Browse › Critical Security Controls

Phishing (earlier edition)
A newer edition of this lab is available: Phishing (2026).
Part of Critical Security Controls · Vulnerability Assessment Analyst Topic: Blue Team
Access
Included in StationX Membership — unlimited attempts
🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
Already have access? Sign in.
New to this? Try a free practice lab — a scripted hacking challenge in your browser, no account needed.
What you'll do
Students will send a phishing email using the Social Engineering Toolkit.
- Students will then impersonate a user clicking on the attachment to observe how dangerous they can be and generate a phishing awareness email to educate users of the dangers of clicking unknown links.
- ⏱ About 60 minutes
- Counts towards: CompTIA CySA+ (exam CS0-004)
Scored lab. A scored lab checks your work and records a score you can see on the lab page.
Roadmaps that use this lab
- CompTIA CySA+ (CS0-004) — step 4: Vulnerability management
- SOC Analyst — career path — step 6: Analyst certification
- Threat Hunter — career path — step 3: The analyst certification
- Digital Forensics Analyst — career path — step 5: Incident response, certified
- Threat Intelligence Analyst — career path — step 2: SOC grounding, certified





