You do not need to know the right technical term to start. Search for a tool or error message, or choose the task you want to complete below.
First visit? Download and set up Level 1, then follow the beginner practice roadmap. These starting guides do not give away the challenge solution.
Set up or recover a lab
You need a known environment before interpreting the target.
- Choose a platform for the required image
Compare architecture, networking and the same recovery task.
- Fix an archive, import or boot problem
Check the supplied files, host architecture and exact import error before changing VM settings.
- Reconstruct the current lab state
Preserve evidence before a reboot, restore or rebuild.
Interpret and record a result
You have output and need to decide what it supports.
- Check a detected service or version
Corroborate a scanner clue and the relevant prerequisites.
- Explain a missing Samba version
Separate client version, remote clues and installed build.
- Keep a resumable session note
Link the question, conditions, evidence and next decision.
Choose a practice exercise
Pick the task and required environment for the next session.
- Compare two named VM releases
Check the source, host requirements, task and recovery path.
- Compare Kioptrix with DVWA
Distinguish a full-machine exercise from a web-app exercise.
- Plan a practice session
Use the seven-session outline and record your actual status.
Prepare a portfolio or report
Turn selected work into something another reader can inspect.
- Describe your project and contribution
State scope, assistance, observations and work not performed.
- Build an evidence-linked report
Copy blank summary and finding fields without invented results.
- Record a remediation retest
Keep deployment, tested behavior and unresolved paths distinct.
Scope a purchase or budget
Define what is included before comparing totals or deliverables.
- Reconcile a security-tool budget
Separate external cash, internal work, renewals and overlap.
- Compare CMMC software questions
Review advertised workflows and the demonstrations to request.
- Identify the SOC 2 report requirement
Record scope, date or period, exceptions and buyer acceptance.
Review site and cloud operations
Connect a security promise to an owner and a check.
- Review WordPress hosting responsibilities
Compare isolation, recovery evidence and incident support.
- Distinguish AWS security-service outcomes
Separate detection, posture, unified plans and delivery tests.
- Check CloudTrail evidence coverage
Review event scope, retention and the retrieval task.