Browse everything
Roadmaps, courses and hands-on labs — search or filter. All roadmaps · Lab catalogue
Filters 2
275 results — showing 101–200
Hands-on labStationX Membership
Report Writing for Presentation to ManagementCyber Defense Analyst Training Series + 2 more blocksDuration: 1 hIn an earlier lab, students analyzed a suspected exploit (FlashPack Exploit Kit) on a corporate machine.
Hands-on labStationX Membership
Respond to and Validate Alerts from Antivirus SoftwareThreat Intelligence & DefenseDuration: 1 hStudents will respond to and validate alerts from Antivirus software.
Hands-on labStationX Membership
Searching for Indicators of CompromiseCyber Defense Analyst Training Series + 1 more blockDuration: 1 hIf a company has a vulnerable Internet facing application, it can be exploited.
Hands-on labStationX Membership
Setting up Filters and Queries in KibanaCyber Defense Forensics Analyst Training Series + 2 more blocksDuration: 1 hStudents will focus on using filters and queries in Kibana to find indicators of compromise within the network.Hands-on labStationX Membership
Setting Up SYSLOG Forwarding From a Windows SystemCyber Defense Analyst Training Series + 3 more blocksDuration: 1 hStudents will learn how to conduct manual scanning against systems using command line tools such as Netcat then they will login to a discovered system and enable object access verify that auditing…
Hands-on labStationX Membership
SNORT Configuration and Operation LabNetwork Intrusion Detection + 1 more blockDuration: 1 hThis lab will provide the student with experience in manually installing Snort and its support software, as well as with configuring Snort to behave as a Network Intrusion Detection System.Hands-on labStationX Membership
Threat DesignationCyber Defense Analyst Training Series + 4 more blocksDuration: 1 hStudents will conduct scans against a web server, a file share, a printer and a user's host device.Hands-on labStationX Membership
Validate Indications of Compromise: Analysis of PE FileCyber Defense Forensics Analyst Training Series + 2 more blocksDuration: 1 hMalware authors frequently use certain functions, symbols and other tools as a way of building and obfuscating the true nature of their executables.
Hands-on labStationX Membership
Vulnerability Proof of Concept and RemediationVulnerability Assessment AnalystDuration: 1 hStudents will identify if a vulnerability is present in the systems and remediate the vulnerability if necessary.Hands-on labStationX Membership
Vulnerability Scanner Set-up and ConfigurationCyber Defense Analyst Training Series + 1 more blockDuration: 1 hStudents will setup and configure Core Impact in preparation of a vulnerability scan against an internal network.
Hands-on labStationX Membership
Vulnerability Scanner Set-up and Configuration with OpenVASCyber Defense Analyst Training SeriesDuration: 1 hStudents will utilize OpenVAS to identify hosts on a network and assess their vulnerabilities.Hands-on labStationX Membership
WebApp Attack PCAP AnalysisCyber Defense Forensics Analyst Training Series + 1 more blockDuration: 1 hIn this lab you will analyze a capture file of a web application attack in order to identify the attack vector and deduce the vulnerability the attack exploited.Hands-on labStationX Membership
Whitelist ComparisonCyber Defense Analyst Training SeriesDuration: 1 hStudents are provided a whitelist of applications allowed for installation on a system.
Hands-on labStationX Membership
Automated Vulnerability AssessmentsEthical Hacking FundamentalsDuration: 1 hStudents will use Core Impact to conduct an automated vulnerability scan of specific systems in order to identify potential threat vectors.
