Packet Path Labs

Mission Index

200 browser-simulated labs · staged for review

200labs 24free 4tracks ~218htotal est. time
Review build: all progression locks are bypassed (?review=1) so every lab is testable. Not for public use.

Network Penetration Testing

Think like an attacker: enumerate, exploit, pivot, and write the report.

50 labs 6 free
L1 · BeginnerFREEFirst Foot In~30 minnetpen-l1-first-foot-in L1 · BeginnerFREEThe Helpful Shared Drive~30 minnetpen-l1-helpful-shared-drive L1 · BeginnerFREEPassword Reuse~35 minnetpen-l1-password-reuse L2 · IntermediatePhishing Foothold~45 minnetpen-l2-phishing-foothold L2 · IntermediateWebshell Upload~45 minnetpen-l2-webshell-upload L2 · IntermediatePassword Spraying~40 minnetpen-l2-password-spraying L3 · AdvancedVLAN Hopping~60 minnetpen-l3-vlan-hopping L3 · AdvancedActive Directory Attack Path~75 minnetpen-l3-ad-attack-path L3 · AdvancedPivoting Through the Network~60 minnetpen-l3-pivoting L4 · ExpertStealth APT~90 minnetpen-l4-stealth-apt L4 · ExpertInsider Threat~75 minnetpen-l4-insider-threat L4 · ExpertHoneypot Navigation~60 minnetpen-l4-honeypot-navigation L4 · ExpertRansomware Incident Response~90 minnetpen-l4-ransomware-ir L5 · CapstoneCAPSTONEOwn Initech~180 minnetpen-l5-own-initech L1 · BeginnerFREEReading the Banner~20 minnetpen-l1-reading-the-banner L1 · BeginnerFREEFirst Guided Nmap Scan~25 minnetpen-l1-first-nmap-scan L1 · BeginnerFREESpot the Open Door~30 minnetpen-l1-spot-the-open-door L2 · IntermediateSniffed Credentials~45 minnetpen-l2-sniffed-credentials L2 · IntermediateThe Defender Wakes Up~40 minnetpen-l2-defender-wakes-up L2 · IntermediateThe Insider's Laptop~45 minnetpen-l2-insider-laptop L2 · IntermediateHoneypot: First Contact~45 minnetpen-l2-honeypot-first-contact L2 · IntermediateSpeedrun: Map It Fast~20 minnetpen-l2-speedrun-recon L3 · AdvancedLiving