|
Class 6 (Chall): Recovering Encrypted Machine
(Module 9: Fighting Ransomware)
|
#9,
1 year after release (2026-05-08 04:22:26)
|
200 |
|
Class 5 (Chall): Restoring Locked Keyboard
(Module 9: Fighting Ransomware)
|
#9,
1 year after release (2026-05-08 03:44:17)
|
130 |
|
Class 4.1 (Lab): Recovering Ryuk Files with NeZa
(Module 9: Fighting Ransomware)
|
#9,
10 months, 26 days after release (2026-05-08 03:41:20)
|
120 |
|
Class 4 (Lab): Reversing Ryuk Ransomware with IDA
(Module 9: Fighting Ransomware)
|
#9,
1 year, 7 months after release (2026-05-08 03:28:33)
|
120 |
|
Class 3 (Lab): Unhooking a locked machine with NeZa
(Module 9: Fighting Ransomware)
|
#9,
1 year, 7 months after release (2026-05-08 03:10:12)
|
110 |
|
Class 2 (Lab): Intercepting AES key with NeZa
(Module 9: Fighting Ransomware)
|
#9,
1 year, 7 months after release (2026-05-08 02:41:44)
|
100 |
|
Class 1 (Lab): Intercepting RSA key with NeZa
(Module 9: Fighting Ransomware)
|
#9,
1 year, 7 months after release (2026-05-08 02:32:58)
|
100 |
|
Class 5.1 (Chall): Dissecting the Plugin
(Module 8: Dissecting Infostealers like a BOSS)
|
#9,
1 year, 7 months after release (2026-05-08 00:52:42)
|
150 |
|
Class 5 (Chall): Dissecting Infostealer
(Module 8: Dissecting Infostealers like a BOSS)
|
#9,
1 year, 7 months after release (2026-05-08 00:25:53)
|
120 |
|
Class 4.2 (Lab): Dissecting JavaScript Chrome Extension
(Module 8: Dissecting Infostealers like a BOSS)
|
#9,
11 months, 12 days after release (2026-05-07 23:26:17)
|
91 |
|
Class 4.1 (Lab): Dissecting JavaScript Chrome Extension
(Module 8: Dissecting Infostealers like a BOSS)
|
#9,
11 months, 12 days after release (2026-05-07 23:22:24)
|
91 |
|
Class 4 (Lab): Dissecting JavaScript Chrome Extension
(Module 8: Dissecting Infostealers like a BOSS)
|
#9,
1 year, 7 months after release (2026-05-07 23:18:52)
|
91 |
|
Class 3.1 (Lab): Dissecting Powershell Dropper
(Module 8: Dissecting Infostealers like a BOSS)
|
#9,
11 months, 12 days after release (2026-05-07 23:04:00)
|
90 |
|
Class 3 (Lab): Dissecting Powershell Dropper with NeZa
(Module 8: Dissecting Infostealers like a BOSS)
|
#9,
1 year, 7 months after release (2026-05-07 23:02:45)
|
90 |
|
Class 2 (Lab): Dissecting BAT Downloader
(Module 8: Dissecting Infostealers like a BOSS)
|
#9,
1 year, 7 months after release (2026-05-07 13:35:13)
|
90 |
|
Class 1 (Lab): Scripts 101
(Module 8: Dissecting Infostealers like a BOSS)
|
#9,
1 year, 7 months after release (2026-05-07 13:20:39)
|
90 |
|
Class 4.5 (Chall): Find the Keylogger Actor
(Module 7: .NET Reversing)
|
#9,
6 months, 18 days after release (2026-05-07 13:14:33)
|
210 |
|
Class 4.4 (Lab): Finding & Automating the Decryption of Third Stage
(Module 7: .NET Reversing)
|
#9,
2 years after release (2026-05-07 13:09:36)
|
200 |
|
Class 4.3 (Chall): Found the Parent
(Module 7: .NET Reversing)
|
#9,
6 months, 28 days after release (2026-05-07 12:08:04)
|
125 |
|
Class 4.2 (Lab): Finding Second Stage Entry Point
(Module 7: .NET Reversing)
|
#9,
2 years after release (2026-05-07 12:02:13)
|
115 |
|
Class 4.1 (Lab): Introducing WinDbg SOS Plugin
(Module 7: .NET Reversing)
|
#9,
2 years after release (2026-05-07 11:22:20)
|
110 |
|
Class 4.1.2 (Lab): WinDBG SOS Update
(Module 7: .NET Reversing)
|
#9,
6 months, 28 days after release (2026-05-07 10:46:53)
|
112 |
|
Class 4 (Lab): Limitations of DnSpy
(Module 7: .NET Reversing)
|
#10,
2 years after release (2026-05-07 10:04:40)
|
105 |
|
Class 3 (Lab): Patching Binary for Dumping
(Module 7: .NET Reversing)
|
#9,
2 years after release (2026-05-07 09:58:35)
|
100 |
|
Class 2 (Lab): Deobfuscating Stage1 from Resources
