$ ./hack-range --simulated
// HACK RANGE
A free practice range for spotting, reasoning, and coding — built for classrooms, kitchen tables, and career changers alike. No account, no email, no tracking.
Everything here is simulated, for educational purposes only. No real systems, networks, or people are involved. Nothing here teaches attack tooling.
choose your tier
$ ./osint.sim --beginner
OSINT Recon Lab
OSINT Recon Lab
Take your time — hints are on and there is no way to break anything.
Northgate Widgets (fictional)
A pretend company put three things online that give away more than they meant to. Click each one you think is oversharing.
Team photo caption
- "First day at the new office!" — badge is fully readable in the photo
- Posted publicly, no privacy setting
Social post
- "Our door code finally makes sense: it's the year the shop opened 🎉"
- 12 likes, 3 comments
Job listing
- Junior helpdesk needed. You'll reset passwords in our ticket tool.
- Bonus: coffee bar in the lobby, no badge needed for visitors.
Company hours
- Open 9–5 weekdays
- Closed weekends
Pick every detail that overshares (0/3)
$ ./phishing.sim --beginner
Phishing Inbox Simulator
Phishing Inbox Simulator
Take your time — hints are on and there is no way to break anything.
Fabricated inbox. Every address uses a reserved `.test` domain — none of these are real senders. Score: 0/4
from: school-office@example-school.test
Picture day is Friday
Reminder: picture day is Friday. No forms needed.
from: prize-team@free-tablet-winner.test
YOU WON a free tablet!!!
Click here in 10 minutes to claim your prize. Enter your parent's card to pay shipping.
from: it-helpdesk@examp1e-school.test
Password expires today
Your account closes today. Reply with your username and password to keep it.
from: coach@example-school.test
Practice moved to 4pm
Practice is at 4pm on the back field today.
$ ./password.sim --beginner
Password & Passphrase Lab
Password & Passphrase Lab
Take your time — hints are on and there is no way to break anything.
Build a passphrase from four unrelated words you can picture in your head. Length beats symbols. Nothing you type here leaves this page.
tap one from each row
type or build something to see the meter
Illustration only, computed locally with a made-up guessing rate. Never type a real password you actually use into any practice tool — including this one.
$ ./cipher.sim --beginner
Cipher & Code Challenge
Cipher & Code Challenge
Take your time — hints are on and there is no way to break anything.
$ preparing block editor…
$ ./social_eng.sim --beginner
Physical & Social Engineering
Physical & Social Engineering
Take your time — hints are on and there is no way to break anything.
Someone with full hands walks up behind you at a badge door and smiles. What do you do?
You find a USB drive labeled "Prizes" in the parking lot.
Fictional scenarios. In real life, "let it close and send them to the front desk" is never rude — it's the policy doing its job.
$ ./firewall.sim --beginner
Firewall Rules Mini-Game
Firewall Rules Mini-Game
Take your time — hints are on and there is no way to break anything.
Simulated traffic against a fake rule set. Score: 0/4
Simulated web request to the public info page
Unknown outside device asking for the payroll folder
Printer on the office network printing a document
Outside request to remotely control a workstation
$ ./redblue.sim --beginner
Red Team vs. Blue Team
Red Team vs. Blue Team
Take your time — hints are on and there is no way to break anything.
In a practice exercise, the red team gets in by guessing a reused password on a fake account.
Red team exists to make blue team better.