Start free

Browse › Critical Security Controls

Phishing (2026)

Scored lab

Part of Critical Security Controls Topic: Blue Team

Counts towardsCompTIA Security+ badgeISC2 CISSP badge

Access

Included in StationX Membership — unlimited attempts

🔒 StationX Membership — $299 / year ($24.92/mo billed annually)

Already have access? Sign in.

New to this? Try a free practice lab — a scripted hacking challenge in your browser, no account needed.

What you'll do

In this hands-on lab, students will explore the fundamentals of phishing attacks and user awareness by using the Social-Engineer Toolkit (SET) to create a phishing email and simulate a real-world attack in a controlled environment.

  • They will observe how a successful phishing attempt can provide unauthorized access to a target system, gaining insight into the techniques attackers use to compromise users.
  • To reinforce defensive best practices, students will conclude the lab by creating a phishing awareness email designed to educate users on recognizing and avoiding phishing attempts.

Scored lab. A scored lab checks your work and records a score you can see on the lab page.

Roadmaps that use this lab