//Training labs

Machines built to be taken apart.

Each lab is a self-contained VM with one intended chain — from unauthenticated access through to code execution — plus honest dead ends. Download it, read the source, and land the shell on your own hardware. No account, no scoreboard.

HardLinux · Java

Vaultline

Vaultline is a small-team password manager — a legacy Java service that has been running, and being patched, for years. Members store logins and secrets; an admin manages users and can back up and restore the workspace. It's solid-looking enterprise software, and reaching code execution demands genu

Web Exploitation (OSWE)Open lab

→Next step

Break something on purpose.

Every lab ships as a VM you run on your own hardware — download it, read the source, and work the chain end to end. No account, no scoreboard, no catch.

Browse the labs Theosec.com