort detections: behaviour rules, tuning, suppression, and IOC lifecycle.

medium

Detection Rules Development

Explore the types of detection, how to use them in Elastic, and the process behind effective rules.

medium

Post-Incident Activity

Understand Post-Incident Activity, the last phase of the Incident Response Lifecycle.

medium

Response and Recovery

Understand the Containment, Eradication, and Recovery phase of the Incident Response Lifecycle.

medium

Detection and Analysis

Understand the Detection and Analysis phase of the Incident Response Lifecycle.

medium

Defender for Cloud: CSPM

Learn about Microsoft Defender for Cloud CSPM capabilities.

medium

Preparation

Understand the Preparation phase of the Incident Response lifecycle.

easy

Cache Me Outside

Can you find this ex hacker turned outdoorsman?

medium

Free Challenge

Traffic Analysis Pitfalls

Learn about Visibility, Context, and Gaps in the traffic Analysis.

medium

SQL Injection Introduction

Learn how to detect and exploit SQL Injection vulnerabilities.

easy

Intro to Detection Engineering

Learn what Detection Engineering is, how it works in a SOC, and the mindset required to build effective detections.

easy

CVE-2026-42945: Nginx Rift

Exploit NGINX Rift, an unauthenticated heap overflow RCE in NGINX's rewrite module since 2008.

easy

CVE-2026-46300: Fragnesia

Exploit Fragnesia, an LPE that surfaced due to dirtyfrag's patch.

easy

DevSecOps Basics

Learn about the story of DevSecOps, Software Development Models & Shifting Left.

medium

Forward

Now is the time to move forward in this AD challenge.

medium

Silent Monitor

Enumerate a running internal service, exploit a vulnerable web application, pivot through the system, and crack your way to root.

medium

Windows Jump

Use privilege escalation knowledge to jump from a guest user to SYSTEM.

medium

Operation Coldstart

Wake up the staging server everyone left behind.

easy

Operation Promotion

One engagement stands between you and your next title.

easy

Domino

Chain together vulnerabilities in a cascading attack, where every piece you find knocks over the next.

medium