Weekly scenarios: season 1
Each week you solve a realistic problem at a fictional company: a misconfiguration, a leaked file, a suspicious login.
Level 201 · 15 lessons · 15 practice labs
Lessons
Weeks 1–4
- Week 1, Mavikent Logistics: a backup file left public
- Week 2, Defne Bakery: an unknown account on the till server
- Week 3, Rüzgar College: an expired certificate on the student portal
- Week 4, Orkide Hotel: guest Wi-Fi reaching the admin panel
- Short task: compare the root causes of the four weeks in one table
Weeks 5–8
- Week 5, Pinar Clinic: a weak password on the booking system
- Week 6, Kestane Store: a strange file uploaded to the website
- Week 7, Tuna Freight: an unknown job running at midnight
- Week 8, Yildiz Print: an exposed database port
- Short task: pick one week and explain it to the owner in plain language
Weeks 9–12
- Week 9, Ceren Law: an employee who clicked a phishing email
- Week 10, Gokce Farm: an unknown device on the sensor network
- Week 11, Sahil Cafe: missing updates on the till software
- Week 12, Ada Travel: a claim that the customer list leaked
- Capstone: solve the season's hardest case from scratch and write an incident report
Practice labs
- Karanfil Çiçekçilik: a customer export left in the web root: You find a customer export left public on the florist's web server, count who downloaded it from the log and write it to the result file.
- Tarçın Pastanesi: an invoice archive open without a password: You find the invoice folder on the patisserie's file server that opens without credentials, close access and submit the flag the checker gives.
- Leylek Kargo: a shipment share open to the guest account: You work out when and from which address the courier's file share was entered with the guest account and which files were read and write it to the result file.
- Bademli Kitabevi: one admin too many in the panel: You find the admin account nobody recognises in the bookshop's sales panel user table and write it with its creation date to the result file.
- Kumru Veteriner: a foreign key added to a service account: You find an unrecognised login key added to the service account on the vet clinic's booking server, remove it and submit the flag in the key comment.
- Sarmaşık Mimarlık: the trace of an account created and deleted: From the logs you recover the name, actions and source of an account created and deleted in one night on the architecture office's server and write them to the result file.
- Zeytindalı Otel: who changed the home page and when?: You find the last changed file and its time in the hotel's web directory and write them with the matching log request to the result file.
- Ihlamur Kafe: a hidden rule sending visitors elsewhere: You find the hidden rule on the café's site that redirects only visitors from search engines, remove it and submit the flag inside the rule.
- Kırlangıç Turizm: a shell hidden among the images: You find the script posing as an image in the travel agency's uploads directory, extract the request that first uploaded it and write both to the result file.
- Menekşe Anaokulu: a management screen opening with a factory password: You show that the nursery's network device in the lab opens with a factory password, change it and submit the flag on screen.
- Turunç Gıda: one password for mail and remote access: You compare hash dumps from the food company's two lab systems, find the employee using the same password on both and write the name to the result file.
- Yakamoz Balıkçılık: a hijacked mailbox and a hidden forward: In the fishery's mail logs you find the mailbox opened by password guessing and the forwarding rule added afterwards and write them to the result file.
- Çakıltaşı İnşaat: an unrecognised device on the wireless network: You compare the construction office's address lease records with its device inventory and write the hardware address of the unlisted device to the result file.
- Karabiber Baharat: a printer talking to the outside: In the spice shop's network capture you find the outside address the printer connects to regularly and how much data it sends and write them to the result file.
- Gülkurusu Butik: a changed name-resolution setting: On the boutique's network you find the rogue name server handed to clients, the affected computers and the redirected domain and write them to the result file.
About this course
Each week you solve a realistic problem at a fictional company: a misconfiguration, a leaked file, a suspicious login.
What you will learn
- Weeks 1–4
- Weeks 5–8
- Weeks 9–12
Prerequisites
Finishing the level 101 courses of the same path, or knowing those topics, is enough.
Lab environment
Lessons run in your own Kali Linux terminal in the browser, connected to a private lab network. Nothing to install.
Frequently asked questions
- Is this course right for my level?
- The course is at level 201; it assumes you know the topics of the lower-level courses.
- Is there anything to install?
- No. Every lesson runs in your own lab environment that opens in the browser.
- How do lessons work?
- Each lesson has 8 to 10 steps and a short quiz. Early steps show the command to type, later steps give less help; if two attempts fail, the solution opens.
- Can I try it for free?
- Yes. The first three lessons of every course are free.