Challenge packs

19 courses, 322 lessons. A real Kali Linux lab in the browser.

30 days of beginner tasks (Level 101, 30 lessons): With one five-to-ten-minute task a day you build habits with the terminal, networks, passwords and logs.
First steps in CTF (Level 101, 15 lessons): You learn capture-the-flag thinking on your own lab targets and solve Linux, network, web and password puzzles step by step.
30 days of cyber security (Level 201, 13 lessons): A short security task every day.
Weekly scenarios: season 1 (Level 201, 15 lessons): Each week you solve a realistic problem at a fictional company: a misconfiguration, a leaked file, a suspicious login.
CTF series: intermediate (Level 201, 16 lessons): On lab targets you find web flaws, network evidence and misconfigurations through puzzles that chain several steps.
Linux challenges: broken servers (Level 201, 16 lessons): In each challenge you get a broken or tampered Linux server, find the cause and fix it for good.
Network challenges: clues in the traffic (Level 201, 15 lessons): With captures and live targets you answer who talks to whom, what is leaking and which rule is missing.
Web challenges: find it, fix it (Level 201, 15 lessons): On web apps in your own lab you find common flaws, then close them by fixing the code or the configuration.
60 days of cyber security (Level 301, 30 lessons): With a new task every two days you connect Linux, networks, web, detection and response, and after two months you defend an environment on your own.
Weekly scenarios: season 2 (Level 301, 15 lessons): Each week you solve an incident at a mid-sized fictional company by following it through logs, traffic and systems, then apply a lasting fix.
CTF series: challenging (Level 301, 16 lessons): In puzzles with few hints and many steps you combine cryptography, forensics, web and privilege misconfigurations.
Web challenges: advanced (Level 301, 15 lessons): In more complex apps with APIs, authentication flows and server-side requests you find flaws and close them for good.
Forensics challenges: what happened? (Level 301, 14 lessons): From disk images, memory dumps, logs and captures you work out when, how and by whom an incident happened.
Blue team challenges: from alert to incident (Level 301, 14 lessons): You triage realistic alerts in a SIEM, weed out false positives, confirm real incidents with evidence and write the missing detection yourself.
100 days of cyber security (Level 401, 25 lessons): Over 100 days in four-day blocks you solve advanced tasks in servers, networks, web, Active Directory and incident response.
Weekly scenarios: season 3 (Level 401, 15 lessons): At large, complex fictional organisations you solve, as the defender, multi-step incidents that span the domain, the network and applications.
CTF series: advanced (Level 401, 14 lessons): In advanced puzzles across the domain, the network and applications you find misconfigurations and write a defence note after every flag.
Active Directory challenges: defend the domain (Level 401, 14 lessons): In the CORP.LAB domain you find hidden misconfigurations and attack traces, then close each one as a defender and prove it.
CTF series: expert (Level 501, 15 lessons): In a hint-free, multi-machine, realistic corporate network you find the attack path, then apply the defence plan that closes it.

Projects

The school club's first CTF: eight puzzles and a write-up: You solve eight beginner puzzles set by Gelincik Okulları's cyber security club (hidden files, encodings, logs, hashes) and prepare a write-up explaining your thinking on each.
Night shift: bring three broken Linux servers back up: On Karaçam Mobilya's night shift, you diagnose and repair three servers (one with a full disk, one whose service will not start, one with broken permissions) and write a shift note explaining the root causes for the morning team.
Clues in the traffic: an incident timeline from captures: You examine three packet captures from a Yakamoz Telekom branch in Wireshark and produce a timeline showing who talked to whom and when, and which data travelled in the clear.
Find it, fix it: close five flaws in a shop app: In Turnalı Perakende's lab shop app, you find five security flaws through code review and tests, fix the code and prove with a retest that each fix works.
What happened? An investigation from disk, memory and traffic: You examine a disk image, a memory dump and a network capture taken from a laptop at Sedirli Hukuk Bürosu together, and write an investigation report explaining with evidence how the incident began and unfolded.
SOC shift: find the real incident among twelve alerts: You work through twelve alerts on Lavinya Klinikleri's security monitoring screen, escalate the real incident, close the false alarms with reasons and write a detection rule to catch the behaviour that slipped through.
Write your own CTF challenge: a log analysis puzzle: For Saklıvadi Üniversitesi's CTF club, you design a log analysis challenge with a randomly generated flag, a checker script and a write-up, package it as a container and test it by solving it end to end yourself.
Defend the domain: misconfiguration sweep and repair: In Demirsu Enerji's CORP.LAB domain, you identify and fix over-privileged accounts, a weak password policy, risky delegations and stale service accounts, and write a report showing through a re-audit that they are closed.
Incident week: from web, Linux and domain logs to containment: At Mavikaya Lojistik, you combine the logs of the web server, the Linux application server and the domain controller to trace the incident's path, apply containment steps on the affected accounts and servers, and write an incident summary for management.
End-to-end defence audit of a multi-segment network: In Yelkovan Bankası's multi-segment lab network, you map unnecessary access between segments, weak service configurations and domain weaknesses, close the five most critical and write a prioritised hardening plan for the rest.