Off the Land~60 minnetpen-l3-living-off-the-land L3 · AdvancedThe Backdoor That Survives Reboot~60 minnetpen-l3-persistence-backdoor L3 · AdvancedRansomware Countdown~60 minnetpen-l3-ransomware-countdown L3 · AdvancedThe AD Attack Path~75 minnetpen-l3-ad-enum-bloodhound L3 · AdvancedOne Password, Many Doors~60 minnetpen-l3-wmi-lateral L3 · AdvancedWhat Did the Cameras See?~60 minnetpen-l3-covering-tracks L4 · ExpertGolden Ticket~90 minnetpen-l4-golden-ticket L4 · ExpertThe Quiet Exfil~75 minnetpen-l4-quiet-exfil L4 · ExpertInsider Cleanup~75 minnetpen-l4-insider-cleanup L4 · ExpertThe Honeypot Maze~60 minnetpen-l4-honeypot-maze L4 · ExpertEnterprise Outbreak~90 minnetpen-l4-enterprise-outbreak L5 · Expert+Shadow Cloud~90 minnetpen-l5-shadow-cloud L5 · Expert+Trust No Update~90 minnetpen-l5-supply-chain L5 · Expert+The Delegation Trap~105 minnetpen-l5-ad-delegation L5 · Expert+Hunt the Persistence~90 minnetpen-l5-persistence-hunt L5 · Expert+The Negotiator~105 minnetpen-l5-ransomware-negotiation L5 · Expert+Ghost Protocol~90 minnetpen-l5-ghost-protocol L5 · Expert+Escape the Honeypot~105 minnetpen-l5-honeypot-escape L5 · Expert+Red Team Sprint~120 minnetpen-l5-red-team-sprint L6 · CapstoneCAPSTONEBranch Takeover~150 minnetpen-l6-branch-takeover L6 · CapstoneCAPSTONEThe APT Campaign~165 minnetpen-l6-apt-campaign L6 · CapstoneCAPSTONEThe CEO's Laptop~150 minnetpen-l6-ceo-insider L6 · CapstoneCAPSTONEEnterprise Ransomware: The Bridge Call~180 minnetpen-l6-enterprise-ransomware L6 · CapstoneCAPSTONEThe Honeypot Gauntlet~150 minnetpen-l6-honeypot-gauntlet L6 · CapstoneCAPSTONEThe Hybrid Breach~165 minnetpen-l6-hybrid-breach L6 · CapstoneCAPSTONEForest Domination~180 minnetpen-l6-forest-domination L6 · CapstoneCAPSTONEBlack-Box Speedrun~120 minnetpen-l6-blackbox-speedrun L6 · CapstoneCAPSTONEOwn Initech~180 minnetpen-l6-own-initech