Hands-on labStationX Membership
Client-Side Exploitation with Social EngineeringPentesting and Network ExploitationDuration: 1 hIn this lab, students will simulate a social engineering attack by performing actions as both the attacker and the victim to demonstrate how phishing attacks occur and how easily users can be…
Hands-on labStationX Membership
Cybersecurity Testing with Core ImpactPentesting and Network ExploitationDuration: 1 hStudents use Core Impact to enumerate a local area network and discovery vulnerable machines through a vulnerability scan.Hands-on labStationX Membership
Evasive Maneuvers and Post ExploitationPentesting and Network ExploitationDuration: 1 hIn this lab, students will practice enumerating outbound egress policies to identify potential pathways for reverse connections and data exfiltration.Hands-on labStationX Membership
Host Identification Scanning via WindowsCyber Defense Forensics Analyst Training Series + 3 more blocksDuration: 1 hStudents will leverage Scanline, a Windows network discovery and mapping tool, to identify the systems on a network of responsibility.Hands-on labStationX Membership
Host Identification Scanning with LinuxCyber Defense Forensics Analyst Training Series + 3 more blocksDuration: 1 hStudents will utilize Nmap, a network discovery and mapping tool to identify the systems on a network of responsibility.
Hands-on labStationX Membership
Intro To Linux - Backing Up, Compression, and SchedulingIntroduction to Linux + 1 more blockDuration: 1 hIn this lab we will consider tools that can be used to backup your data.
Hands-on labStationX Membership
Linux ExploitationPentesting and Network ExploitationDuration: 1 hIn this lab, scanning and enumeration techniques will be used to explore vulnerable services on two different Linux servers.Hands-on labStationX Membership
Network MinerPentesting and Network ExploitationDuration: 1 hThis lab exercise is designed to allow the trainee to become familiar with using Network Miner.
Hands-on labStationX Membership
OWASP Top Ten 2025 - A01 Broken Access ControlsIntroduction To OWASP Top TenDuration: 1 hIn this lab, students will explore the "A01:2025 Broken Access Control" vulnerability of the OWASP Top Ten by identifying and exploiting common access control weaknesses in a web application.Hands-on labStationX Membership
OWASP Top Ten 2025 - A02 Security MisconfigurationIntroduction To OWASP Top TenDuration: 1 hIn this lab, students will explore the "A02:2025 Security Misconfiguration" vulnerability of the OWASP Top Ten to identify and exploit security misconfigurations within a web application and its…Hands-on labStationX Membership
OWASP Top Ten 2025 - A03 Software Supply Chain FailuresIntroduction To OWASP Top TenDuration: 1 hIn this lab, students will learn about the "A03:2025 Software Supply Chain Failures" vulnerability of the OWASP Top Ten and explore risks introduced through the software supply chain, including…Hands-on labStationX Membership
OWASP Top Ten 2025 - A04 Cryptographic FailuresIntroduction To OWASP Top TenDuration: 1 hIn this lab, students will explore the "A04:2025 Cryptographic Failures" vulnerability of the OWASP Top Ten and examine how improper use of cryptography can expose sensitive data.Hands-on labStationX Membership
OWASP Top Ten 2025 - A05 InjectionIntroduction To OWASP Top TenDuration: 1 hIn this lab, students will explore the "A05:2025 Injection" vulnerability of the OWASP Top Ten to identify and exploit injection vulnerabilities by crafting malicious input to manipulate backend…Hands-on labStationX Membership
OWASP Top Ten 2025 - A06 Insecure DesignIntroduction To OWASP Top TenDuration: 1 hThis lab explores the "A06:2025 Insecure Design" vulnerability of the OWASP Top Ten and focuses on identifying security weaknesses introduced during the design phase of an application.Hands-on labStationX Membership
OWASP Top Ten 2025 - A07 Authentication FailuresIntroduction To OWASP Top TenDuration: 1 hIn this lab, students will learn about the "A07:2025 Authentication Failures" vulnerability of the OWASP Top Ten and explore weaknesses in authentication mechanisms, including poor session handling…Hands-on labStationX Membership
OWASP Top Ten 2025 - A08 Software or Data Integrity FailuresIntroduction To OWASP Top TenDuration: 1 hIn this lab, students will explore the "A08:2025 Software or Data Integrity Failures" vulnerability of the OWASP Top Ten and analyze how failures in software or data integrity can lead to system…Hands-on labStationX Membership
OWASP Top Ten 2025 - A09 Security Logging & Alerting FailuresIntroduction To OWASP Top TenDuration: 1 hIn this lab, students will learn about the "A09:2025 Security Logging and Alerting Failures" vulnerability of the OWASP Top Ten and investigate the impact of insufficient logging and alerting.Hands-on labStationX Membership
OWASP Top Ten 2025 - A10 Mishandling of Exceptional ConditionsIntroduction To OWASP Top TenDuration: 1 hIn this lab, students will learn about the "A10:2025 Mishandling of Exceptional Conditions" vulnerability of the OWASP Top Ten and examine how improper error handling and unexpected conditions can…Hands-on labStationX Membership
Pentesting & Network Exploitation: DMZ ExploitationPentesting and Network ExploitationDuration: 1 hArt of Exploitation: Pentesting & Network Exploitation exposes students to all manner of reconnaissance, scanning, enumeration, exploitation and pillaging for 802.3 networks.Hands-on labStationX Membership
Pentesting & Network Exploitation: Windows Target Analysis LabsPentesting and Network ExploitationDuration: 1 hArt of Exploitation: Pentesting & Network Exploitation exposes students to all manner of reconnaissance, scanning, enumeration, exploitation and pillaging for 802.3 networks.
