Curriculum
Click a module to open it, then mark it complete when you finish the exercises.
CTF Challenges
Submit flags in the format LGCTF{...}. Progress is saved locally in your browser.
Recon & Pentest Tools
Only use these against systems you own or have explicit permission to test.
Target host / domain
Port Scanner
Scans common ports (80, 443, 21, 22, 8080).
Subdomain Enumeration
SSL/TLS Analysis
Security Headers Analysis
Service Detection
Security Baseline Check
Attack Detection
Google Dorking
Cheatsheets
Quick one-page references for the most common tools.
Local Labs
Safely practice against intentionally vulnerable targets.
Web Lab
A small Node.js app with common web vulnerabilities for authorized local testing.
cd labs/web-lab npm install npm start # http://localhost:5001
Vulnerable API
A deliberately broken REST API for practicing IDOR, JWT, and injection.
cd labs/vulnerable-api npm install npm start # http://localhost:5002