Browse everything
Roadmaps, courses and hands-on labs — search or filter. All roadmaps · Lab catalogue
Filters 2
388 results — showing 201–300
Hands-on labStationX Membership
Python Tool Building - Local File InclusionPython for Cybersecurity Tool Development + 1 more blockDuration: 2 hIn this lab, there is an intentionally vulnerable file that has a local file inclusion vulnerability hosted on your machine.
Hands-on labStationX Membership
Scanning and EnumerationEthical Hacking FundamentalsDuration: 3 hIn this lab, you will practice scanning and enumeration using several popular tools, and learn how they can be used together to create a thorough and efficient workflow during the enumeration phase.
Hands-on labStationX Membership
Scanning and Enumeration (2026)Cyber Security Professional + 1 more blockDuration: 2 hIn this lab, you will practice scanning and enumeration using several popular tools, and learn how they can be used together to create a thorough and efficient workflow during the enumeration phase.
Hands-on labStationX Membership
Scanning and Mapping NetworksCyber Security Professional + 1 more blockDuration: 2 hStudents will use Zenmap to scan a network segment in order to create an updated network map and detail findings on the systems discovered.
Hands-on labStationX Membership
Web 201 - Lab 1: Recon ToolsAdvanced Web Application ExploitationDuration: 1 hIn this lab we are going to cover a number of recon tools that should be used in the beginning of any web application penetration test.
Hands-on labStationX Membership
Web 201 - Lab 2.1: Detecting and Exploiting Hard to Find SQL injectionsAdvanced Web Application ExploitationDuration: 1 hIn this lab, we will look at a few different examples of how our input could be processed or blocked.Hands-on labStationX Membership
Web 201 - Lab 2.2: Advanced SqlmapAdvanced Web Application ExploitationDuration: 2 hIn this lab we will explore some more advanced features of the SQL injection tool sqlmap, that will enable us to use it to exploit more difficult SQL injection vulnerabilities.Hands-on labStationX Membership
Web 201 - Lab 2.3: Manual Blind SQL InjectionAdvanced Web Application ExploitationDuration: 2 hIn this lab, we will cover how to exploit Blind SQL Injections manually.Hands-on labStationX Membership
Web 201 - Lab 2.4: NoSQL InjectionAdvanced Web Application ExploitationDuration: 1 hIn this lab, we will explore a few aspects of NoSQL injections.Hands-on labStationX Membership
Web 201 - Lab 3.1: Cross Site Scripting Filter EvasionAdvanced Web Application ExploitationDuration: 1 hIn this lab, we will explore a few different filters and how to evade them to display an alert box.Hands-on labStationX Membership
Web 201 - Lab 3.2: Exploiting Misconfigured CORSAdvanced Web Application ExploitationDuration: 1 hIn this lab we will compare and constrast default operation, secure configuration of CORS, and misconfigured CORS.Hands-on labStationX Membership
Web 201 - Lab 4: Advanced OS Command InjectionAdvanced Web Application ExploitationDuration: 1 hIn the first part of this lab, we will explore some methods of evading the filters and still accomplishing the goal.Hands-on labStationX Membership
Web 201 - Lab 5: Advanced Local File InclusionAdvanced Web Application ExploitationDuration: 1 hAs an attacker, the two main goals in exploiting LFI are typically to expose secret or sensitive information or to cause arbitrary code to be executed, giving them remote command execution.Hands-on labStationX Membership
Web 201 - Lab 6: Advanced CSRFAdvanced Web Application ExploitationDuration: 1 hCross Site Request Forgery (CSRF) is when an attacker can induce a victim to make a request to a site they are already authenticated to and cause them to make changes that they otherwise wouldn't…Hands-on labStationX Membership
Web 201 - Lab 7.1: XXE to Obtain Arbitrary FilesAdvanced Web Application ExploitationDuration: 1 hIn this lab, we will explore the basic limitations of XXE and techniques that can be used in a PHP web application to overcome them.Hands-on labStationX Membership
Web 201 - Lab 7.2: Out of Band XXE AttacksAdvanced Web Application ExploitationDuration: 1 hSometimes there is an XML External Entity vulnerability, but exploiting it doesn't send any data back within the web application.Hands-on labStationX Membership
Web 201 - Lab 8: Server Side Request ForgeryAdvanced Web Application ExploitationDuration: 1 hIn this example we will be faced with a web application that will simply open whatever resource you specify, with increasingly strict restrictions.Hands-on labStationX Membership
Web 201 - Lab 9: Insecure Deserialization in Python and JavaAdvanced Web Application ExploitationDuration: 1 hInsecure Deserialization occurs when the web application takes a serialized object, that has been exposed to the user and possibly tampered with, and converts it back into an object.
