Python practice in Cybersecurity

Browse the rooms before signing in. All rooms are free with an account. Practice does not issue certificates.

• Caesar Intercept

  Decoding a C2 beacon string before it rotates.

  classical-crypto. Free with an account.

• Checksum Gate

  Fingerprinting firmware before the update daemon times out.

  hashing. Free with an account.

• Hex Dump Rescue

  Recovering a clobbered config value before the next deploy.

  encoding. Free with an account.

• Signal Noise

  Security engineer triaging a live phishing report.

  encoding. Free with an account.

• Log Timestamp Triage

  Pulling a suspicious login window before the ticket escalates.

  log-forensics. Free with an account.

• Salted Crack

  Recovering a salted password before the red team must pivot.

  password-cracking. Free with an account.

• Vigenere Tap

  Decrypting a wiretapped side-channel before the log is purged.

  classical-crypto. Free with an account.

• XOR Key Recovery

  Recovering a ransomware XOR key before the VM snapshot expires.

  modern-crypto. Free with an account.

• Frequency Crack

  Breaking a single-byte XOR cipher before the red-team debrief.

  classical-crypto. Free with an account.

• Packet Source Filter

  Finding hosts talking to a malicious CIDR before forensics closes.

  network-analysis. Free with an account.

• Rainbow Resistance

  Proving a service stores raw SHA-1 instead of bcrypt.

  hashing. Free with an account.

• Repeating-Key Decrypt

  Cracking repeating-XOR beacon traffic before the window closes.

  modern-crypto. Free with an account.

• ECB Oracle Probe

  Detecting ECB mode in a staging encryption oracle.

  modern-crypto. Free with an account.

• Cookie Forge

  Forging an admin cookie from a weak HMAC key before the bounty closes.

  web-security. Free with an account.

• Log Pivot Hunt

  Reconstructing lateral movement from a multi-service log corpus.

  log-forensics. Free with an account.

• VM Disassemble

  Tracing a crackme stack VM to find the serial before the portal closes.

  reverse-engineering. Free with an account.

• Beacon Fingerprint

  Scoring periodic C2 beaconing from connection timestamps.

  network-analysis, log-forensics. Free with an account.

• Hashcat Helper

  Routing a mixed batch of captured hashes to the right algorithm.

  password-cracking, hashing. Free with an account.

• Operation Nightfall

  A full red-team operation racing the blue team's automated rollback.

  encoding, classical-crypto, modern-crypto, password-cracking, web-security, reverse-engineering. Free with an account.

• Polyglot Payload

  Delivering an obfuscated payload through a strict WAF.

  encoding, modern-crypto. Free with an account.