<span class="bg-gradient-to-r from-white via-white to-white/70 bg-clip-text text-transparent">Free Cybersecurity Labs

Broken Authentication Sandbox

Analyze insecure session management and credential brute-force vulnerabilities in a controlled environment.

Security Test Automation Framework

Complete Security Test Automation Framework in a deterministic practice workspace without depending on unavailable host, cloud, hardware, desktop, or multi-node infrastructure.

File Upload Vulnerabilities

Practice File Upload Vulnerabilities by producing and reviewing portable evidence without requiring unavailable host, cloud, hardware, or multi-node access.

Penetration Testing: Metasploitable Practice

Practice Penetration Testing: Metasploitable Practice in a deterministic local workspace without unavailable external infrastructure.

DHCP Failover & Dynamic DNS Updates

Practice DHCP Failover & Dynamic DNS Updates in a deterministic local workspace without unavailable external infrastructure.

AI Red Team — Model Extraction

Practice AI Red Team — Model Extraction in a deterministic local workspace without unavailable external infrastructure.

Trivy — Image Scanning Gate

Practice Trivy — Image Scanning Gate in a deterministic local workspace without unavailable external infrastructure.

GitLab Self-Hosted Runner Fleet

Practice GitLab Self-Hosted Runner Fleet in a deterministic local workspace without unavailable external infrastructure.

BGP Security & Route Hijacking Defense

Practice BGP Security & Route Hijacking Defense by producing and reviewing portable evidence without requiring unavailable host, cloud, hardware, or multi-node access.

DNS Server Administration with BIND9

Practice DNS Server Administration with BIND9 in a deterministic local workspace without unavailable external infrastructure.

Database Encryption at Rest & in Transit

Implement transparent data encryption, column-level encryption, and TLS for database connections.

Terraform Security & IaC Scanning

Practice Terraform Security & IaC Scanning by producing and reviewing portable evidence without requiring unavailable host, cloud, hardware, or multi-node access.

Mobile Application Security Testing

Complete Mobile Application Security Testing in a deterministic practice workspace without depending on unavailable host, cloud, hardware, desktop, or multi-node infrastructure.

Blue Team Detection & Response

Practice Blue Team Detection & Response in a deterministic local workspace without unavailable external infrastructure.

Rundeck — Self-Service Ops

Practice Rundeck — Self-Service Ops in a deterministic local workspace without unavailable external infrastructure.

Container Escape & Runtime Exploitation

Complete Container Escape & Runtime Exploitation in a deterministic practice workspace without depending on unavailable host, cloud, hardware, desktop, or multi-node infrastructure.

Systemd Service Hardening

Author and audit a hardened systemd unit file without requiring systemd to run inside the practice container.

TLS/SSL Certificate Management

Practice TLS/SSL Certificate Management by producing and reviewing portable evidence without requiring unavailable host, cloud, hardware, or multi-node access.

Bare Metal — Tinkerbell at Scale

Practice Bare Metal — Tinkerbell at Scale in a deterministic local workspace without unavailable external infrastructure.

ROP Chain Development — Advanced

Practice ROP Chain Development — Advanced in a deterministic local workspace without unavailable external infrastructure.

Threat Modeling for Development Teams

Complete Threat Modeling for Development Teams in a deterministic practice workspace without depending on unavailable host, cloud, hardware, desktop, or multi-node infrastructure.

Chaos Engineering — Litmus at Scale

Practice Chaos Engineering — Litmus at Scale in a deterministic local workspace without unavailable external infrastructure.

Network Security: Firewalls, VPNs & IDS/IPS

Practice Network Security: Firewalls, VPNs & IDS/IPS in a deterministic local workspace without unavailable external infrastructure.

Privilege Escalation on Linux & Windows

Complete Privilege Escalation on Linux & Windows in a deterministic practice workspace without depending on unavailable host, cloud, hardware, desktop, or multi-node infrastructure.

Advanced Web Exploitation Sandbox

Practice Advanced Web Exploitation Sandbox in a deterministic local workspace without unavailable external infrastructure.

