Learn ethical hacking by actually doing it.
Six phases — from your first packet to Active Directory ranges, AI security and blue-team detection. Read the theory, take the quizzes, capture flags that are verified live.
Pick a destination, not a topic
Six phases, one path
Fundamentals
Networking, Linux, scripting, web basics.
Recon & Web
Scanning, enumeration, OWASP Top 10.
Exploitation
Privilege escalation, post-exploitation.
Advanced
Active Directory ranges, evasion, reporting.
AI Security
LLM attack surface, prompt injection, agency.
Blue Team
Log analysis, detection engineering, DFIR.
Everything the good platforms do
Multi-host lab ranges
Full isolated networks — domain controller, workstation, attacker box. Hosts resolve by name, so lateral movement is real.
Decay scoring & first blood
Challenges are worth more while few have solved them. Solve one first for a bonus. Difficulty balances itself.
Streaks that stick
Daily streaks with earned freeze tokens. Miss a day and a freeze covers you.
Rating, not just points
Rarity-weighted rating rewards hard solves over grinding.
Mystery challenges
Some never tell you the vulnerability class — because nothing in the real world is labelled.
Ethics by construction
Lab networks are created with no gateway. Not policy — architecture.