🔬
Hands-on exploitation labs

Hacking Labs

Practice SQLi, XSS, CSRF, file inclusion, command injection, privilege escalation and 300+ more labs in a safe environment.

📋 70 lessons live 🎯 300 days total 💪 Beginner to Advanced ⚡ Free
Lab 1
Ethical Hacking Lab Setup at Home (Beginner Guide)
⏱ 10 min ⚡ +10 XP Up next
Lab 2
DVWA Lab Setup Step-by-Step on Kali Linux (Beginner Guide)
⏱ 10 min ⚡ +10 XP
Lab 3
DVWA Web Hacking Tutorial Day 1: Setup Ethical Hacking Lab (Beginner Guide)
⏱ 10 min ⚡ +10 XP
Lab 4
DVWA Web Hacking Tutorial Day 2: Reconnaissance & Attack Surface Mapping
⏱ 10 min ⚡ +10 XP
Lab 5
DVWA Web Hacking Tutorial Day 3: Brute Force & Authentication Exploitation
⏱ 10 min ⚡ +10 XP
Lab 6
DVWA Web Hacking Tutorial Day 4: SQL Injection Deep Dive for Beginners
⏱ 10 min ⚡ +10 XP
Lab 7
DVWA Web Hacking Tutorial Day 5: Cross-Site Scripting (XSS) Explained
⏱ 10 min ⚡ +10 XP
Lab 8
DVWA Web Hacking Tutorial Day 6: File Upload & Command Injection Exploitation
⏱ 10 min ⚡ +10 XP
Lab 9
DVWA Web Hacking Tutorial Day 7: Full Penetration Testing Simulation Guide
⏱ 10 min ⚡ +10 XP
Lab 10
DVWA to Bug Bounty Day 1: Real Hacker Mindset & Scope Understanding
⏱ 10 min ⚡ +10 XP
Lab 11
First Pentest Walkthrough – Step-by-Step Ethical Hacking Guide
⏱ 10 min ⚡ +10 XP
Lab 12
6 Powerful Stages of the Pentesting Lifecycle: Complete Penetration Testing Guide
⏱ 10 min ⚡ +10 XP
Lab 13
DVWA to Bug Bounty Day 2: Subdomain Enumeration & Attack Surface Discovery
⏱ 10 min ⚡ +10 XP
Lab 14
DVWA to Bug Bounty Day 3: Hidden Endpoints & Parameter Discovery Guide
⏱ 10 min ⚡ +10 XP
Lab 15
Bug Bounty Case Study: 8 Steps to Discover an IDOR Vulnerability
⏱ 10 min ⚡ +10 XP
Lab 16
Claude AI Kali Linux MCP Penetration Testing: 7 Powerful AI Automation Techniques
⏱ 10 min ⚡ +10 XP
Lab 17
ChatGPT Penetration Testing Automation: 7 Powerful Techniques Ethical Hackers Use
⏱ 10 min ⚡ +10 XP
Lab 18
DVWA to Bug Bounty Day 4: Authentication & Authorization Logic Bugs
⏱ 10 min ⚡ +10 XP
Lab 19
Amass Tutorial (2026): Powerful Subdomain Enumeration Guide for Kali Linux
⏱ 10 min ⚡ +10 XP
Lab 20
DVWA to Bug Bounty Day 5: Advanced XSS Hunting & Filter Bypass Guide
⏱ 10 min ⚡ +10 XP
Lab 21
20 AI Penetration Testing Tools Ethical Hackers Use (Kali Linux Guide)
⏱ 10 min ⚡ +10 XP
Lab 22
DVWA to Bug Bounty Day 6: API Hacking & Business Logic Vulnerabilities
⏱ 10 min ⚡ +10 XP
Lab 23
Beginner Exploitation Guide: 10 Ethical Hacking Techniques Every Pentester Should Know
⏱ 10 min ⚡ +10 XP
Lab 24
Cyber Kill Chain Explained: 7 Stages of a Cyber Attack
⏱ 10 min ⚡ +10 XP