Platform Engineering — IDP with Backstage

Practice Platform Engineering — IDP with Backstage in a deterministic local workspace without unavailable external infrastructure.

BGP — Anycast at Scale

Practice BGP — Anycast at Scale in a deterministic local workspace without unavailable external infrastructure.

Server Administration: Debian Server Hardening

Practice Server Administration: Debian Server Hardening in a deterministic local workspace without unavailable external infrastructure.

Quantum-Resistant Cryptography Migration

Complete Quantum-Resistant Cryptography Migration in a deterministic practice workspace without depending on unavailable host, cloud, hardware, desktop, or multi-node infrastructure.

GCP Security Command Center

Practice GCP Security Command Center by producing and reviewing portable evidence without requiring unavailable host, cloud, hardware, or multi-node access.

Observability — OpenTelemetry at Scale

Practice Observability — OpenTelemetry at Scale in a deterministic local workspace without unavailable external infrastructure.

NetFlow — 100G Analysis

Practice NetFlow — 100G Analysis in a deterministic local workspace without unavailable external infrastructure.

Active Directory Security Assessment

Complete Active Directory Security Assessment in a deterministic practice workspace without depending on unavailable host, cloud, hardware, desktop, or multi-node infrastructure.

LLM Serving — vLLM with PagedAttention

Practice LLM Serving — vLLM with PagedAttention in a deterministic local workspace without unavailable external infrastructure.

Docker Swarm — Overlay Networking

Practice Docker Swarm — Overlay Networking in a deterministic local workspace without unavailable external infrastructure.

Kernel Tuning — 100k Connections

Practice Kernel Tuning — 100k Connections in a deterministic local workspace without unavailable external infrastructure.

AI Cost — GPU FinOps

Practice AI Cost — GPU FinOps in a deterministic local workspace without unavailable external infrastructure.

Vulnerability Assessment & Risk Rating

Complete Vulnerability Assessment & Risk Rating in a deterministic practice workspace without depending on unavailable host, cloud, hardware, desktop, or multi-node infrastructure.

AI Model Registry — MLflow at Scale

Practice AI Model Registry — MLflow at Scale in a deterministic local workspace without unavailable external infrastructure.

VPN Configuration with WireGuard

Practice VPN Configuration with WireGuard by producing and reviewing portable evidence without requiring unavailable host, cloud, hardware, or multi-node access.

SQL Server Authentication Bypass

Practice SQL Server Authentication Bypass by producing and reviewing portable evidence without requiring unavailable host, cloud, hardware, or multi-node access.

DDoS Mitigation & Traffic Analysis

Practice DDoS Mitigation & Traffic Analysis by producing and reviewing portable evidence without requiring unavailable host, cloud, hardware, or multi-node access.

Dynamic Application Security Testing (DAST)

Complete Dynamic Application Security Testing (DAST) in a deterministic practice workspace without depending on unavailable host, cloud, hardware, desktop, or multi-node infrastructure.

Packet Analysis with Wireshark/tshark

Practice Packet Analysis with Wireshark/tshark by producing and reviewing portable evidence without requiring unavailable host, cloud, hardware, or multi-node access.

Sigstore — Keyless Signing

Practice Sigstore — Keyless Signing in a deterministic local workspace without unavailable external infrastructure.

Web Server Exploitation with Metasploitable

Practice Web Server Exploitation with Metasploitable by producing and reviewing portable evidence without requiring unavailable host, cloud, hardware, or multi-node access.

Kali Linux: Vulnerability Scanning & Exploitation

Practice Kali Linux: Vulnerability Scanning & Exploitation in a deterministic local workspace without unavailable external infrastructure.

Artifact Signing & SBOM Generation

Complete Artifact Signing & SBOM Generation in a deterministic practice workspace without depending on unavailable host, cloud, hardware, desktop, or multi-node infrastructure.

Serverless Security Testing

Practice Serverless Security Testing by producing and reviewing portable evidence without requiring unavailable host, cloud, hardware, or multi-node access.

