Red Teaming Labs

  • Free

Aircrack

Hack Wireless Networks Ethically: No Hardware, No Setup, 100% Browser-Based Learn real-world Wi-Fi security testing with Aircrack-ng in a risk-free, online environment. Master the art of cracking WEP, and WPA+ networks through guided, hands-on labs (no physical hardware, routers, or installations needed). Everything runs in a secure online terminal, simulating real attacks without compromising legality or safety.

  • Free

ChatServer (Beginner BoF)

Understand and practice your first Buffer Overflow Exploitation. 100% Browser-Based, Zero Setup. Dive into real-world exploit development with a safe, interactive lab designed to teach buffer overflow attacks without needing local tools, VMs, or vulnerable hardware. Learn to manipulate memory, and execute remote commands on a real vulnerable server all directly in your browser.

  • Free

Nmap for Beginners

Master Network Reconnaissance with Nmap: Free, Browser-Based, Zero Setup Go from your first scan to full service fingerprinting across 11 interactive challenges in a hands-on terminal lab! Master host discovery, version detection, and the Nmap Scripting Engine against a live honeypot designed to deceive you. No installations, hardware, or cost required. Perfect for beginners and pros alike!

  • Free

RustScan for Beginners

Master Port Scanning with RustScan: Free, Browser-Based, Zero Setup Learn high-speed network scanning through 7 interactive challenges in a hands-on terminal lab! Discover how to wield RustScan’s blazing-fast port discovery, customize scans, and integrate with tools like Nmap. No installations, hardware, or cost required. Perfect for beginners and pros alike!

  • Free

SkeletonKey

Learn how to exploit a real web vulnerability from your terminal, from the recon steps to writing a template to automatically identify the vuln on live hosts! In this lab you will learn to use httpx and nuclei (with a bit of cURL too) to discover and exploit the infamous CVE-2023-27524: a widespread vulnerability found in 2023 in Apache Superset. Everything runs in a terminal in your browser, zero setup required.