Dashboard

Lab User

Profile Logout

Bug Report Support

Dashboard
Search
Ongoing Labs 0
Latest Additions
Community Labs
Earn Credentials
Verifiable Badges
Windows Security
Reconnaissance
- Getting Started
- Host Discovery
- SMB
- MSSQL
- IIS
Basic Exploitation
- With Metasploit
- Pentesting
Post Exploitation
- With Metasploit
Service Exploitation
- RDP
- SMB
- WinRM
- WMI
- MSSQL
- IIS
Privilege Escalation
- Basic
Maintaining Access
- Basics
Cloud Security
AWS Cloud Security
- IAM
- S3
- DynamoDB
- API Gateway
- Lambda
- Databases
- EC2
- ECS and ECR
- Defense
Bootcamp
- Recordings
Linux Security
Linux Basics
- Getting Started
- Basics
Reconnaissance
Exploitation
Post Exploitation
Privilege Escalation
- Getting Started
- Basic
Pivoting
- Getting Started
- Basics
Maintaining Access
- Getting Started
- Basics
MITRE ATTACK
Exploit Research
- Getting Started
- Buffer Overflow
Bootcamp
- Recordings
WebApp Pentesting Basics
Web Application Basics
- Getting Started
- Basics
Tools of the Trade
- Getting Started
- Basics
OWASP Top 10
Webapp CVEs
- Getting Started
- Basics
Bootcamp
- Recordings
Advanced Priv-Esc
Windows
Linux
Container Security
Intro to Containers
Container/Host Security
Docker Image Security
Miscellaneous
- Docker Security Tools
Securing Docker
- Securing Docker
Bootcamp
- Recordings
DevSecOps
DevOps Basics
DevSecOps Basics
Pipeline Basics
Fix The Code
- Web Applications
Bootcamp
- Recordings
WiFi Security
Basics
Personal Networks
- Offline Cracking
- Live Cracking
Enterprise Networks
Advanced Labs
Forensics
- Basics
Bootcamp
- Recordings
Reverse Engineering
Linux
- GDB Basics
- Static Binary Analysis
Password Cracking
Hashes
- Getting Started
- Basics
File Passwords
- Basics
Forensics
Disk Forensics
- Getting Started
- Basics
Memory Forensics
- Basics
Offensive Python
Interacting with Files
Live Interactions
IoT Security
Device Attacks
- Getting Started
- Bootloader
Network Attacks
- MQTT
- AMQP
Other Topics
Network Recon
Real World WebApps
Traffic Analysis
- Tshark Fu
WebApp CVEs
- 2022
- 2021
- 2020
- 2019
- 2018
- 2017
- 2016
- Older CVEs
Metasploit
Network Pivoting
- Single Pivots
Infrastructure Attacks
- Memcached
- Squid Proxy
- MongoDB
- Apache
- Nginx
Privilege Escalation
Deliberately Vulnerable
- Web Apps
Forensics
- Browser
Firmware Analysis
- Wi-Fi Routers
Secure Coding
Malware Analysis
- Simple Samples
DevSecOps
- CI/CD Tools
Code Repositories
Endpoint Security
- osquery
- OSQuery MITRE
- Sysdig
- Malware Scanner
- HIDS
Persistence
- Maintaining Access
- Data Exfiltration
Linux Runtime Analysis
- Profiling Tools
Log Analysis
REST
MITRE ATTACK Linux
Service Exploitation
- Linux Services
- WebApp Frameworks
Web Technologies
- WebSockets
- Bot Attack
Android Pentesting
- Basics
OWASP Top 10
- Single Page Applications
- Getting Started
Network Pentesting
- DNS
- Git
- Recon
- Subversion (SVN)
Advanced Exercises
Weekly CTF
- All
Capture the Flags
PA Course Labs
Tshark Unleashed
- Course Labs
Python For Pentesters
- Course Labs
VoIP Traffic Analysis
- Course Labs
Javascript For Pentesters
- Course Labs
Pandas For Pentesters
- Course Labs
Embedded/IoT Linux
- Course Labs
WAP Challenges
- Course Labs
Web App Pentesting
- Course Labs
Pentesting Challenges
- Course Labs
x86 Asm and Shellcoding
- Course Labs
x86_64 Asm and Shellcoding
- Course Labs
GNU Debugger
- Course Labs
Data Science and Machine Learning for InfoSec
- Course Labs
Coming Soon
Win Badges
Earn Certificates

Dashboard

Vulnerable File Upload Widget

CVE-2018-7600

Laravel Unserialize RCE

Rails DoubleTap RCE

Privacy Policy
ToS