Enterprise Network Engineer

Keep the business online: observe, hypothesize, isolate, fix, verify, document.

50 labs 6 free
L2 · IntermediateSTP Loop Outage~45 minent-stp-loop-outage L2 · IntermediateVLAN Hopping Incident~45 minent-vlan-hopping-incident L3 · AdvancedBGP Hijack~60 minent-bgp-hijack L2 · IntermediateOSPF Adjacency Down~45 minent-ospf-adjacency L2 · IntermediateDHCP Starvation~40 minent-dhcp-starvation L3 · AdvancedCampus Migration~75 minent-campus-migration L3 · AdvancedFirewall Audit~60 minent-firewall-audit L2 · IntermediateVPN Debug~45 minent-vpn-debug L3 · AdvancedQoS Misconfiguration~50 minent-qos-misconfig L3 · AdvancedWAN Outage at 3 AM~60 minent-wan-outage-3am L3 · AdvancedNAC Failure~55 minent-nac-failure L4 · ExpertCAPSTONEData Center Failover~120 minent-dc-failover L1 · BeginnerFREEYour First VLAN~25 minent-l1-first-vlan L1 · BeginnerFREEThe MAC Table Mystery~25 minent-l1-mac-table-mystery L1 · BeginnerFREEThe Case of the Crawling Server~25 minent-l1-duplex-detective L1 · BeginnerFREEFollow the Packet~30 minent-l1-ping-path L1 · BeginnerFREEThe Access Point That Wouldn't Join~30 minent-l1-first-wifi L1 · BeginnerFREEYour First IPv6 Address~30 minent-l1-ipv6-first-contact L2 · IntermediateThe Channel That Wouldn't Bundle~40 minent-l2-etherchannel-mismatch L2 · IntermediateThe Branch That Vanished~35 minent-l2-static-route-mystery L2 · IntermediateThe Tunnel That Lied~40 minent-l2-gre-tunnel-down L2 · IntermediateThe Name Nobody Could Resolve~35 minent-l2-dns-mystery L2 · IntermediateThe Port That Kept Dying~35 minent-l2-port-security-violation L2 · IntermediateOne of These Switches Is Not Like the Others~40 minent-l2-config-drift-audit L2 · IntermediateThe Flapping Link~40 minent-l2-syslog-sleuth L2 · IntermediateCan You Hear Me Now? (No.)~40 minent-l2-voice-one-way-audio L3 · AdvancedThe Wrong King~50 minent-l3-stp-root-bridge L3 · AdvancedThe Expensive Way Home~50 minent-l3-bgp-best-path L3 · AdvancedThe Spoke the Hub Forgot~50 minent-l3-dmvpn-spoke L3 · AdvancedSeven Minutes in the Future~45 minent-l3-ntp-drift L3 · AdvancedThe Rule That Ate the Firewall~50 minent-l3-acl-shadowed L3 · AdvancedLast Night's 'Harmless' Change~50 minent-l3-config-rollback L3 · AdvancedThe Town Hall Nobody Could Watch~55 minent-l3-pim-rp-failure L3 · AdvancedForty Access Points, Zero Patience~50 minent-l3-wlc-ap-join L3 · AdvancedThe Health Check That Cried Wolf~55 minent-l3-f5-pool-member L4 · ExpertStuck in Active~60 minent-l4-eigrp-sia L4 · ExpertThe VM That Moved and Vanished~60 minent-l4-vxlan-vni-mismatch L4 · ExpertThe Guest Portal Merry-Go-Round~60 minent-l4-ise-guest-loop L4 · ExpertThe App That Refused to Be Decrypted~60 minent-l4-ngfw-decrypt-exempt L4 · ExpertThe VPN That Couldn't Sit Still~60 minent-l4-cloud-vpn-bgp-flap L4 · ExpertZero Trust, Zero Access~60 minent-l4-sase-policy-gap L4 · ExpertThe Stream Going the Wrong Way~65 minent-l4-multicast-rpf-failure L4 · ExpertThe Router That Wasn't~65 minent-l4-ipv6-rogue-ra L5 · Expert+The Leak Between Customers~75 minent-l5-mpls-vpn-leak L5 · Expert+The Switchover That Forgot Everything~75 minent-l5-bgp-graceful-restart L5 · Expert+Half the Country Can't Resolve~75 minent-l5-anycast-dns-split L5 · Expert+The Blueprint With Three Flaws~80 minent-l5-senior-design-review L5 · Expert+The Change Window From Hell~80 minent-l5-change-window-crisis L6 · CapstoneCAPSTONE2 AM: Everything Is Down~120 minent-l6-oncall-outage L6 · CapstoneCAPSTONEMove the Data Center, Keep the Packets~120 minent-l6-dc-migration

