Security Labs

Practice penetration testing in safe, isolated environments

Experience our security testing methodologies firsthand with Docker-powered labs. Each lab features real-world vulnerabilities in isolated containers.

Getting Started

🐳

Prerequisites

  • Docker Desktop installed
  • Basic command line knowledge
  • Web browser (Chrome/Firefox)
  • Optional: Burp Suite Community
🚀

Quick Setup

  1. Choose a lab from below
  2. Run the Docker command
  3. Access the lab in your browser
  4. Follow the challenge instructions
🛡️

Safety First

  • All labs run in isolated containers
  • No risk to your local system
  • Reset environment anytime
  • Perfect for learning and practice

Available Labs

Beginner
💉

SQL Injection Lab

Practice SQL injection techniques on a vulnerable web application. Learn to identify and exploit database vulnerabilities safely.

⏱️ 30-60 minutes
🎯 Beginner
🔧 SQLMap, Manual

Setup Command

docker run -p 8080:80 telvido/sql-injection-lab

Access the lab at: https://telvido.com:8080

Intermediate
🎯

Cross-Site Scripting (XSS)

Explore different types of XSS vulnerabilities including reflected, stored, and DOM-based XSS attacks.

⏱️ 45-90 minutes
🎯 Intermediate
🔧 Burp Suite, Manual

Setup Command

docker run -p 8081:80 telvido/xss-lab

Access the lab at: https://telvido.com:8081

Intermediate
🔐

Authentication Bypass

Practice bypassing authentication mechanisms including weak passwords, session management flaws, and logic vulnerabilities.

⏱️ 60-120 minutes
🎯 Intermediate
🔧 Burp Suite, Hydra

Setup Command

docker run -p 8082:80 telvido/auth-bypass-lab

Access the lab at: https://telvido.com:8082

Advanced
🔗

API Security Testing

Test REST and GraphQL APIs for common vulnerabilities including authentication bypasses, authorization flaws, and data exposure.

⏱️ 90-180 minutes
🎯 Advanced
🔧 Postman, Burp Suite

Setup Command

docker run -p 8083:3000 telvido/api-security-lab

Access the lab at: https://telvido.com:8083

Ready to Start Learning?

Choose a lab above and begin your hands-on security testing journey. Remember, these are safe environments designed for learning.