(Module 7: .NET Reversing)
|
#10,
2 years after release (2026-05-07 09:52:36)
|
95 |
|
Class 1.2 (Chall) FindMethod by Name
(Module 7: .NET Reversing)
|
#11,
9 months, 18 days after release (2026-05-07 08:44:57)
|
90 |
|
Class 1.1 (Chall) FindMethod by ID
(Module 7: .NET Reversing)
|
#11,
9 months, 18 days after release (2026-05-07 08:40:10)
|
85 |
|
Class 1 (Lab): Reflection 101
(Module 7: .NET Reversing)
|
#11,
2 years after release (2026-05-07 08:38:09)
|
80 |
|
Class 5 (Chall): Intercept the Shellcode
(Module 6: Process Injection)
|
#12,
8 months, 20 days after release (2026-05-07 08:35:36)
|
100 |
|
Class 4 (Chall): Find the Shellcode
(Module 6: Process Injection)
|
#12,
10 months, 10 days after release (2026-05-07 08:14:42)
|
95 |
|
Class 2 (Lab): SetThreadContext Technique
(Module 6: Process Injection)
|
#12,
2 years after release (2026-05-07 06:20:49)
|
75 |
|
Class 3.1 (Lab): Fighting Process Injection with x32dbg
(Module 6: Process Injection)
|
#11,
7 months, 8 days after release (2026-05-07 06:08:05)
|
85 |
|
Class 3 (Chall): Find the Window
(Module 6: Process Injection)
|
#12,
10 months, 10 days after release (2026-05-07 06:06:38)
|
80 |
|
Class 2.1 (Lab): SetThreadContext Technique
(Module 6: Process Injection)
|
#13,
2 years after release (2026-05-07 06:01:28)
|
75 |
|
Class 1 (Lab): CreateRemoteThread Technique
(Module 6: Process Injection)
|
#12,
2 years after release (2026-05-07 05:57:08)
|
75 |
|
Class 5 (Lab): Anti-Malware Ticks
(Module 5: Aniti-Malware Tricks)
|
#11,
2 years after release (2026-05-07 04:24:56)
|
78 |
|
Class 4.2 (Chall): Find the Offset
(Module 5: Aniti-Malware Tricks)
|
#12,
10 months, 13 days after release (2026-05-07 03:47:00)
|
76 |
|
Class 4.1 (Chall): Patch the Binary
(Module 5: Aniti-Malware Tricks)
|
#12,
10 months, 15 days after release (2026-05-07 02:21:16)
|
75 |
|
Class 4 (Lab): Anti-Debugging Ticks
(Module 5: Aniti-Malware Tricks)
|
#12,
2 years after release (2026-05-07 01:44:51)
|
71 |
|
Class 3 (Brief): Process Injection
(Module 5: Aniti-Malware Tricks)
|
#14,
2 years after release (2026-05-07 01:29:58)
|
70 |
|
Class 2 (Brief): Anti-VM and Packers
(Module 5: Aniti-Malware Tricks)
|
#14,
2 years, 2 months after release (2026-05-07 01:14:55)
|
69 |
|
Class 1 (Brief): Anti-Debugging
(Module 5: Aniti-Malware Tricks)
|
#14,
2 years, 2 months after release (2026-05-07 00:24:23)
|
68 |
|
Class 6 (Chall): Unpacking for Flag
(Module 4: Packers & Obfuscators)
|
#14,
11 months, 11 days after release (2026-05-07 00:23:08)
|
75 |
|
Class 5 (Chall): Unpacking UPX your way
(Module 4: Packers & Obfuscators)
|
#14,
11 months, 11 days after release (2026-05-07 00:15:45)
|
65 |
|
Class 4.1 (Lab): Unpacking ASPack
(Module 4: Packers & Obfuscators)
|
#15,
2 years after release (2026-05-06 23:41:32)
|
56 |
|
Class 4.2 (Lab): Unpacking ASPack
(Module 4: Packers & Obfuscators)
|
#15,
11 months, 11 days after release (2026-05-06 23:29:55)
|
57 |
|
Class 4 (Lab): Unpacking ASPack
(Module 4: Packers & Obfuscators)
|
#16,
2 years after release (2026-05-06 23:23:29)
|
56 |
|
Class 3.1 (Lab): Unpacking UPX
(Module 4: Packers & Obfuscators)
|
#16,
2 years after release (2026-05-06 23:02:16)
|
55 |
|
Class 3 (Lab): Unpacking UPX
(Module 4: Packers & Obfuscators)
|
#15,
2 years after release (2026-05-06 22:55:22)
|
55 |
|
Class 2 (Brief):Unpacking & Deobfuscation Strategy
(Module 4: Packers & Obfuscators)
|
#17,
2 years, 2 months after release (2026-05-06 22:43:26)
|
50 |
|
Class 1 (Brief): Carnita Methodology
(Module 4: Packers & Obfuscators)
|
#19,
2 years, 2 months after release (2026-05-06 22:40:49)
|
50 |
|
Class 6 (Chall): G0T Password?