Hands-on labStationX Membership
Web 201 - Lab 1: Recon ToolsAdvanced Web Application ExploitationDuration: 1 hIn this lab we are going to cover a number of recon tools that should be used in the beginning of any web application penetration test.Hands-on labStationX Membership
Web 201 - Lab 2.1: Detecting and Exploiting Hard to Find SQL injectionsAdvanced Web Application ExploitationDuration: 1 hIn this lab, we will look at a few different examples of how our input could be processed or blocked.Hands-on labStationX Membership
Web 201 - Lab 2.4: NoSQL InjectionAdvanced Web Application ExploitationDuration: 1 hIn this lab, we will explore a few aspects of NoSQL injections.Hands-on labStationX Membership
Web 201 - Lab 3.1: Cross Site Scripting Filter EvasionAdvanced Web Application ExploitationDuration: 1 hIn this lab, we will explore a few different filters and how to evade them to display an alert box.Hands-on labStationX Membership
Web 201 - Lab 3.2: Exploiting Misconfigured CORSAdvanced Web Application ExploitationDuration: 1 hIn this lab we will compare and constrast default operation, secure configuration of CORS, and misconfigured CORS.Hands-on labStationX Membership
Web 201 - Lab 4: Advanced OS Command InjectionAdvanced Web Application ExploitationDuration: 1 hIn the first part of this lab, we will explore some methods of evading the filters and still accomplishing the goal.Hands-on labStationX Membership
Web 201 - Lab 5: Advanced Local File InclusionAdvanced Web Application ExploitationDuration: 1 hAs an attacker, the two main goals in exploiting LFI are typically to expose secret or sensitive information or to cause arbitrary code to be executed, giving them remote command execution.Hands-on labStationX Membership
Web 201 - Lab 6: Advanced CSRFAdvanced Web Application ExploitationDuration: 1 hCross Site Request Forgery (CSRF) is when an attacker can induce a victim to make a request to a site they are already authenticated to and cause them to make changes that they otherwise wouldn't…Hands-on labStationX Membership
Web 201 - Lab 7.1: XXE to Obtain Arbitrary FilesAdvanced Web Application ExploitationDuration: 1 hIn this lab, we will explore the basic limitations of XXE and techniques that can be used in a PHP web application to overcome them.Hands-on labStationX Membership
Web 201 - Lab 7.2: Out of Band XXE AttacksAdvanced Web Application ExploitationDuration: 1 hSometimes there is an XML External Entity vulnerability, but exploiting it doesn't send any data back within the web application.Hands-on labStationX Membership
Web 201 - Lab 8: Server Side Request ForgeryAdvanced Web Application ExploitationDuration: 1 hIn this example we will be faced with a web application that will simply open whatever resource you specify, with increasingly strict restrictions.Hands-on labStationX Membership
Web 201 - Lab 9: Insecure Deserialization in Python and JavaAdvanced Web Application ExploitationDuration: 1 hInsecure Deserialization occurs when the web application takes a serialized object, that has been exposed to the user and possibly tampered with, and converts it back into an object.