Hands-on labStationX Membership
Windows ExploitationPentesting and Network ExploitationDuration: 2 hIn this lab, you will learn techniques necessary to scan Windows machines for vulnerabilites and exploit a vulnerability to gain control of the victim machine.
Hands-on labStationX Membership
Windows Rootkits With PythonPython for Hacking & Offensive Security Duration: 2 hIn this lab, we will use the Pywin32 extensions and the Deviare library to hook into functions and interact with the internal data structures.
Hands-on labStationX Membership
Secure Coding (Java) - Lab 1: Race ConditionsSecure Coding (Java)Duration: 1 hIn this lab, we will look at attacks on race conditions and then cover how to fix them.
Hands-on labStationX Membership
Secure Coding (Java) - Lab 2: Data ValidationSecure Coding (Java)Duration: 1 hIn this lab, we will look at vulnerabilities involving code injection due to improper handling of user input.Hands-on labStationX Membership
Secure Coding (Java) - Lab 3: AuthenticationSecure Coding (Java)Duration: 1 hIn this lab, we will look at authentication vulnerabilities including verbose error messages, plaintext passwords, and single-factor authentication.Hands-on labStationX Membership
Secure Coding (Java) - Lab 4: Access ControlSecure Coding (Java)Duration: 1 hIn this lab, we will look at vulnerabilities with access control - the process by which a system decides whether or not a user is allowed to make use of a resource.Hands-on labStationX Membership
Secure Coding (Java) - Lab 5: CryptographySecure Coding (Java)Duration: 1 hThere are many issues that can arise with Cryptography, when trying to write secure code.Hands-on labStationX Membership
Secure Coding (Java) - Lab 6: Error HandlingSecure Coding (Java)Duration: 1 hIn this lab, we will look at vulnerabilities involving overly verbose error messages and insufficient logging.Hands-on labStationX Membership
Secure Coding (Java) - Lab 7: Static AnalysisSecure Coding (Java)Duration: 1 hIn this lab, we will be looking at a tool called CodeChecker that analyzes code for issues with both security vulnerabilities and coding conventions.Hands-on labStationX Membership
Secure Coding (Java) - Lab 8: Insecure DeserializationSecure Coding (Java)Duration: 1 hMany languages use object serialization for communication as it can greatly ease development.
Hands-on labStationX Membership
LNX101 - Fail2Ban Setup and AnalysisLinux Security & Hardening Fundamentals + 1 more blockDuration: 1 hIn this lab, you will learn how to install, configure and test Fail2ban in virtualized environment.
Hands-on labStationX Membership
LNX101 - File System StructureLinux Security & Hardening Fundamentals + 1 more blockDuration: 1 hIn this lab, you will learn the basic file system layout and structure in a typical Linux distribution.
Hands-on labStationX Membership
LNX101 - OpenSSH Installation, Configuration, and HardeningCyber Defense Forensics Analyst Training Series + 4 more blocksDuration: 1 hIn this lab, you will learn how to install, configure, harden and test an OpenSSH server.Hands-on labStationX Membership
LNX101 - Setting Up a Firewall With UFW and FirewalldCyber Defense Forensics Analyst Training Series + 4 more blocksDuration: 1 hSetup firewall in Linux Duration: 1 hourHands-on labStationX Membership
LNX101 - Telnet vs. SSHCyber Defense Forensics Analyst Training Series + 4 more blocksDuration: 1 hTelnet protocol Duration: 1 hour
Hands-on labStationX Membership
Physical SecurityLinux Security & Hardening Duration: 1 hIn this lab you will simulate an attack involving physical access to a workstation.Hands-on labStationX Membership
Securing Linux - Advanced IPTablesLinux Security & Hardening Duration: 1 hIn this lab, we will dive deeper into the host based firewall tool iptables.Hands-on labStationX Membership
Securing Linux - App ArmorLinux Security & Hardening Duration: 3 hApp Armor is a Mandatory Access Control (MAC) system similar in purpose to SELinux.Hands-on labStationX Membership
Securing Linux - Basic RestrictionsLinux Security & Hardening Duration: 1 hLinux has the ability to natively place restrictions of various kinds on the users and processes that they run.Hands-on labStationX Membership
Securing Linux - Capabilities and ACLsLinux Security & Hardening Duration: 1 hMany people don't realize that there is more to the Linux permission functionality than the basic user, group, and everyone permissions with read, write, and execute.Hands-on labStationX Membership
