OSINT
OSINT Fundamentals
Find what is hiding in plain sight.
osintreconmetadata
// pick your next challenge
All rooms
12 rooms match your filters.
Blue Team
The Cyber Kill Chain
See an attack as a chain of stages — and learn where defenders can break it.
blueteamkillchaindefense
AI Security
Introduction to AI Security
Why AI is its own attack surface, and the OWASP LLM Top 10 that maps it.
aillmsecurity
Passwords
🔒 Pro
Password Cracking
From captured hashes to plaintext passwords.
passwordshashcatjohn
AI Security
🔒 Pro
Prompt Injection & Jailbreaks
The number-one LLM risk: untrusted text becoming instructions the model obeys.
aillmprompt-injection
AI Security
🔒 Pro
Attacking the ML Pipeline
Poisoning, evasion, model extraction and inversion — name the attack, then stop it.
aimlpoisoning
Cloud
🔒 Pro
Container & Kubernetes Security
Each layer adds power and a new place to get it wrong — with a high-impact hardening checklist.
dockerkubernetescontainers
Wireless
🔒 Pro
Wi-Fi & Wireless Attacks
Capture a WPA2 handshake and crack it offline — plus the defences that stop you.
wifiwpa2handshake
AppSec
🔒 Pro
Secure Code Review
Trace untrusted data from source to sink to find bugs before attackers do.
appsecsastsource-sink
Blue Team
🔒 Team
SOC Analyst Simulation
Sit in the blue team chair and work the alerts.
blueteamsocsiem
Windows
🔒 Pro
Active Directory Attacks
Chain small wins into a path to Domain Admin, and map it with BloodHound.
activedirectorykerberosbloodhound
AI Security
🔒 Pro
AI Red Teaming
Systematically probe an LLM application for injection, jailbreaks and data leakage — with authorisation.
aillmredteam