Free Account — Full Access to All Content

Learn Cybersecurity
the Hands-On Way

Real attack labs. Real tooling. Real skills. KaliRange gives you guided exercises in Kali Linux, penetration testing, and network fundamentals — built by practitioners, for learners who want to actually do, not just read.

Start Hacking — It's Free → View Learning Paths
118+
Labs
63+
Workbooks
5
Learning Paths
100%
Free
— learners online right now
kalirange ~ terminal
0
Hands-On Labs
0
Learning Paths
0
Pages of Notes
0
Free Forever
// how it works

Go from Zero to Hacking in Three Steps

No setup headaches. No subscription. Just open a browser and start.

🗺️
STEP 01

Pick Your Path

Choose from 5 structured learning paths based on where you are — complete beginner to advanced specialist. Every path tells you exactly what to do next.

⚡
STEP 02

Follow Guided Labs

Each lab walks you through real tools and real techniques — step by step, command by command. Run nmap, exploit services, crack hashes, pivot through networks.

🏆
STEP 03

Build Real Skills

Track your progress, complete paths, and walk away with hands-on skills that map directly to OSCP, CEH, eJPT, and real security roles.

// learning paths

Five Paths. One Goal: Mastery.

Structured, sequenced curricula — from total beginner to specialist. Pick where you are and follow the path.

View All Paths →
🎯

Zero to Hacker

Start from scratch. Build your Linux foundation, learn the hacker mindset, and run your first exploits. The essential starting point.


beginnerlinuxnmapmetasploit

Beginner · 8 weeks
🕸️

Web Security

Master the OWASP Top 10 and beyond. SQLi, XSS, SSRF, SSTI, OAuth flaws — attack and defend modern web applications.


sqlixssburpsuitessrf

Intermediate · 6 weeks
🏢

Infrastructure & Active Directory

Pivot through networks, own domain environments. Kerberoasting, BloodHound, lateral movement, and full AD compromise.


active-directorykerberosbloodhoundpivoting

Advanced · 8 weeks
🛡️

Defensive Security

Detect, respond, and hunt. SIEM, log analysis, memory forensics, incident response — see attacks from the defender's side.


siemdfirforensicsthreat-hunting

Intermediate · 6 weeks
💥

Exploit Development

Go deep on binary exploitation. Buffer overflows, ROP chains, format strings, shellcoding — understand the machine at its lowest level.


bofropgdbshellcode

Expert · 10 weeks
+6

Specialty Electives

Cloud Security, OSINT, Cryptography, Social Engineering & more


Explore All →
// featured labs

Start With These

Handpicked labs covering the most essential skills in cybersecurity.

View All Labs →
WordPress Exploitation
BeginnerWeb Security
🕸️

Enumerate and attack WordPress sites — the most widely deployed CMS on the internet — from user discovery to full compromise.

⏱ 45 minutes📋 8 steps
Web Security
Kerberos Attacks
AdvancedCredentials
🔑

Abuse the Kerberos protocol — Kerberoasting, AS-REP roasting, delegation and ticket forgery.

⏱ 3 hours📋 8 steps
Credentials
AD Enumeration with BloodHound
IntermediateNetwork
📡

Collect and analyse Active Directory relationships to find the shortest path to Domain Admin.

⏱ 1.5 hours📋 8 steps
Network
Cracking WPA/WPA2 Networks
IntermediateNetwork
📡

Capture handshakes and recover WPA/WPA2 passphrases for personal and enterprise networks.

⏱ 1.5 hours📋 8 steps
Network
Prompt Injection Attacks
IntermediateCoding
💻

Manipulate large language model applications through direct and indirect prompt injection.

⏱ 1.5 hours📋 8 steps
Coding
Windows Privilege Escalation
IntermediateKali Linux
🐉

Escalate from a standard Windows user to SYSTEM via services, privileges and misconfiguration.

⏱ 1.5 hours📋 8 steps
Kali Linux
// inside a lab

What You Actually Get

Every lab is guided, hands-on, and built to create real muscle memory — not just theory.

kalirange.com/labs/nmap-scanning
Easy Kali Linux ⏱ 45 min  ·  📋 8 steps

Network Scanning with Nmap

Master Nmap from basic pings to full service enumeration. The essential first skill for any pen tester.

STEP 2 OF 8 — Host Discovery

Discover which hosts are alive on the network. Run a ping sweep across the subnet:

$ nmap -sn 10.10.10.0/24

Starting Nmap 7.94
Host: 10.10.10.1  Status: Up
Host: 10.10.10.50 Status: Up
Nmap done: 256 IPs, 2 hosts up
📋

Step-by-Step Instructions

Every lab breaks into clear steps with exact commands, expected output, and explanations of what each flag does and why.

📊

Progress Tracking

Mark steps complete and pick up exactly where you left off — across any device. Your dashboard shows everything in one place.

📖

Linked Workbooks

Labs link to the theory workbooks behind them. Learn the concept, then immediately apply it hands-on in the same session.

⚡

No Cloud Credits Needed

Labs run on a standard Kali Linux install. No subscriptions, no VMs to spin up in the cloud — just your machine and real tools.

Try This Lab Free →
// workbooks

Study Guides & References

Deep-dive workbooks you can work through at your own pace.

All Workbooks →
📡Advanced

Active Directory Enumeration & Attacks

A complete journey through attacking Active Directory — from initial foothold to domain dominance.

active-directoryattacksenumerationenterprise
4 chapters · ~5 hours
Read →
🐉Intermediate

Digital Forensics & Incident Response

Investigate compromises soundly — core forensic concepts, Windows artefacts and the incident-handling lifecycle.

forensicsdfirincident-responsedefensive
4 chapters · ~4 hours
Read →
💻Advanced

AI Red Teaming

A complete introduction to attacking AI and ML systems — the threats, methodology and defences.

aired-teamllmmachine-learning
3 chapters · ~5 hours
Read →
🐉 Kali Linux

Kali Linux Fundamentals

From installation to advanced usage. File system, tools overview, scripting, and workflow optimization.

12 chapters~4 hoursRead →
🛡️ CyberSec

Cybersecurity Essentials

Core concepts, attack methodologies, CIA triad, threat modelling, and the penetration testing lifecycle.

10 chapters~3 hoursRead →
🌐 CCNA

CCNA Foundation Guide

Network models, IP addressing, routing protocols, switching, VLANs, ACLs, and network security fundamentals.

15 chapters~6 hoursRead →
// about kalirange

Built by a Practitioner,
for Practitioners.

KaliRange was founded by Uzair Varsaji with a single mission: give people a place to actually practice cybersecurity — not just watch videos or read textbooks.

Every lab, workbook, and note here is designed to be hands-on. You'll run real commands, crack real hashes, analyze real traffic, and build real skills that translate directly into the field.

118 labs. 63 workbooks. 5 structured learning paths from beginner to expert. And it will always be completely free.

Start a Lab → Read Workbooks
Uzair Varsaji
Uzair Varsaji
Founder, KaliRange
"The only way to learn offensive security is to actually do it. KaliRange is the training ground I wish I had when I started — practical, structured, and completely hands-on."
100%
Free Content
Free
No Credit Card
// start now

Ready to Hack?

No account. No payment. Just open a lab and start learning. Your first exploit is one click away.

🔍 First Lab: Nmap Scanning 📓 Read Kali Fundamentals