Hands-on labStationX Membership
Secure Coding (Java) - Lab 1: Race ConditionsSecure Coding (Java)Duration: 1 hIn this lab, we will look at attacks on race conditions and then cover how to fix them.
Hands-on labStationX Membership
Secure Coding (Java) - Lab 2: Data ValidationSecure Coding (Java)Duration: 1 hIn this lab, we will look at vulnerabilities involving code injection due to improper handling of user input.Hands-on labStationX Membership
Secure Coding (Java) - Lab 3: AuthenticationSecure Coding (Java)Duration: 1 hIn this lab, we will look at authentication vulnerabilities including verbose error messages, plaintext passwords, and single-factor authentication.Hands-on labStationX Membership
Secure Coding (Java) - Lab 4: Access ControlSecure Coding (Java)Duration: 1 hIn this lab, we will look at vulnerabilities with access control - the process by which a system decides whether or not a user is allowed to make use of a resource.Hands-on labStationX Membership
Secure Coding (Java) - Lab 5: CryptographySecure Coding (Java)Duration: 1 hThere are many issues that can arise with Cryptography, when trying to write secure code.Hands-on labStationX Membership
Secure Coding (Java) - Lab 6: Error HandlingSecure Coding (Java)Duration: 1 hIn this lab, we will look at vulnerabilities involving overly verbose error messages and insufficient logging.Hands-on labStationX Membership
Secure Coding (Java) - Lab 7: Static AnalysisSecure Coding (Java)Duration: 1 hIn this lab, we will be looking at a tool called CodeChecker that analyzes code for issues with both security vulnerabilities and coding conventions.Hands-on labStationX Membership
Secure Coding (Java) - Lab 8: Insecure DeserializationSecure Coding (Java)Duration: 1 hMany languages use object serialization for communication as it can greatly ease development.
Hands-on labStationX Membership
LNX101 - Fail2Ban Setup and AnalysisLinux Security & Hardening Fundamentals + 1 more blockDuration: 1 hIn this lab, you will learn how to install, configure and test Fail2ban in virtualized environment.
Hands-on labStationX Membership
LNX101 - File System StructureLinux Security & Hardening Fundamentals + 1 more blockDuration: 1 hIn this lab, you will learn the basic file system layout and structure in a typical Linux distribution.Hands-on labStationX Membership
LNX101 - OpenSSH Installation, Configuration, and HardeningCyber Defense Forensics Analyst Training Series + 4 more blocksDuration: 1 hIn this lab, you will learn how to install, configure, harden and test an OpenSSH server.Hands-on labStationX Membership
LNX101 - Setting Up a Firewall With UFW and FirewalldCyber Defense Forensics Analyst Training Series + 4 more blocksDuration: 1 hSetup firewall in Linux Duration: 1 hourHands-on labStationX Membership
LNX101 - Telnet vs. SSHCyber Defense Forensics Analyst Training Series + 4 more blocksDuration: 1 hTelnet protocol Duration: 1 hour
Hands-on labStationX Membership
Physical SecurityLinux Security & Hardening Duration: 1 hIn this lab you will simulate an attack involving physical access to a workstation.Hands-on labStationX Membership
Securing Linux - Advanced IPTablesLinux Security & Hardening Duration: 1 hIn this lab, we will dive deeper into the host based firewall tool iptables.Hands-on labStationX Membership
Securing Linux - Basic RestrictionsLinux Security & Hardening Duration: 1 hLinux has the ability to natively place restrictions of various kinds on the users and processes that they run.Hands-on labStationX Membership
Securing Linux - Capabilities and ACLsLinux Security & Hardening Duration: 1 hMany people don't realize that there is more to the Linux permission functionality than the basic user, group, and everyone permissions with read, write, and execute.Hands-on labStationX Membership
Securing Linux - EncryptionLinux Security & Hardening Duration: 1 hOne of the most important components of security is encryption.Hands-on labStationX Membership
Securing Linux - FirewallsCyber Defense Forensics Analyst Training Series + 3 more blocksDuration: 1 hFirewalls are an important part of limiting network traffic.Hands-on labStationX Membership
Securing Linux - Network Intrusion DetectionLinux Security & Hardening Duration: 1 hIn this lab we are going to look at Network Intrusion Detection.Hands-on labStationX Membership
Securing Linux - Physical SecurityLinux Security & Hardening Duration: 1 hOftentimes, physical access to a machine will allow an attacker to compromise it.Hands-on labStationX Membership
Securing Linux for System AdministratorsCyber Defense Forensics Analyst Training Series + 4 more blocksDuration: 1 hLinux environments are ubiquitous in many different sectors, and securing these environments is as important as securing Windows environments.Hands-on labStationX Membership
SETUIDLinux Security & Hardening Duration: 1 hThis lab exercise is designed to build upon the students understanding of user and file permissions by using the setuid flag.