Lab 25
DVWA to Bug Bounty Day 7: Professional Reporting & Earning Strategy
⏱ 10 min ⚡ +10 XP
Lab 26
7 Powerful Directory Bruteforce Guide Techniques (Kali Linux)
⏱ 10 min ⚡ +10 XP
Lab 27
Gobuster Tutorial: 9 Powerful Steps to Discover Hidden Directories (Kali Linux Guide)
⏱ 10 min ⚡ +10 XP
Lab 28
Real XSS Case Study: How Hackers Exploit Cross-Site Scripting (15 Steps)
⏱ 10 min ⚡ +10 XP
Lab 29
FFUF Guide for Ethical Hackers – 10 Steps Web Fuzzing Tutorial Kali Linux
⏱ 10 min ⚡ +10 XP
Lab 30
Ultimate JavaScript Analysis for Hackers – Powerful 2026 Guide to Find Hidden APIs & Vulnerabilities
⏱ 10 min ⚡ +10 XP
Lab 31
7 Websites Where You Can Practice Hacking Legally (Beginner to Pro Guide)
⏱ 10 min ⚡ +10 XP
Lab 32
Hydra Cheat Sheet (60+ Commands, Examples & Hands on Lab) – 2026 Guide
⏱ 10 min ⚡ +10 XP
Lab 33
Wireshark Lab: 7 Hands-On Lab Exercises step by step(Beginner to Advanced 2026)
⏱ 10 min ⚡ +10 XP
Lab 34
How to Hack WiFi Password (Kali Linux 2026 Guide) — Ethical Hacker Method
⏱ 10 min ⚡ +10 XP
Lab 2
Day 2: Setting Up Your Bug Bounty Hacking Lab — Burp Suite, Firefox & Your First Intercepted HTTP Request (2026)
⏱ 10 min ⚡ +10 XP
Lab 36
Free Ethical Hacking Course for Beginners 2026 — 100 Days from Zero to Professional (No Credit Card Ever)
⏱ 10 min ⚡ +10 XP
Lab 37
How to Practice Ethical Hacking Legally at Home 2026 — Build Your Own Hacking Lab (Free & Legal)
⏱ 10 min ⚡ +10 XP
Lab 38
SQL Injection Tutorial for Beginners 2026 — From First Quote to Database Dump (Hands-On with DVWA + SQLmap)
⏱ 10 min ⚡ +10 XP
Lab 39
Metasploit Tutorial for Beginners 2026 — First Exploit to Root Shell in Your Home Lab (Step-by-Step)
⏱ 10 min ⚡ +10 XP
Lab 8
Day 8: IDOR Bug Bounty Hunting — Find Insecure Direct Object Reference Vulnerabilities That Pay (2026)
⏱ 10 min ⚡ +10 XP
Lab 41
XSS Cross Site Scripting Tutorial 2026 — Hack Any Website? 3 Types, Real Payloads & DVWA Labs (Beginner to Pro)
⏱ 10 min ⚡ +10 XP
Lab 42
How to Use Burp Suite for Beginners (2026) — Intercept Your First Request in 15 Minutes or Less
⏱ 10 min ⚡ +10 XP
Lab 21
Day 21: Metasploit Framework — From Module to Shell (Complete Beginner's Guide 2026)
⏱ 10 min ⚡ +10 XP
Lab 44
Exploitation Techniques Beyond Metasploit 2026 — Day 22 Ethical Hacking Guide
⏱ 10 min ⚡ +10 XP
Lab 45
DVWA Lab Setup 2026 — Complete Beginner Guide (Install & Hack in 15 Minutes)
⏱ 10 min ⚡ +10 XP
Lab 46
DVWA Brute Force Lab 2026 — Hydra & Burp Intruder Complete Walkthrough Day 2
⏱ 10 min ⚡ +10 XP
Lab 47
DVWA vs WebGoat vs Juice Shop 2026 — Which Hacking Lab Is Best for Beginners?
