Projects

The Secret Detective Http Project

Explore how web servers respond to HTTP requests. Learn to read headers, status codes, and analyze cache behavior using only browser tools and online services—no coding required.

Alternative time series project

This is an alternative Time Series project. Use ARIMA model to forecast sales using time series analysis to estimate future sales rate.

Cheers! - Remote Vulnerability Analysis in WordPress

Explore a realistic vulnerability in a WordPress site by identifying and analyzing the vulnerable TimThumb script. Learn to recognize suspicious paths and formulate attack hypotheses.

Elevation - Escalating from Common to Root

Access a corporate Linux system and use brute force and privilege escalation techniques to become root and retrieve a protected flag.

Capture Flag Ntlm Hash Attack Lab

Gain Administrator access to a Windows machine using an NTLM hash exposed in a public SMB share. Learn to exploit insecure configurations and perform Pass-the-Hash authentication.

Capture Flag Sql Injection And Escalate Privileges Lab

Exploit a SQL Injection vulnerability in a dating app to access as admin, retrieve credentials, uncover hidden secrets, and escalate privileges to gain root access.

Telefonika - CTF machine for vulnerability exposed Code Analysis

In this lab, you'll analyze a website for poor development practices, discover exposed credentials, and access via SSH to retrieve a flag.

Building Project Requirements With Ai

Final boss Red Team - The Final Corporate Challenge

Analyze a web server full of decoys, discover an exposed backup file, and exploit a misconfigured scheduled task to escalate privileges in a Windows system.

Capture Flag Enumeration And Access To Exposed Credentials Lab

Explore a Windows server hosting a WordPress site and vulnerable SMB shares. Enumerate users, build custom dictionaries, and use discovered credentials to capture a flag.

Casino LFI - Dangerous File Inclusion on Casino Server

Analyze a casino web app and exploit a Local File Inclusion (LFI) vulnerability to access sensitive server content.

Capture Flag Eternal Blue Remote Access On Windows7

Analyze a Windows 7 system vulnerable to EternalBlue, exploit the flaw using Metasploit, and remotely access the system to retrieve a flag from the user's desktop.

FTP Brute Force Lab

Learn to perform brute force attacks and privilege escalation in a controlled environment using tools like Hydra and password dictionaries.

Your First Ai First Coding Implementation Plan

Learn to create a comprehensive implementation plan to guide your AI coding partner in building any project you can imagine!

Final project - Live Incident Response

In this final cybersecurity project, students must take immediate action to identify, contain, and remediate a live cyberattack on a compromised Linux server. Acting as cybersecurity analysts, they will investigate malicious processes, identify persistence mechanisms, remove backdoors, and restore system integrity.

Intercepting traffic and cryptographic failures

Learn to intercept unencrypted HTTP traffic, identify information leaks, and access FTP services using hashes and decoding techniques.

Elevation 2 - Hidden Privileges in Windows

Explore a corporate Windows server, identify poor security practices, and perform brute force attacks to access a privileged user and escalate to administrator.

Gossip Lab- SQL injection

Investigate a web application vulnerable to SQL Injection, access internal data from the Alabama Suites hotel system, and uncover who is sabotaging Diego by analyzing user panels.

Capture Flag Broken Access Control And Password Cracking Lab

Explore a web application to detect hidden routes and broken access control. Crack MD5 passwords and simulate logins to retrieve sensitive information.

Digital Forensic Analysis with Autopsy: The John Doe Case

This project guides students through a practical digital forensic analysis using a segmented .E01 forensic image and Autopsy. The objective is to investigate possible data exfiltration by analyzing file manipulation, compression, suspicious browsing, and evidence deletion, and to document findings in a structured technical report.