Hands-on labStationX Membership
Analyze Browser-based Heap Spray AttackNetwork ForensicsDuration: 1 hStudents will identify a browser-based attack used against a corporate asset using a network protocol analyzer.
Hands-on labStationX Membership
Analyze DoomJuice Infection to Identify Attack Vector and PayloadCyber Security Professional + 1 more blockDuration: 1 hStudents will use popular system analysis tools on an infected machine in order to identify signs of infection.
Hands-on labStationX Membership
Analyze Malicious Activity in Memory Using VolatilityMalware Analysis & Reverse Engineering Duration: 1 hStudents will use the open source Volatility tool to analyze a memory snapshot and determine what malicious software has infected the victim machine.
Hands-on labStationX Membership
Analyze Packed Executable to Identify Attack Vector and PayloadForensic Investigations and Evidence HandlingDuration: 1 hStudents will use a handful of tools to analyze a provided suspicious file.Hands-on labStationX Membership
Analyze Structured Exception Handler Buffer Overflow ExploitCyber Security Professional + 1 more blockDuration: 1 hStudents will identify the use of a Buffer Overflow exploit through the use of Wireshark and by analyzing items found in the captured traffic.
Hands-on labStationX Membership
Assess A High-Risk SystemNetwork SecurityDuration: 1 hSystems that are required to provide remote or public customer access should be placed in a Demilitarized Zone (DMZ).Hands-on labStationX Membership
Auditing Service AccountsCyber Defense Forensics Analyst Training Series + 2 more blocksDuration: 1 hStudents will audit service accounts in a Windows Server environment.
Hands-on labStationX Membership
Auditing Service Accounts and Creation of Service Accounts To Run Specific ServicesNetwork Operations Specialist Training Series + 2 more blocksDuration: 1 hStudents will explore the auditing of service accounts in a Windows Environment.
Hands-on labStationX Membership
Basic Linux x64 Binary Exploitation with pwntoolsLinux x64 Binary ExploitationDuration: 1 hIn this lab, we will look at some basic binary exploitation in 64 bit Linux.Hands-on labStationX Membership
Clonezilla_NetworkNetwork Forensics + 1 more blockDuration: 1 hAs a incident responder, it's important to understand how to create baseline templates.
