Labs

Hands-on exercises that run in the browser

Each lab is a sandboxed environment with a stated outcome, a spoiler-free scenario, and a text walkthrough that can be completed without operating the terminal.

Catalogue

Every lab

Web exploitationFree preview
Blind SSRF to cloud metadata
Prove that a server-side request forgery with no visible response can still reach an internal service, and write the finding so a triager cannot close it as informational.
Intermediate55 min
Access control
IDOR in a multi-tenant invoice API
Find an object-level authorisation failure in a tenanted API and demonstrate cross-tenant access without touching another real customer.
Beginner35 min

How labs work

What happens when you press start

The sandbox is isolated

Every environment runs on a separate registrable domain from the application, so a deliberately vulnerable target can never reach a Cyber VK session cookie.

It has a hard lifetime

A sandbox is torn down at its stated age whether or not you are still in it. The number is on the pricing page per tier, because it is a real constraint on how you study.

There is always a text path

Every lab ships a written walkthrough that can be completed without operating a terminal. That is an accessibility requirement rather than a bonus, and it is why no lab is terminal-only.

Try the CTF arena instead See the per-tier lab limits