Hyperscaler Network Engineer

Operate at cloud scale: Clos fabrics, ECMP, BGP, and bad config pushes.

50 labs 6 free
L2 · IntermediateClos Fabric Bring-Up~60 minhyper-clos-bringup L3 · AdvancedECMP Polarization~50 minhyper-ecmp-polarization L3 · AdvancedIncast Congestion~55 minhyper-incast-congestion L2 · IntermediateBad Config Push~45 minhyper-bad-config-push L4 · ExpertBGP Flap at Scale~75 minhyper-bgp-flap-scale L3 · AdvancedFirmware Upgrade Gone Wrong~60 minhyper-firmware-upgrade L4 · ExpertCapacity Planning~90 minhyper-capacity-planning L3 · AdvancedAnycast Failover~55 minhyper-anycast-failover L3 · AdvancedOptical Degradation~60 minhyper-optical-degradation L4 · ExpertSplit Brain~80 minhyper-split-brain L2 · IntermediateZTP Debug~45 minhyper-ztp-debug L4 · ExpertCAPSTONEPower and Cooling Cascade~120 minhyper-power-cooling-cascade L1 · BeginnerFREELeaf-Spine ABC~30 minhyper-leaf-spine-abc L2 · IntermediateSpine Drain Drill~45 minhyper-spine-drain-drill L1 · BeginnerFREEVXLAN Tunnel Map~30 minhyper-vxlan-tunnel-map L3 · AdvancedThe Missing Route Target~60 minhyper-evpn-missing-rt L1 · BeginnerFREEThe Morning BGP Ritual~30 minhyper-bgp-summary-read L4 · ExpertBGP Convergence Storm~75 minhyper-bgp-convergence-storm L1 · BeginnerFREETwo Vendors, One Pod~30 minhyper-nos-first-login L2 · IntermediateConfig Drift Hunt~45 minhyper-config-drift-hunt L1 · BeginnerFREEWhy Your Download Is Fast~30 minhyper-ecmp-first-look L2 · IntermediateWeighted Fairness~45 minhyper-wcmp-weights L3 · AdvancedSyslog Storm~60 minhyper-syslog-storm L1 · BeginnerFREETelemetry First Steps~30 minhyper-telemetry-first-steps L2 · IntermediateRunbook R-101: Dark Web Tier~45 minhyper-incident-runbook-101 L4 · ExpertOptics Replacement at 4am~75 minhyper-maintenance-drain L2 · IntermediateWhat Speed Is This NIC?~45 minhyper-linux-nic-speed L3 · AdvancedThe 2Gbps Mystery~60 minhyper-tcp-buffer-tuning L2 · IntermediateThe Gate That Said No~45 minhyper-ci-config-gate L4 · ExpertCanary in the Fabric~75 minhyper-canary-push-decision L3 · AdvancedThe Agent That Cried Flap~60 minhyper-rogue-remediation-loop L4 · ExpertThe AI Proposes, You Dispose~75 minhyper-ai-change-review L2 · IntermediateCounting Downtime Minutes~45 minhyper-slo-error-budget L4 · ExpertBurn Rate 14x~75 minhyper-burn-rate-alert L2 · IntermediateTwelve Seconds, Not Four Minutes~45 minhyper-go-parallel-sweep L3 · AdvancedPort 22 Is Not Port 830~60 minhyper-go-netconf-bug L4 · ExpertSteer the Fast Lane~75 minhyper-sr-policy-steer L5 · Expert+Fifty Milliseconds of Chaos~90 minhyper-frr-microloop L3 · AdvancedPairs in the Dark~60 minhyper-veth-pair-mapping L4 · ExpertTable Full~75 minhyper-conntrack-exhaustion L4 · ExpertOne CPU Does Everything~75 minhyper-irq-affinity-tune L5 · Expert+The Queue That Ate the NIC~90 minhyper-rss-imbalance L3 · AdvancedThe Firewall That Hated DNS~60 minhyper-xdp-drop-hunt L5 · Expert+The Map Is Full~90 minhyper-ebpf-map-full L3 · AdvancedWhy Did It Reboot?~60 minhyper-dmesg-triage L5 · Expert+Reading an Oops~90 minhyper-kernel-oops-deep L3 · AdvancedForty Gigabits of Anger~60 minhyper-ddos-anycast-steer L5 · Expert+When Clocks Lie~90 minhyper-ptp-grandmaster-drift L6 · CapstoneCAPSTONERegion Incident: The Night Everything Talked at Once~120 minhyper-region-incident-capstone L6 · CapstoneCAPSTONEGrowing the Fabric: Pod 5~120 minhyper-fabric-expansion-capstone

HFT Low-Latency Network Engineer

Chase microseconds: measure, hypothesize, isolate, tune, verify, document.

