Free module
Cyber security in practice
Cyber security in practice: protect accounts, harden a web server, find leaked secrets and investigate an incident from its logs.
The lessons
Each lesson is free to read in full. Create a free account to run its commands in a live lab and to sit its quizzes and tasks.
1 · Virtual machine lab
Keeping accounts safe (passwords, two-factor)
I can set and check good rules for accounts.
Read the lesson2 · Container lab
Hardening a web server so it says less
I can harden a web server.
Read the lesson3 · Container lab
Finding passwords and keys left in code
I can find a secret left in code.
Read the lesson4 · Virtual machine lab
Investigating a break-in from its logs
I can report what happened in an attack, using its logs.
Read the lesson5 · Container lab
Testing your own copy of a web app
I can test my own copy of an app for common flaws.
Read the lesson
Worked in a real lab
Every lesson of this module is worked in a lab started for you alone. The labs it uses:
- Linux privilege escalation lab: a setuid binary, a sudo rule and a cron job to break
- Web server hardening lab: fix a weak nginx configuration and check it with curl
- WrongSecrets lab: find hardcoded secrets and learn where secrets belong
- Incident response and forensics lab: investigate a compromised server in your browser
- DVWA lab: practise SQL injection and XSS on the Damn Vulnerable Web Application
Teaching a class? Set this module for your students with a teacher guide, marked assignments and a lab for every student.