Securing Linux - Centralized AuthenticationLinux Security & Hardening Duration: 3 hFreeIPA is an open source, fully featured system for managing user accounts and accesses to hosts, that has a number of features that we will cover that make it very useful and easy to use.Hands-on labStationX Membership
Securing Linux - EncryptionLinux Security & Hardening Duration: 1 hOne of the most important components of security is encryption.Hands-on labStationX Membership
Securing Linux - FirewallsCyber Defense Forensics Analyst Training Series + 3 more blocksDuration: 1 hFirewalls are an important part of limiting network traffic.Hands-on labStationX Membership
Securing Linux - Monitoring with SecurityOnionLinux Security & Hardening Duration: 2 hIn this lab, we are going to introduce Zeek in the context of a SecurityOnion installation.Hands-on labStationX Membership
Securing Linux - Network Intrusion DetectionLinux Security & Hardening Duration: 1 hIn this lab we are going to look at Network Intrusion Detection.Hands-on labStationX Membership
Securing Linux - Physical SecurityLinux Security & Hardening Duration: 1 hOftentimes, physical access to a machine will allow an attacker to compromise it.Hands-on labStationX Membership
Securing Linux - Secure Remote AccessLinux Security & Hardening Duration: 2 hMany of the machines that we access we do remotely.Hands-on labStationX Membership
Securing Linux - SELinuxLinux Security & Hardening Duration: 2 hSELinux is a system that allows you to define how various entities in the system are allowed to interact.Hands-on labStationX Membership
Securing Linux for System AdministratorsCyber Defense Forensics Analyst Training Series + 4 more blocksDuration: 1 hLinux environments are ubiquitous in many different sectors, and securing these environments is as important as securing Windows environments.Hands-on labStationX Membership
SETUIDLinux Security & Hardening Duration: 1 hThis lab exercise is designed to build upon the students understanding of user and file permissions by using the setuid flag.
Hands-on labStationX Membership
Analyze Browser-based Heap Spray AttackNetwork ForensicsDuration: 1 hStudents will identify a browser-based attack used against a corporate asset using a network protocol analyzer.
Hands-on labStationX Membership
Analyze DoomJuice Infection to Identify Attack Vector and PayloadCyber Security Professional + 1 more blockDuration: 1 hStudents will use popular system analysis tools on an infected machine in order to identify signs of infection.
Hands-on labStationX Membership
Analyze Malicious Activity in Memory Using VolatilityMalware Analysis & Reverse Engineering Duration: 1 hStudents will use the open source Volatility tool to analyze a memory snapshot and determine what malicious software has infected the victim machine.Hands-on labStationX Membership
Analyze Malicious Network TrafficCyber Defense Forensics Analyst Training Series + 3 more blocksDuration: 2 hStudents will take some time to review malicious traffic within a controlled environment.
Hands-on labStationX Membership
Analyze Packed Executable to Identify Attack Vector and PayloadForensic Investigations and Evidence HandlingDuration: 1 hStudents will use a handful of tools to analyze a provided suspicious file.Hands-on labStationX Membership
Analyze Structured Exception Handler Buffer Overflow ExploitCyber Security Professional + 1 more blockDuration: 1 hStudents will identify the use of a Buffer Overflow exploit through the use of Wireshark and by analyzing items found in the captured traffic.
Hands-on labStationX Membership
Assess A High-Risk SystemNetwork SecurityDuration: 1 hSystems that are required to provide remote or public customer access should be placed in a Demilitarized Zone (DMZ).Hands-on labStationX Membership
Auditing Service AccountsCyber Defense Forensics Analyst Training Series + 2 more blocksDuration: 1 hStudents will audit service accounts in a Windows Server environment.
Hands-on labStationX Membership
Auditing Service Accounts and Creation of Service Accounts To Run Specific ServicesNetwork Operations Specialist Training Series + 2 more blocksDuration: 1 hStudents will explore the auditing of service accounts in a Windows Environment.Hands-on labStationX Membership
Automated in-Depth Packet DecodingNetwork ForensicsDuration: 2 hStudents will use Network Miner to analyze network traffic.
Hands-on labStationX Membership
Basic Linux x64 Binary Exploitation with pwntoolsLinux x64 Binary ExploitationDuration: 1 hIn this lab, we will look at some basic binary exploitation in 64 bit Linux.Hands-on labStationX Membership
Clonezilla_NetworkNetwork Forensics + 1 more blockDuration: 1 hAs a incident responder, it's important to understand how to create baseline templates.