50 labs 6 free
L3 · AdvancedMicroburst Hunt~50 minhft-microburst-hunt L3 · AdvancedPTP Sync Lost~55 minhft-ptp-sync-lost L4 · ExpertTick-to-Trade~70 minhft-tick-to-trade L4 · ExpertThe Two-Microsecond Mystery~75 minhft-two-microsecond-mystery L3 · AdvancedBuffer Tuning~50 minhft-buffer-tuning L4 · ExpertFPGA vs Kernel Bypass~80 minhft-fpga-vs-kernelbypass L3 · AdvancedMulticast Gap~55 minhft-multicast-gap L2 · IntermediateClock Drift~40 minhft-clock-drift L2 · IntermediateCable Length Audit~40 minhft-cable-length-audit L3 · AdvancedCross-Connect Failover~55 minhft-cross-connect-failover L4 · ExpertJitter Root Cause~70 minhft-jitter-root-cause L5 · CapstoneCAPSTONETrading Day Chaos~150 minhft-trading-day-chaos L1 · BeginnerFREEWhat Is Latency, Really?~25 minhft-what-is-latency L1 · BeginnerFREEReading a Tick-to-Trade Waterfall~25 minhft-tick-waterfall L1 · BeginnerFREEKernel Bypass in Plain English~25 minhft-kernel-bypass-basics L1 · BeginnerFREEMeet PTP: Clocks That Agree~30 minhft-ptp-basics L1 · BeginnerFREECut-Through vs Store-and-Forward~30 minhft-cut-through-basics L1 · BeginnerFREESpotting a Gap in the Feed~30 minhft-feed-handler-basics L2 · IntermediateLatency Budget Math~35 minhft-latency-budget-math L2 · IntermediatePath Segment Drill~40 minhft-path-segment-drill L2 · IntermediateTimestamps You Can Trust~40 minhft-pcap-timestamps L2 · IntermediateDR Rehearsal: Four Minutes to Fail Over~40 minhft-dr-runbook L2 · IntermediateArista EOS: Low-Latency Mode~35 minhft-eos-latency-mode L2 · IntermediateIGMP Snooping: Stop the Shouting~40 minhft-igmp-snooping L2 · IntermediateIRQ Affinity: Interrupts on the Wrong CPU~40 minhft-irq-affinity L2 · IntermediatePTP Profile Audit~40 minhft-ptp-profile-audit L3 · AdvancedColo Rack Layout: Meters Are Money~50 minhft-colo-rack-layout L3 · AdvancedSlow Market Open: Find the Flood~55 minhft-slow-market-open L3 · AdvancedExchange Certification: Speak the Protocol~50 minhft-cert-conformance L3 · AdvancedArista LANZ: Catch the Invisible Congestion~50 minhft-eos-lanz L3 · AdvancedLayer-1 Cutover at Light Speed~60 minhft-layer1-cutover L3 · AdvancedBuild the Timestamping Kernel Module~55 minhft-kmod-build L3 · AdvancedDPDK Bringup: Hugepages and Port Binding~50 minhft-dpdk-bringup L3 · AdvancedNUMA Tuning: Keep the App Near Its NIC~50 minhft-numa-tuning L3 · AdvancedThe Session That Flaps on the Dot~55 minhft-session-flap L4 · ExpertOpenOnload: Tuning the User-Space Stack~60 minhft-onload-profile-tune L4 · ExpertSyncE Holdover: When GPS Dies~60 minhft-synce-holdover L4 · ExpertOne-Way Delay: The Fiber Lies Asymmetrically~60 minhft-one-way-delay L4 · ExpertProve the Backup Path Is Really Disjoint~70 minhft-colo-redundancy L4 · ExpertCharacterize the Holdover Oscillator~60 minhft-holdover-characterize L4 · ExpertXDP: Filter Before the Kernel Wakes~65 minhft-xdp-filter L4 · ExpertDebug the Crashing Kernel Module~65 minhft-kmod-debug L4 · ExpertDrop-Copy Audit: Trust but Verify~60 minhft-drop-copy-audit L5 · Expert+SmartNIC Offload: Flow Steering in Silicon~80 minhft-smartnic-offload L5 · Expert+Sev-1 Postmortem: The Worst Outage This Year~90 minhft-sev1-postmortem L5 · Expert+L1 vs L2: Timed to the Nanosecond~80 minhft-l1-vs-l2-latency L5 · Expert+DPDK Pipeline: Unclog the Slowest Stage~85 minhft-dpdk-pipeline-tune L5 · Expert+XDP vs DPDK: The Benchmark Duel~85 minhft-xdp-vs-dpdk L6 · CapstoneCAPSTONEZero-Downtime Exchange Migration~150 minhft-zero-downtime-migration L6 · CapstoneCAPSTONEDR Failover Certification: Sign Your Name~180 minhft-dr-failover-cert