Proving Ground
<Real-World Hands-On Security Labs>
SQL Injection Fundamentals
Learn to identify, exploit, and patch classic SQL Injection vulnerabilities in a web application backend.
Windows Registry Forensics
Investigate system registry files to discover evidence of user activity, program execution, and malware persistence.
AWS IAM Privilege Escalation
Exploit misconfigured Identity and Access Management policies in AWS to escalate privileges to Administrator.
Active Directory Kerberoasting
Perform Kerberoasting attacks against a simulated Active Directory domain to harvest and crack service account hashes.
Incident Investigation in Splunk
Analyze security event logs in Splunk to trace down the initial access point and impact of a simulated breach.
Stack-Based Buffer Overflow
Write a custom exploit buffer payload to hijack execution flow on a vulnerable 32-bit Linux binary.
ISO 27001 GRC Simulation
Audit an organizational network layout and policy set against ISO/IEC 27001 compliance standards.