Real scenarios
Believable red-team and blue-team missions—not passive theory or click-through quizzes.
90+ labs · One payment · Yours forever
Build real cyber skills.
Build real cyber skills.
Keep every lab.
Get the complete collection of 90 practical cyber security labs—and every future lab we release. Run them on your own VM, capture real flags, and train at your pace without another subscription.
- 90+labs ready now
- 150+flags to capture
- ∞future labs included
# Mission 29 — SQL Injection Deep Dive
labuser@kali:~/lab29$ ./exploit.py --dump users
[+] Query broken
[+] Admin record extracted
[+] Flag recovered
labuser@kali:~/lab29$ ./submit_flag 'FLAG{sql_mastered}'
[+] Correct! Lab complete.
labuser@kali:~/lab29$ ▋Linux Fundamentals·Web Exploitation·Active Directory·Network Security·Privilege Escalation·Malware Analysis·Cloud Security·Digital Forensics·Linux Fundamentals·Web Exploitation·Active Directory·Network Security·Privilege Escalation·Malware Analysis·Cloud Security·Digital Forensics·
Inside the bundle
Less watching. More hacking.
Everything you need to move from setup to a verified flag in one focused session.
Copy-paste setup
Build each vulnerable environment on your own isolated VM in minutes.
Guided tasks
Enough direction to keep moving and enough space to learn by doing.
Real tools
Use the terminal, scanners, scripts, and workflows practitioners use.
Verified flags
A built-in submit_flag checker proves you solved each objective.
Lifetime updates
Every new lab joins your collection automatically, with no extra payment.
How it works
From checkout to first flag.
- 01
Pay once
One purchase unlocks the complete current and future collection.
- 02
Pick your mission
Start at Lab 01 or jump to the topic that closes your skill gap.
- 03
Hack your own VM
Follow the beginner VM guide, run the setup, use real tools, and work your way to the flag.
- 04
Reset and repeat
Clean up the environment and keep moving through the roadmap.
Free starter lab
Try the road before you buy.
Start with Lab 01: Linux Fundamentals for Hackers. Navigate a compromised server, abuse a permission mistake, and capture your first flag.
- ✓30–45 minutesA complete practical mission.
- ✓Beginner friendlyNo previous hacking experience required.
- ✓No card requiredStart immediately, completely free.
Lab 01Free
Linux Fundamentals for Hackers
Click below to start the full lab immediately.
Start Lab 01 →No card required. Runs on your own VM.
What you’ll learn
From first shell to full compromise.
A progression where every new lab builds on skills you already earned.
Linux foundations
Shells, permissions, logs, SSH, networking, scripting, passwords, containers, and OSINT.
Core exploitation
OWASP flaws, privilege escalation, SUID, cron abuse, persistence, and Windows internals.
AD & web attacks
BloodHound, Kerberoasting, SQL injection, XSS, CSRF, SSRF, XXE, and RCE.
Advanced operations
Stealth scanning, pivoting, forensics, incident response, cloud, and kernel exploits.
Specialist tradecraft
Trust abuse, AD CS, reversing, malware sandboxing, YARA, and Sigma.
Red vs. blue capstone
Attack, detect, investigate, and report on one complete environment.
Defender depth
Phishing, TLS, file forensics, firewalls, PowerShell defense, API auth, image forensics, DNS analysis, OAuth, and K8s RBAC.
Web depth
SSTI, GraphQL, JWT, request smuggling, prototype pollution, WebSockets, logic flaws, NoSQL, cache attacks, and deserialization.
Red tradecraft
Buffer overflows, Metasploit, content discovery, spraying, NTLM relay, PrintNightmare, GPO abuse, CI/CD abuse, escapes, and prompt injection.
Blue depth
Sysmon, registry forensics, SIEM queries, ATT&CK mapping, ransomware response, cloud DFIR, Android, triage, Snort, and crypto failures.
The complete collection
One bundle. Every lab.
Follow a structured path from Linux fundamentals to advanced red-team and blue-team operations—without a monthly bill.
- ✓All 90 hands-on labsBeginner at the start, advanced at the finish.
- ✓Every future labNew releases are included at no extra cost.
- ✓150+ verifiable flagsProof you completed every objective.
- ✓Setup and cleanup scriptsBuild, break, reset, and repeat.
Lifetime accessOne-time
Threat Road: Complete Bundle
Get the whole cyber security roadmap today and every lab added tomorrow.
one payment
90+ Labs150+ Flags7 TracksFuture Labs
Get Lifetime Access Labs →One-time purchase · Lifetime access · No subscription
From the blog
Learn something before lunch.
Short, practical notes — every one pointing back to hands-on practice.
Docker and Kubernetes Security for Beginners: What You Should Practice
Learn the container security foundations that matter first: image provenance, secrets, privileges, network boundaries, and Kubernetes RBAC.
YARA vs Sigma: What They Detect, When to Use Each, and Examples
Compare YARA and Sigma by data source, rule structure, tuning, and workflow, with safe examples for detection beginners.
How to Build a SOC Analyst Home Lab and Practice Blue Team Skills
Build a small SOC analyst home lab around logs, alerts, timelines, detection rules, and written incident conclusions.
FAQ
Questions, answered straight.
Do I really only pay once?
Yes. One purchase gives you lifetime access to all 90+ current labs and every future lab. There is no subscription or renewal.
What do I need?
A dedicated Ubuntu or Kali VM for most labs, plus Windows Server for the Active Directory track. Our beginner VM setup guide covers installation, isolation, and snapshots.
Are the labs safe and legal?
Each fictional vulnerable environment runs in an isolated VM you control. Only test systems you own or have permission to test.
Are they beginner-friendly?
Yes. The road starts with fundamentals and steadily increases in difficulty.
What if a lab breaks?
Every lesson passes automated structure and static checks. Platform-specific end-to-end verification is tracked separately because tools and operating systems change over time. If something breaks, open a GitHub issue or email us at admin@threatroad.com — we'll investigate it and send you an update.
Can I ask for a specific topic?
Yes. Use the Request a Lab form and tell us what you want to train next.
Your next flag starts here
90+ labs. One payment. Yours forever.
Get the complete roadmap now and every future Threat Road lab at no extra cost.
