Practise on a real-feeling system
Every lab runs in the CoreQ Linux simulator in your browser and is graded on the resulting system state, so any correct approach passes. Start with the free sandbox or pick a mission.
First steps on the command line
You have just logged in to a training server. Find your way around and prepare a workspace for the missions ahead.
independent · beginnerOrganize the notes folder
A teammate left a messy notes folder. Sort it out without being told which commands to use.
guided · beginner · IP globeWho is knocking? Reading the auth log
The SOC asked you to check the training server for SSH brute-force attempts. The auth log is only readable by privileged users.
independent · intermediate · IP globeFind the noisiest attacker
Build a small report from /var/log/auth.log for the incident ticket.
guided · intermediateFix the webapp permissions
The webapp service will not start. Its logs say it cannot read /etc/webapp/app.conf. Fix it with least privilege: the service account must read the file, and nobody else should.
independent · intermediateRunaway process
Users report the server is slow. Find what is eating the CPU and stop it, without touching system services.
independent · intermediate · IP globeMap the lab network
Before a maintenance window, confirm which lab hosts respond. Only fictional lab hosts exist on this network.
challenge · advanced · IP globeCapstone: harden the training server
After the brute-force attempts you found earlier, the team wants quick hardening plus an incident note.