Hands-on labStationX Membership
Compromise Assessment with Crowd ResponseDigital Media ForensicsDuration: 1 hIn this lab students will run Crowd Response to conduct an incident response that will generate incident response files that can be analyzed and used to conduct compromise assessment.Hands-on labStationX Membership
Control Assessment and EvaluationCyber Defense Forensics Analyst Training Series + 2 more blocksDuration: 1 hStudents start off the lab by reviewing are a list of security controls which are to be applied to systems on a fictitious corporate network.Hands-on labStationX Membership
Creating a Case in AutopsyForensic Investigations and Evidence HandlingDuration: 2 hIn this lab students will become familiar with creating a lab in Autopsy.Hands-on labStationX Membership
Creating a Case in FTKCyber Defense Forensics Analyst Training Series + 1 more blockDuration: 2 hIn this lab, students will learn how to use Exterro’s Forensic Toolkit (FTK) to perform foundational digital media analysis.Hands-on labStationX Membership
Creating a Case in OSFForensic Investigations and Evidence HandlingDuration: 1 hIn this lab students will become familiar with creating a lab in OSForensics.Hands-on labStationX Membership
Creating a Forensic ImageCyber Defense Forensics Analyst Training Series + 1 more blockDuration: 1 hIn this lab, students will learn how to create a forensic image of a removable media using FTK imager.
Hands-on labStationX Membership
CTF EnvironmentRootkits & Threat DetectionDuration: 8 hThis lab hosts a set of CTF challenges that will be automatically scored.Hands-on labStationX Membership
Denial of Service PCAP AnalysisCyber Defense Forensics Analyst Training Series + 2 more blocksDuration: 1 hThe student will act as attacker and defender in this scenario.Hands-on labStationX Membership
Detect Embedded Shellcode in a Microsoft Office DocumentMalware Analysis & Reverse Engineering Duration: 1 hMalware can take many forms.Hands-on labStationX Membership
Detect the Introduction of a Malicious ApplicationDigital Media ForensicsDuration: 1 hIn this lab the student will learn how to start a apache2 web server and deploy a malicious executable to the web server so we can detect the introduction and executions of malicious activity on a…Hands-on labStationX Membership
Detect Unauthorized Changes by Comparing to Approved ConfigurationsRootkits & Threat DetectionDuration: 2 hStudents will use a variety of tools to record and snapshot different aspects of a Windows workstation, and then compare those recent state updates to approved configurations.
Hands-on labStationX Membership
Detecting Changes to System ConfigurationsWindows Security & System HardeningDuration: 1 hStudents will use a couple of the popular Sysinternals Suite tools to observe configuration changes on a known good/clean system.Hands-on labStationX Membership
Event Log Collection with SplunkCyber Defense Forensics Analyst Training SeriesDuration: 1 hIn this lab you will use Splunk Enterprise to ingest logs from a local host for analysis Duration: 2 hoursHands-on labStationX Membership
FTK Analysis & ReportingForensic Investigations and Evidence HandlingDuration: 1 hThe FTK Imaging & Analysis lab is focused on building incident handling skills.Hands-on labStationX Membership
FTK Enterprise Fundamentals and Mobile InvestigationForensic Investigations and Evidence HandlingDuration: 2 hIn this lab, students will use Exterro’s Forensic Toolkit (FTK) to conduct hands-on digital media analysis by investigating a realistic case scenario.Hands-on labStationX Membership
Fundamentals of Malware AnalysisMalware Analysis & Reverse Engineering MAL400 exposes students to the theoretical knowledge and hands-on techniques used to analyze malware.
