LABS
Twenty-four self-contained browser challenges. No account, external target, or sacrificial cloud bill required.
Ghost Protocol
Easy challenge
Broken Trust
Medium challenge
Phantom Packet
Medium challenge
Memory Echo
Hard challenge
Prompt Phantom
Hard challenge
Cipher Cellar
Insane challenge
Cloud Shadow
Analyze a synthetic IAM policy and find the unintended wildcard permission.
Firmware Echo
Read a simulated UART boot trace and locate the diagnostic marker.
Mobile Mirror
Inspect a synthetic Android manifest for an exported component.
Reverse Signal
Reverse a toy string transformation using the supplied source.
Logic Gate
Review a synthetic access check and identify its logic flaw.
Control Loop
Interpret an offline industrial controller alarm trace. No live devices involved.
Ledger Drift
Compare a synthetic ledger's displayed amount with its smallest-unit representation.
Binary Crumbs
Decode a short ASCII binary sequence to recover the training marker.
Shop Session
Session management
Checkout Boundary
Object-level authorization
Query Trail
SQL parameterization
Cart Integrity
Business logic validation
Directory Rights
Directory access control
Name Resolution
DNS fundamentals
File Transfer Audit
FTP hardening
Share Boundary
SMB permissions
Mail Relay Audit
SMTP relay controls
Service Segmentation
Network segmentation