Web Server Log Analysis & Threat Detection

Practice Web Server Log Analysis & Threat Detection in a deterministic local workspace without unavailable external infrastructure.

Steganography & Covert Channel Detection

Complete Steganography & Covert Channel Detection in a deterministic practice workspace without depending on unavailable host, cloud, hardware, desktop, or multi-node infrastructure.

Cockpit & SSSD — AD Integration

Practice Cockpit & SSSD — AD Integration in a deterministic local workspace without unavailable external infrastructure.

Backup & Disaster Recovery

Practice Backup & Disaster Recovery in a deterministic local workspace without unavailable external infrastructure.

LVM Thin Provisioning, Snapshots & Rollback

Practice LVM Thin Provisioning, Snapshots & Rollback in a deterministic local workspace without unavailable external infrastructure.

WiFi — WPA3 Enterprise

Practice WiFi — WPA3 Enterprise in a deterministic local workspace without unavailable external infrastructure.

FinOps — Multi-Cloud Cost at Scale

Practice FinOps — Multi-Cloud Cost at Scale in a deterministic local workspace without unavailable external infrastructure.

Elasticsearch Shard Allocation

Practice Elasticsearch Shard Allocation in a deterministic local workspace without unavailable external infrastructure.

EVPN-VXLAN — Data Center Fabric

Practice EVPN-VXLAN — Data Center Fabric in a deterministic local workspace without unavailable external infrastructure.

Cloud Penetration Testing (AWS/Azure/GCP)

Complete Cloud Penetration Testing (AWS/Azure/GCP) in a deterministic practice workspace without depending on unavailable host, cloud, hardware, desktop, or multi-node infrastructure.

AppSec — Semgrep 500 Rules

Practice AppSec — Semgrep 500 Rules in a deterministic local workspace without unavailable external infrastructure.

802.1X — NAC with FreeRADIUS

Practice 802.1X — NAC with FreeRADIUS in a deterministic local workspace without unavailable external infrastructure.

Label Studio — Human in the Loop

Practice Label Studio — Human in the Loop in a deterministic local workspace without unavailable external infrastructure.

Nginx Load Balancer — Health Checks

Practice Nginx Load Balancer — Health Checks in a deterministic local workspace without unavailable external infrastructure.

Nomad — 1k Jobs

Practice Nomad — 1k Jobs in a deterministic local workspace without unavailable external infrastructure.

Linux Kernel Heap Exploitation & SMEP Bypass

Practice Linux Kernel Heap Exploitation & SMEP Bypass in a deterministic local workspace without unavailable external infrastructure.

ONNX Runtime — Edge Inference

Practice ONNX Runtime — Edge Inference in a deterministic local workspace without unavailable external infrastructure.

GitOps Security with ArgoCD

Complete GitOps Security with ArgoCD in a deterministic practice workspace without depending on unavailable host, cloud, hardware, desktop, or multi-node infrastructure.

Intrusion Detection with Suricata

Practice Intrusion Detection with Suricata by producing and reviewing portable evidence without requiring unavailable host, cloud, hardware, or multi-node access.

iptables/nftables Firewall

Practice iptables/nftables Firewall in a deterministic local workspace without unavailable external infrastructure.

System Hardening: CIS Benchmarks & Compliance

Practice System Hardening: CIS Benchmarks & Compliance in a deterministic local workspace without unavailable external infrastructure.

GPU Orchestration — NVIDIA K8s

Practice GPU Orchestration — NVIDIA K8s in a deterministic local workspace without unavailable external infrastructure.

Wireless Network Security Assessment

Practice Wireless Network Security Assessment by producing and reviewing portable evidence without requiring unavailable host, cloud, hardware, or multi-node access.

AWS IAM Security & Policy Analysis

Practice AWS IAM Security & Policy Analysis by producing and reviewing portable evidence without requiring unavailable host, cloud, hardware, or multi-node access.

Reverse Proxy & Load Balancer Security

Secure reverse proxy and load balancer configurations for high availability.

Network Segmentation with VLANs

Practice Network Segmentation with VLANs by producing and reviewing portable evidence without requiring unavailable host, cloud, hardware, or multi-node access.