Hands-on labStationX Membership
Hardening C#.NET Web Apps - Broken Access ControlHardening C#.NET Web AppsDuration: 1 hIn this lab, we will show an exploit on a user's cookie, then apply remediation measures, and then reattempt the exploit.Hands-on labStationX Membership
Hardening C#.NET Web Apps - Broken AuthenticationHardening C#.NET Web AppsDuration: 1 hThis lab teaches methods to secure the authentication methods in a web application written in C#.Hands-on labStationX Membership
Hardening C#.NET Web Apps - Cross Site ScriptingHardening C#.NET Web AppsDuration: 1 hThis lab teaches methods to secure web applications written in C# against XSS attacks.Hands-on labStationX Membership
Hardening C#.NET Web Apps - CSRFHardening C#.NET Web AppsDuration: 1 hThis lab teaches methods to secure web applications written in C# against Cross Site Request Forgery attacks.Hands-on labStationX Membership
Hardening C#.NET Web Apps - File UploadsHardening C#.NET Web AppsDuration: 3 hThis lab teaches methods to secure web applications written in C# with respect to file upload capabilities.Hands-on labStationX Membership
Hardening C#.NET Web Apps - OS Command InjectionHardening C#.NET Web AppsDuration: 1 hThis lab teaches methods to secure a web application written in C# against OS Command Injection attacks.Hands-on labStationX Membership
Hardening C#.NET Web Apps - Password HashingHardening C#.NET Web AppsDuration: 1 hThis lab teaches how to properly use password hashing in a C# web application.Hands-on labStationX Membership
Hardening C#.NET Web Apps - Secure DeserializationHardening C#.NET Web AppsDuration: 1 hThis lab teaches methods to secure web applications written in C# against Insecure Deserialization attacks.Hands-on labStationX Membership
Hardening C#.NET Web Apps - SQL InjectionHardening C#.NET Web AppsDuration: 1 hThis lab teaches methods to secure a web application written in C# against SQL Injection attacks.Hands-on labStationX Membership
Hardening C#.NET Web Apps - Two Factor AuthenticationHardening C#.NET Web AppsDuration: 1 hThis lab teaches how to deploy Google Authenticator in a C# web application in order to deploy Two Factor Authentication.Hands-on labStationX Membership
Hardening C#.NET Web Apps - Web ConfigurationHardening C#.NET Web AppsDuration: 1 hThis lab teaches methods to secure the C# configuration for web applications written in C#.Hands-on labStationX Membership
Hardening C#.NET Web Apps - XXEHardening C#.NET Web AppsDuration: 1 hThis lab teaches methods to secure a web application written in C# against XXE attacks.Hands-on labStationX Membership
Holistic Network Identification and ProtectionNetwork SecurityDuration: 2 hThis exercise provides students an opportunity to exercise their network identification and protection capabilities learned in the last week.Hands-on labStationX Membership
Identify Access to a LINUX Firewall Through SYSLOG ServiceCyber Defense Forensics Analyst Training Series + 4 more blocksDuration: 1 hStudents will identify access to a PFSENSE firewall through the forwarding of SYSLOG (System logs) from a Firewall to the SYSLOG service we have configured and set up on the Network.Hands-on labStationX Membership
Identify and Remove Trojan Using Various ToolsDigital Media ForensicsDuration: 1 hStudents will detect malicious files and processes using various tools.Hands-on labStationX Membership
Identify Rootkit and DLL Injection ActivityRootkits & Threat DetectionDuration: 1 hStudents will use Olly Debugger to debug a suspect program and determine if any of the observed behavior is malicious or not.Hands-on labStationX Membership
Identify Suspicious Information in VM SnapshotsDigital Media ForensicsDuration: 1 hStudents will identify known IOCs for Stuxnet and save them for analysis.Hands-on labStationX Membership
Identifying Anomalous ARPRootkits & Threat DetectionDuration: 1 hThis lab exercise is designed to allow the trainee to become familiar with identifying anomalous ARP traffic.Hands-on labStationX Membership
Identifying Intrusion and Mitigating Attacks with RHEL ServerNetwork ForensicsDuration: 1 hThis last lab is similar to the Windows Incident Response lab, but different in that this one requires you to run through the IR process in a Linux, more specifically a Red-Hat, environment.Hands-on labStationX Membership
Identifying Malicious CallbacksNetwork ForensicsDuration: 1 hStudents will try to identify suspicious behavior on a compromised machine using volatility.Hands-on labStationX Membership
Implement Single System Changes in FirewallCyber Defense Forensics Analyst Training SeriesDuration: 1 hIn this hands-on lab, students will gain practical experience configuring a pfSense firewall to control and secure network traffic.Hands-on labStationX Membership
Implementing Least-Privilege on WindowsCyber Security ProfessionalDuration: 1 hLeast-privilege is an important concept across many domains (e.g., Windows server/workstation management, networking, Linux management, etc.) and requires great discipline to implement properly.Hands-on labStationX Membership
Import Nexpose Vulnerability Data into QRadarCyber Defense Forensics Analyst Training SeriesDuration: 1 h 30 minStudents will use QRadar to schedule and run an automated vulnerability scan using Nexpose to identify potential threat vectors.Hands-on labStationX Membership
Incident Detection and IdentificationNetwork ForensicsDuration: 3 hStudents will demonstrate their capabilities to identify network components and detect a potential incident. **NOTE** This is a scenario-based lab.← Previous · Page 3 of 4 · Next →