Ethical hacking, practiced in the browser
Learn the work. Then do it in the lab.
HackBlue is a free, hands-on cybersecurity course. Study the material, learn the tools, then sit down at the engagement workstation: a scoped lab where you read evidence, name what failed, and record the control.
- 235
- course lessons
- 455
- tool lessons
- 5
- browser labs
- 101
- glossary terms
Learning paths
Full course- 01Foundations 18 lessonsAuthorization, threat models, and the vocabulary the rest of the course depends on.
- 02Environments 2 lessonsLegal labs, the 2026 attack surface, and the places systems actually run.
- 03Applications 69 lessonsWeb and API failure classes: what breaks, who is affected, and what you change.
- 04Networks 17 lessonsProtocols, exposure, spoofing, and what defenders watch on the wire.
- 05Wireless 12 lessonsWi-Fi, Bluetooth, and radios you are actually allowed to test.
- 06People 18 lessonsSocial engineering, the human path into an account, and the controls around it.
- 07Cryptography 10 lessonsHashes, TLS, passwords, and the failures that come from using them badly.
- 08Malware 18 lessonsWhat hostile software does, how it is recognized, and how you get it off a system.
- 09Identity and cloud 29 lessonsSessions, phishing-resistant sign-in, cloud identities, containers, and build pipelines.
- 10Operations 16 lessonsLogs, incident response, ransomware resilience, and how to write the work down.
- 11Tools 26 lessonsHow the common lab tools think, how to read what they show, and what you change because of it.
Tool workbenches
All 27 workbenchesEvent Ended
Cyber Hackathon
Held 17–27 November. The awards, sponsors, and judges are on the event page.
View the hackathonReference
Glossary and lesson library
Look up a term in the glossary, or search every lesson and tool guide in the library.