⏱ 10 min ⚡ +10 XP
Lab 3
Lab 3: DVWA Command Injection Lab 2026 — Inject OS Commands & Get a Reverse Shell
⏱ 10 min ⚡ +10 XP
Lab 4
Lab 4: DVWA CSRF Lab 2026 — Forge Cross-Site Requests & Bypass Token Validation
⏱ 10 min ⚡ +10 XP
Lab 5
Lab 5: DVWA File Inclusion Lab 2026 — Hack Hidden Files in 1 Minute
⏱ 10 min ⚡ +10 XP
Lab 6
Lab 6: DVWA File Upload Lab 2026 — Ultimate Guide to Upload PHP Webshells & Get RCE Fast
⏱ 10 min ⚡ +10 XP
Lab 52
How to Set Up Hacking Lab in 2026 — Complete Home Lab Guide for Ethical Hackers
⏱ 10 min ⚡ +10 XP
Lab 7
Lab 7: DVWA SQL Injection Lab 2026 — Manual Injection to Full Database Dump Complete Guide
⏱ 10 min ⚡ +10 XP
Lab 8
Lab 8: DVWA XSS Reflected Lab 2026 — Steal Cookies in Seconds & Bypass Filters Like a Hacker
⏱ 10 min ⚡ +10 XP
Lab 9
Lab 9: DVWA XSS Stored Lab 2026 — One Payload Hacks Every User (Persistent XSS Exploit Guide)
⏱ 10 min ⚡ +10 XP
Lab 10
Lab 10: DVWA XSS DOM Lab 2026 — The Hidden Vulnerability You Can Exploit Instantly
⏱ 10 min ⚡ +10 XP
Lab 11
Lab11 : DVWA SQL Injection Blind Lab 2026 — Boolean and Time-Based Blind SQLi Guide
⏱ 10 min ⚡ +10 XP
Lab 12
Lab12 : DVWA SQLmap Lab 2026 — The Exact SQLmap Workflow Hackers Use in 2026
⏱ 10 min ⚡ +10 XP
Lab 59
TryHackMe vs HackTheBox 2026 — Which Platform Builds Employable Skills Faster?
⏱ 10 min ⚡ +10 XP
Lab 13
Lab13: DVWA Insecure CAPTCHA Lab 2026 — Bypass Logic & Complete Walkthrough
⏱ 10 min ⚡ +10 XP
Lab 14
Lab14: DVWA Security Levels Explained 2026 — Low, Medium, High & Impossible Complete Guide
⏱ 10 min ⚡ +10 XP
Lab 62
DVWA Brute Force Advanced Lab 2026 — Anti-CSRF Token Bypass Complete Walkthrough | Hacking Lab15
⏱ 10 min ⚡ +10 XP
Lab 63
DVWA Command Injection Advanced Lab 2026 — Filter Bypass Complete Walkthrough | Hacking Lab16
⏱ 10 min ⚡ +10 XP
Lab 64
DVWA File Inclusion Advanced Lab 2026 — PHP Wrappers & Path Bypass Complete Walkthrough | Hacking Lab17
⏱ 10 min ⚡ +10 XP
Lab 65
DVWA File Upload Advanced Lab 2026 — Extension Bypass & MIME Spoofing Complete Walkthrough | Hacking Lab18
⏱ 10 min ⚡ +10 XP
Lab 66
DVWA XSS Cookie Theft Lab 2026 — Steal Session Cookies and Hijack Accounts | Hacking Lab 19
⏱ 10 min ⚡ +10 XP
Lab 67
DVWA CSRF Advanced Lab 2026 — Token Bypass via XSS and Referer Validation Flaws | Hacking Lab20
⏱ 10 min ⚡ +10 XP
Lab 68
DVWA SQL Injection High Security Lab 2026 — Second-Order Injection | Hacking Lab 21
⏱ 10 min ⚡ +10 XP
Lab 69
DVWA Vulnerability Chaining Lab 2026 — XSS + CSRF + File Upload Attack Chain | Hacking Lab22
⏱ 10 min ⚡ +10 XP
Lab 70
DVWA SQLi to OS Shell Lab 2026 — File Write to Remote Code Execution | Hacking Lab23
⏱ 10 min ⚡ +10 XP

🔒 230 more lessons coming soon