(Module 3: Reverse Engineering)
|
#14,
11 months, 11 days after release (2026-05-06 10:42:49)
|
75 |
|
Class 5.1 (Lab): Find the Password
(Module 3: Reverse Engineering)
|
#16,
2 years after release (2026-05-06 10:40:58)
|
68 |
|
Class 5 (Lab): Find the Password
(Module 3: Reverse Engineering)
|
#16,
2 years after release (2026-05-06 10:39:40)
|
67 |
|
Class 4.2 (Chall): Windows 32-bit Calling Convention
(Module 3: Reverse Engineering)
|
#15,
11 months, 10 days after release (2026-05-06 10:35:19)
|
66 |
|
Class 4.1 (Lab): Windows 32-bit Calling Convention
(Module 3: Reverse Engineering)
|
#16,
2 years after release (2026-05-06 10:32:54)
|
65 |
|
Class 4 (Lab): Windows 32-bit Calling Convention
(Module 3: Reverse Engineering)
|
#17,
2 years after release (2026-05-06 10:27:25)
|
65 |
|
Class 2 (Brief): Assembly Operands
(Module 3: Reverse Engineering)
|
#19,
2 years, 2 months after release (2026-05-06 10:20:14)
|
60 |
|
Class 5.2 (Lab): Inetsim 101
(Module 2: Tools Arsenal)
|
#20,
1 year after release (2026-05-06 09:00:53)
|
46 |
|
Class 5.1 (Lab): Fakenet 101
(Module 2: Tools Arsenal)
|
#21,
1 year after release (2026-05-06 08:58:55)
|
46 |
|
Class 5 (Lab): Wireshark 101
(Module 2: Tools Arsenal)
|
#21,
1 year after release (2026-05-06 08:43:44)
|
46 |
|
Class 4 (Lab): Debuggers & Disassemblers
(Module 2: Tools Arsenal)
|
#19,
2 years after release (2026-05-06 08:37:21)
|
40 |
|
Class 4.1 (Chall): Debuggers & Disassemblers
(Module 2: Tools Arsenal)
|
#20,
11 months, 10 days after release (2026-05-06 08:36:26)
|
41 |
|
Class 3.2 (Chall): Calling Conventions
(Module 3: Reverse Engineering)
|
#17,
11 months, 10 days after release (2026-05-06 08:02:41)
|
61 |
|
Class 3.1 (Chall): Calling Conventions
(Module 3: Reverse Engineering)
|
#17,
11 months, 10 days after release (2026-05-06 08:00:05)
|
61 |
|
Class 3 (Brief): Calling Conventions
(Module 3: Reverse Engineering)
|
#18,
2 years, 2 months after release (2026-05-06 07:59:34)
|
60 |
|
Class 1 (Brief): Disassembler Process
(Module 3: Reverse Engineering)
|
#20,
2 years, 2 months after release (2026-05-06 07:55:34)
|
60 |
|
Class 2 (Brief): Analysis Lab & Tools
(Module 1: Dynamic Analysis)
|
#27,
2 years, 2 months after release (2026-05-06 05:15:36)
|
20 |
|
Class 3 (Chall): PE Editors Exercise
(Module 2: Tools Arsenal)
|
#22,
2 years after release (2026-05-06 05:07:53)
|
30 |
|
Class 2 (Brief): WinDbg, IDA Pro & Qilinq
(Module 2: Tools Arsenal)
|
#22,
2 years, 1 month after release (2026-05-06 05:03:10)
|
30 |
|
Class 1 (Brief): PE Editors & Process Explorer
(Module 2: Tools Arsenal)
|
#22,
2 years, 1 month after release (2026-05-06 05:02:13)
|
30 |
|
Class 4 (Lab): Analysis Inside a Virtual Machine
(Module 1: Dynamic Analysis)
|
#24,
2 years after release (2026-05-06 04:55:24)
|
20 |
|
Class 3 (Lab): Sandbox Analysis
(Module 1: Dynamic Analysis)
|
#26,
2 years after release (2026-05-06 04:51:39)
|
20 |
|
Class 5 (Brief): Process and Network Monitoring
(Module 1: Dynamic Analysis)
|
#25,
1 year after release (2026-05-06 04:50:12)
|
30 |
|
Class 1 (Brief): Malicious Software 101
(Module 1: Dynamic Analysis)
|
#28,
2 years, 2 months after release (2026-05-06 04:46:46)
|
20 |
|
Class 5 (Lab): Windows Binaries Example
(Module 0: Windows Binaries)
|
#29,
2 years after release (2026-05-06 02:57:49)
|
10 |
|
Class 4 (Brief): .NET Assemblies
(Module 0: Windows Binaries)
|
#35,
2 years, 2 months after release (2026-05-06 02:50:48)
|
10 |
|
Class 3 (Brief): Windows Loader
(Module 0: Windows Binaries)
|
#37,
2 years, 2 months after release (2026-05-06 01:23:24)
|
10 |
|
Class 2 (Brief): Windows Executables Format
(Module 0: Windows Binaries)
|
#38,
2 years, 2 months after release (2026-05-06 01:04:56)
|
10 |
|
Class 1 (Brief): Compiling & Building Executables
(Module 0: Windows Binaries)
|
#45,
2 years, 1 month after release (2026-05-06 00:43:49)
|
10 |