Symmetric Encryption & Key Management

Complete Symmetric Encryption & Key Management in a deterministic practice workspace without depending on unavailable host, cloud, hardware, desktop, or multi-node infrastructure.

Postfix + Dovecot Mail Stack

Practice Postfix + Dovecot Mail Stack in a deterministic local workspace without unavailable external infrastructure.

Auditd — Compliance at Scale

Practice Auditd — Compliance at Scale in a deterministic local workspace without unavailable external infrastructure.

Web Server Hardening CIS Benchmark

Practice Web Server Hardening CIS Benchmark in a deterministic local workspace without unavailable external infrastructure.

NodeGoat: Node.js Security Vulnerabilities

Exploit security vulnerabilities specific to Node.js applications using NodeGoat.

DNS Security & Cache Poisoning Defense

Practice DNS Security & Cache Poisoning Defense by producing and reviewing portable evidence without requiring unavailable host, cloud, hardware, or multi-node access.

Memory Safety & Buffer Overflow Exploitation

Complete Memory Safety & Buffer Overflow Exploitation in a deterministic practice workspace without depending on unavailable host, cloud, hardware, desktop, or multi-node infrastructure.

Federated Learning with Flower

Practice Federated Learning with Flower in a deterministic local workspace without unavailable external infrastructure.

RBAC Design & Implementation

Complete RBAC Design & Implementation in a deterministic practice workspace without depending on unavailable host, cloud, hardware, desktop, or multi-node infrastructure.

Hardware Side-Channel — Power Analysis

Practice Hardware Side-Channel — Power Analysis in a deterministic local workspace without unavailable external infrastructure.

Web Application Firewall Bypass

Practice Web Application Firewall Bypass by producing and reviewing portable evidence without requiring unavailable host, cloud, hardware, or multi-node access.

CI/CD Pipeline Security

Practice CI/CD Pipeline Security by producing and reviewing portable evidence without requiring unavailable host, cloud, hardware, or multi-node access.

Penetration Testing Methodology (PTES)

Complete Penetration Testing Methodology (PTES) in a deterministic practice workspace without depending on unavailable host, cloud, hardware, desktop, or multi-node infrastructure.

Performance — k6 at 1M RPS

Practice Performance — k6 at 1M RPS in a deterministic local workspace without unavailable external infrastructure.

Runtime Protection with Sysdig/Falco

Complete Runtime Protection with Sysdig/Falco in a deterministic practice workspace without depending on unavailable host, cloud, hardware, desktop, or multi-node infrastructure.

Weights & Biases — Experiment Tracking

Practice Weights & Biases — Experiment Tracking in a deterministic local workspace without unavailable external infrastructure.

Fine-Tuning LLM with LoRA

Practice Fine-Tuning LLM with LoRA in a deterministic local workspace without unavailable external infrastructure.

Active Directory Forest — BloodHound PrivEsc

Practice Active Directory Forest — BloodHound PrivEsc in a deterministic local workspace without unavailable external infrastructure.

Fuzzing — Jazzer for JVM

Practice Fuzzing — Jazzer for JVM in a deterministic local workspace without unavailable external infrastructure.

Compliance Testing & Security Auditing

Practice Compliance Testing & Security Auditing in a deterministic local workspace without unavailable external infrastructure.

ServiceNow — CMDB at Scale

Practice ServiceNow — CMDB at Scale in a deterministic local workspace without unavailable external infrastructure.

Webgoat: Authentication & Access Control

Exploit authentication and authorization flaws in the Webgoat learning platform.

ClickHouse — Petabyte Analytics

Practice ClickHouse — Petabyte Analytics in a deterministic local workspace without unavailable external infrastructure.

Zero Trust — BeyondCorp at Scale

Practice Zero Trust — BeyondCorp at Scale in a deterministic local workspace without unavailable external infrastructure.

Image Vulnerability Scanning & Compliance

Complete Image Vulnerability Scanning & Compliance in a deterministic practice workspace without depending on unavailable host, cloud, hardware, desktop, or multi-node infrastructure.