Skip to main content
hackosquad

Hands-on Cybersecurity Labs

Explore isolated cybersecurity practice labs. Public summaries contain no flags, credentials, or solution steps.

  • Redis Cache — Practice network service discovery and security assessment in a simulated home-network scenario. Review how exposed services affect a network’s security posture, identify evidence that merits investigation, and document your findings in a controlled lab. (easy, 120 minutes)
  • StudentHub — Assess a university portal that handles student and staff profiles and academic records. Explore application behavior and access boundaries, then report any security issues you identify in a realistic, isolated practice environment. (easy, 60 minutes)
  • Gradebook — Assess a simulated academic results portal from a security tester’s perspective. Explore how the application handles sensitive records, identify potential weaknesses, and practice documenting findings in an isolated environment. (easy, 60 minutes)
  • ShopEase Breach — Assess the security of a simulated ecommerce environment. Explore its web-facing services, evaluate how access boundaries and account security shape risk, and document findings during an authorized, time-limited exercise. (medium, 240 minutes)
  • Blind NetForge Solutions — Conduct a black-box security review of a managed network services provider’s public-facing environment. Use evidence gathered during reconnaissance to assess the application and prepare clear findings in an isolated practice lab. (hard, 60 minutes)
  • Pipeline Breach — Review a simulated DevOps environment that supports critical infrastructure. Examine how connected services and deployment workflows affect security, investigate configuration choices, and practice communicating risk responsibly. (hard, 320 minutes)
  • Privilege Escalation — Perform a Linux host security assessment in an isolated company network. Review user and system configurations, assess risks in account and permission management, and document the impact of weaknesses without exposing a solution path. (hard, 330 minutes)