[ PRACTICE_LAB ]
Learn the basics before entering the real CTF challenges.
HTTPS full form
What you think what is 's' stand for
💡 Hint
It is not secure
Windows DNS Overrides
Before querying a DNS server, Windows checks a local file to resolve hostnames to IP addresses. What is the absolute path to this file?
💡 Hint
It's hidden deep in System32 and has no file extension.
Installing Nmap (Debian)
You are setting up a new Ubuntu (or Debian) hacking environment. What is the exact terminal command to install nmap using the default package manager?
💡 Hint
Use sudo, the apt package manager, and the install command.
Installing Nmap (Arch)
You are setting up BlackArch or standard Arch Linux. What is the exact terminal command to install nmap using the default package manager?
💡 Hint
Use sudo, pacman, and the -S flag.
Change User Password
You have gained access to a Linux machine and want to change the password for a user named 'aalu'. What command do you type to initiate the password change for this specific user?
💡 Hint
The command is short for password, followed by the username.
Total Ports
When performing a full port scan on a target machine, how many total TCP ports are there to scan across all ranges?
💡 Hint
It's 2^16 minus 1.
Linux Passwords
In Linux, modern systems no longer store password hashes in /etc/passwd because it is world-readable. What is the absolute path to the file that securely stores user password hashes?
💡 Hint
It's located in the /etc directory and is only readable by root.
Windows Settings Shortcut
What is the 2-key keyboard shortcut used to instantly open the Settings app in modern versions of Windows? (Format: Key+Key, e.g. Ctrl+C)
💡 Hint
The Windows key combined with the letter for 'Information' or 'Install' (actually just I).
Group Policy Editor
You press Win+R to open the Windows Run dialog. What exact command do you type to open the Local Group Policy Editor?
💡 Hint
It ends in .msc (Microsoft Saved Console).
Registry Editor Location
What is the standard absolute path and filename to the Windows Registry Editor executable?
💡 Hint
It is located directly in the Windows folder.
Locking the Wallpaper
Sysadmins often restrict personalization via Group Policy, which edits the Registry. To block users from changing their wallpaper, you navigate to HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\ActiveDesktop. What is the exact name of the value you need to create here?
💡 Hint
It is a single camel-case string starting with No.
Shodan: Find Web Servers
You want to use Shodan to find devices running the Apache web server. What specific search filter key do you use? (e.g. if you were searching for 'Apache httpd')
💡 Hint
The filter key is the word 'product' followed by a colon.
Android User Apps
On a rooted Android device, you want to pull a third-party app that the user installed from the Play Store. In what absolute directory path are user-installed APKs typically stored?
💡 Hint
It's inside the /data partition.
Check IP (Windows)
You have opened a Command Prompt on a Windows target. What command do you run to check the current IP address and network interfaces?
💡 Hint
It's short for IP Configuration.
Check IP (Linux)
You have a shell on a modern Linux target (where ifconfig is deprecated). What is the standard 2-word command to check your current IP addresses?
💡 Hint
It's short for 'ip address'.
Lack of Privileges
You try to read the /etc/shadow file or run a command that requires root access, but you forgot to use 'sudo'. What exact 2-word error message is typically displayed by the shell?
💡 Hint
It means you don't have the right to do that.
HTTP vs HTTPS
When you visit a website, the URL starts with either http:// or https://. One is secure, one is not. Task: What single letter is added to HTTP to make it secure?
💡 Hint
Read the question carefully. The answer is usually a single specific technical term or command.
What is an IP Address?
Every computer, phone, and server connected to the internet has a unique numerical address, like 192.168.1.1. Task: How many octate are there in IPv4
💡 Hint
Count the "."
Secret Requests
When you visit a webpage, your browser secretly downloads many files — HTML, CSS, images, fonts, and more. Task: Which tab in Developer Tools shows you ALL the requests your browser makes? (One word)
💡 Hint
Read the question carefully. The answer is usually a single specific technical term or command.
The Inspect tabs
There is a tab in Developer Tools where you can type JavaScript code and it runs directly on the webpage. Task: What is the name of this tab where you can type and execute JavaScript? (One word)
💡 Hint
Read the question carefully. The answer is usually a single specific technical term or command.
Let's doo cooking...
When you log into a website, it remembers you using a small file stored in your browser. Task: What is this small piece of data called? (One word — it shares its name with a snack! 🍪)
💡 Hint
Read the question carefully. The answer is usually a single specific technical term or command.
Finding Hidden Text
This page has a hidden message that you cannot see with your eyes. But it exists in the code! Task: Open DevTools (F12), go to Elements tab, press Ctrl+F, and search for 'secret'. What is the hidden password?
💡 Hint
Look at the HTML below this card. There's a hidden element.
Inspect Element
Hackers and developers use a secret panel built into every browser to inspect websites. Task: What key do you press to open Developer Tools in most browsers? (Just the key name)
💡 Hint
Press Ctrl+Shift+I to open Developer Tools what is other option
What is HTML?
Every website you visit is made of code. The most basic language of the web is called ______. Task: What language uses tags like <div>, <p>, and <body> to build webpages?
💡 Hint
Right-click on any webpage and click 'View Page Source' or press Ctrl+U