// Virtual labs
Pick your range.
142 browser-based labs across pentest, red team, blue team, cloud, malware analysis and SOC operations.
Kali Linux: Recon Fundamentals
Master nmap, gobuster and enumeration workflow against a vulnerable target network.
Active Directory: Kerberoasting & Lateral Movement
Compromise a multi-domain Windows forest using Kerberoasting, AS-REP roasting and DCSync.
AWS Cloud: IAM Privilege Escalation
Exploit misconfigured IAM policies and over-permissive S3 buckets in a live AWS sandbox.
SOC Analyst: SIEM Triage with Splunk
Investigate a live intrusion using SPL queries, MITRE mappings and timeline analysis.
Malware Analysis: Banking Trojan Reversing
Reverse a polymorphic banking trojan in an isolated sandbox. Extract C2 IOCs and unpacking routine.
Web Security: OWASP Top 10 Live Range
Chain SQLi, XSS, IDOR and SSRF against a deliberately vulnerable banking app.
Azure: Entra ID Tenant Compromise
Phish, replay tokens and abuse conditional access gaps to take over an Entra ID tenant.
Purple Team: Threat Emulation vs. Detections
Run Atomic Red Team techniques and tune detections in a connected SIEM. Iterate until you can see every move.
Windows 11: Local Privilege Escalation
Enumerate misconfigurations and unquoted service paths to escalate from low-priv user to SYSTEM.