Hands-on labStationX Membership
Compromise Assessment with Crowd ResponseDigital Media ForensicsDuration: 1 hIn this lab students will run Crowd Response to conduct an incident response that will generate incident response files that can be analyzed and used to conduct compromise assessment.Hands-on labStationX Membership
Control Assessment and EvaluationCyber Defense Forensics Analyst Training Series + 2 more blocksDuration: 1 hStudents start off the lab by reviewing are a list of security controls which are to be applied to systems on a fictitious corporate network.Hands-on labStationX Membership
Creating a Case in OSFForensic Investigations and Evidence HandlingDuration: 1 hIn this lab students will become familiar with creating a lab in OSForensics.Hands-on labStationX Membership
Creating a Forensic ImageCyber Defense Forensics Analyst Training Series + 1 more blockDuration: 1 hIn this lab, students will learn how to create a forensic image of a removable media using FTK imager.Hands-on labStationX Membership
Denial of Service PCAP AnalysisCyber Defense Forensics Analyst Training Series + 2 more blocksDuration: 1 hThe student will act as attacker and defender in this scenario.Hands-on labStationX Membership
Detect Embedded Shellcode in a Microsoft Office DocumentMalware Analysis & Reverse Engineering Duration: 1 hMalware can take many forms.Hands-on labStationX Membership
Detect the Introduction of a Malicious ApplicationDigital Media ForensicsDuration: 1 hIn this lab the student will learn how to start a apache2 web server and deploy a malicious executable to the web server so we can detect the introduction and executions of malicious activity on a…
Hands-on labStationX Membership
Detecting Changes to System ConfigurationsWindows Security & System HardeningDuration: 1 hStudents will use a couple of the popular Sysinternals Suite tools to observe configuration changes on a known good/clean system.Hands-on labStationX Membership
Event Log Collection with SplunkCyber Defense Forensics Analyst Training SeriesDuration: 1 hIn this lab you will use Splunk Enterprise to ingest logs from a local host for analysis Duration: 2 hoursHands-on labStationX Membership
FTK Analysis & ReportingForensic Investigations and Evidence HandlingDuration: 1 hThe FTK Imaging & Analysis lab is focused on building incident handling skills.
Hands-on labStationX Membership
Hardening C#.NET Web Apps - Broken Access ControlHardening C#.NET Web AppsDuration: 1 hIn this lab, we will show an exploit on a user's cookie, then apply remediation measures, and then reattempt the exploit.Hands-on labStationX Membership
Hardening C#.NET Web Apps - Broken AuthenticationHardening C#.NET Web AppsDuration: 1 hThis lab teaches methods to secure the authentication methods in a web application written in C#.Hands-on labStationX Membership
Hardening C#.NET Web Apps - Cross Site ScriptingHardening C#.NET Web AppsDuration: 1 hThis lab teaches methods to secure web applications written in C# against XSS attacks.Hands-on labStationX Membership
Hardening C#.NET Web Apps - CSRFHardening C#.NET Web AppsDuration: 1 hThis lab teaches methods to secure web applications written in C# against Cross Site Request Forgery attacks.Hands-on labStationX Membership
Hardening C#.NET Web Apps - OS Command InjectionHardening C#.NET Web AppsDuration: 1 hThis lab teaches methods to secure a web application written in C# against OS Command Injection attacks.Hands-on labStationX Membership
Hardening C#.NET Web Apps - Password HashingHardening C#.NET Web AppsDuration: 1 hThis lab teaches how to properly use password hashing in a C# web application.Hands-on labStationX Membership
Hardening C#.NET Web Apps - Secure DeserializationHardening C#.NET Web AppsDuration: 1 hThis lab teaches methods to secure web applications written in C# against Insecure Deserialization attacks.Hands-on labStationX Membership
Hardening C#.NET Web Apps - SQL InjectionHardening C#.NET Web AppsDuration: 1 hThis lab teaches methods to secure a web application written in C# against SQL Injection attacks.Hands-on labStationX Membership
Hardening C#.NET Web Apps - Two Factor AuthenticationHardening C#.NET Web AppsDuration: 1 hThis lab teaches how to deploy Google Authenticator in a C# web application in order to deploy Two Factor Authentication.Hands-on labStationX Membership
Hardening C#.NET Web Apps - Web ConfigurationHardening C#.NET Web AppsDuration: 1 hThis lab teaches methods to secure the C# configuration for web applications written in C#.Hands-on labStationX Membership
Hardening C#.NET Web Apps - XXEHardening C#.NET Web AppsDuration: 1 hThis lab teaches methods to secure a web application written in C# against XXE attacks.← Previous · Page 2 of 3 · Next →