Hacking Labs

Every lab is a real vulnerable machine, started just for you. Break in, find the flag, earn XP.

Start Hacking Free Free account. Nothing to install.

HackerDNA's cybersecurity labs are hands-on hacking environments that run on real, isolated virtual machines - not simulations. Each lab drops you into a deliberately vulnerable target where you practise web exploitation, privilege escalation, password cracking, network attacks and more, then capture a flag to prove you solved it.

Whether you are preparing for the OSCP, building a career in penetration testing, or learning ethical hacking from scratch, the labs are graded from Very Easy to Hard so you can start where you are and level up. Create a free account to launch your first machine, track your progress and climb the global leaderboard.

Start here

Category
Very Easy

Capture the Flag 101: Find and Submit Your First Flag Find your first flag, copy it and submit it to score points.

Security Fundamentals Capture The FlagCTFCTF Basics
+50 XP 74% 16,284 Start LabStart
Very Easy

Secrets in Source: View Source Code to Find the Flag Open the page source and find the secret left in a comment.

Web & API Security View Source CodeHTMLBrowser DevTools
+50 XP 79% 7,871 Start LabStart
Very Easy Quick win

Secrets in Source 2: Bypass Security Through Obscurity Beat the blocks on right-click and dev tools to read the source.

Web & API Security Client-Side SecuritySecurity Through ObscurityBrowser DevTools
+50 XP 82% 2,703 Start LabStart
Very Easy

Hack the Login Open the browser tools, find what the page checks and log straight in.

Web & API Security Authentication BypassBroken AuthenticationClient-Side Security
+50 XP 69% 11,596 Start LabStart
Very Easy

Hack the Cookie: Cookie Poisoning Attack Decode your session cookie, change your role and become the admin.

Web & API Security Cookie PoisoningSession TamperingBase64 Encoding
+50 XP 62% 6,014 Start LabStart
Very Easy Boss

Nmap Commands Lab: Port Scanning to Privilege Escalation Scan the ports, log into a weak service, and climb to root.

Network & Infrastructure NmapNmap CommandsTelnet
+100 XP 38% 5,365 Terminal Start LabStart
30,000+ Hackers Real labs Free
Start Hacking Free or solve today's hack, no account needed