Beginner Hands-On Labs
84 labs you deploy in one click and practice in real cloud environments.
Browse all hands-on labs >
Investigate API Access Logs with Azure Application Insights
View Lab >
Breaching Azure Through an Exposed Blob Storage Container
View Lab >
Intro to Azure Enumeration
View Lab >
Scan and secure Azure Terraform with Checkov
View Lab >
Secure Azure Resources with Private Endpoints
View Lab >
Deploying Azure resources with Terraform
View Lab >
Deploying Azure resources with Bicep
View Lab >
Harden Azure Functions with Managed Identity
View Lab >
Hunt and Remediate Azure Blob Exposure with Prowler
View Lab >
Give AI Agents Tools for Read-Only Access to Azure Environments
View Lab >
Give an AI agent access to operational runbooks in Azure
View Lab >
Connect a web app to Microsoft Foundry
View Lab >
Build your first prompt agent with Microsoft Foundry
View Lab >
Add a serverless API to an Azure Static Web App
View Lab >
Require Microsoft Entra sign-in for an Azure App
View Lab >
Deploy a website with Azure Static Web Apps
View Lab >
Investigate Unauthorized Changes in the Azure Activity Log
View Lab >
Troubleshoot Azure Storage Permissions with the Azure CLI
View Lab >
Deploy a static website to Azure Storage with the Azure CLI
View Lab >
Getting Started with the Azure CLI
View Lab >
Publish a static site on Azure
View Lab >
Your First Day Inside the Azure Portal
View Lab >
Breaking JWT to Forge an Admin Token
View Lab >
API Gateway Lambda Authorizer Bypass
View Lab >
Protect CloudWatch Logs data with masking policies
View Lab >
Install and Configure the Amazon CloudWatch Unified Agent on EC2
View Lab >
AWS CLI Tips and Tricks
View Lab >
Security Observability with CloudWatch Dashboards
View Lab >
Pentesting AWS Lambda with CloudFox
View Lab >
Introduction to AWS Lambda Functions
View Lab >
Introduction to AWS Lambda Enumeration
View Lab >
Easily retrieve CloudWatch logs from the CLI with awslogs
View Lab >
Encrypting an unencrypted RDS database
View Lab >
Audit the Blast Radius of KMS Keys with Finders Keypers
View Lab >
Securing S3 Against Ransomware with YES3
View Lab >
Discover AWS Account ID via S3 Bucket
View Lab >
Generate IAM Credentials Reports
View Lab >
Convert CLI credentials into AWS Console access with AWS_Consoler
View Lab >
Encrypting S3 data with SSE-C via the CLI
View Lab >
Build a network and deploy AWS SSM to securely connect to EC2 instances with Terraform
View Lab >
Deploying EC2 instances in a custom VPC with Terraform
View Lab >
Deploying VPC Endpoints for SSM with Terraform
View Lab >
Building an SSM module and IAM role in Terraform
View Lab >
Create a VPC using Terraform
View Lab >
Building reusable Terraform modules
View Lab >
Import an existing Amazon S3 Bucket – Challenge
View Lab >
Importing AWS resources into Terraform
View Lab >
Remote Terraform State
View Lab >
Encrypting S3 Data with SSE-KMS – CLI
View Lab >
Managing Terraform State and Drift
View Lab >
Creating an S3 bucket with Terraform
View Lab >
Encrypting S3 Data with SSE-KMS – AWS Console
View Lab >
Check IAM policies against a deny list with IAM Access Analyzer
View Lab >
Check policies for new access before deployment with IAM Access Analyzer
View Lab >
S3 ransomware simulation through client-side encryption
View Lab >
S3 ransomware simulation through batch file deletion
View Lab >
Backdoor an S3 Bucket via its Bucket Policy
View Lab >
Compromising EC2 IMDSv2 with RCE to Access Sensitive S3 Data
View Lab >
Remediate Open SSH Security Groups with AWS Config and SSM
View Lab >
Encrypt and Decrypt Data with KMS and Data Keys
View Lab >
IAM CreateAccessKey PrivEsc
View Lab >
Find vulnerable Lambda Functions with Amazon Inspector
View Lab >
Amazon GuardDuty Sandbox
View Lab >
Privilege Escalation via IAM Versions
View Lab >
Deploy AWS WAF ACL for Application Load Balancer
View Lab >
Create a VPC with public and private subnets
View Lab >
Configure Security Groups (SGs) and NACLs
View Lab >
Introduction to S3 Enumeration
View Lab >
Introduction to Secrets Manager Enumeration
View Lab >
Secure EC2 Access with SSM Session Manager and KMS
View Lab >
Introduction to AWS IAM Enumeration
View Lab >
Encrypt Existing Unencrypted EBS Volumes and Snapshots
View Lab >
Launching an EC2 instance
View Lab >
Find S3 Security Misconfigurations with Prowler
View Lab >
S3 Presigned URLs
View Lab >
S3 Server Access Logs (CLI)
View Lab >
S3 Server Access Logs (AWS Console)
View Lab >
S3 Versioning (CLI)
View Lab >
S3 Versioning (AWS Console)
View Lab >
Creating Buckets & Uploading Objects In S3 (Role)
View Lab >
Creating Buckets & Uploading Objects In S3 (CLI)
View Lab >
Create a Static S3 Website Using Terraform
View Lab >
Creating Buckets & Uploading Objects In S3 (AWS Console)
View Lab >
Getting Started with the AWS CLI
View Lab >