Prove yourself by following the breadcrumbs. Learn the essentials: SQL injection, DoS and cryptography. Not through lectures, but via short, hands-on demos and guided micro-challenges. Each challenge is based on a real attack that actually happened, recreated in a controlled lab environment.

Your first mission for Sine Nomine begins. You'll break into Solstice Bank to uncover how the wealthy launder their money. But the deeper you go, the clearer it becomes, Solstice is just the surface. All trails lead to Vaulture Capital, a much bigger target.

This is not just a single hack; it's the start of something larger. Through The Rabbit Hole, you'll gather intel on Vaulture Capital, map their systems and sharpen your skills. By the end of Month 2, you've covered the OWASP Top 10, profiled your victims and prepared yourself for the ultimate heist.

Use everything you've learned so far to take on Vaulture Capital. In our live in-person session, you'll breach the systems of Vaulture Capital, a shadowy private bank with deep pockets and dirty secrets. Working as a team, you'll scan, exploit and exfiltrate funds in real-time.

But your mission does not end there. After Hack the Bank, you'll dive into the Bits n Bites app, a real-world mobile delivery platform hiding insecure APIs, broken authentication and exploitable XSS paths. You'll uncover how weak cryptographic design and blind SQL injection can lead to full account takeover. More importantly, you'll learn to think critically about unsafe patterns in modern mobile/web systems and how to turn your findings into action for defenders.

No system is unbreachable, because no system is without people. In the previous months you've hacked code. Now it's time to hack humans. This month, you'll enter the world of social engineering, where exploits do not rely on bugs, but on behavior.

Through phishing, pretexting, whaling and more, you'll manipulate your way past technical defenses. You'll gather intel, choose your target and execute a full attack chain. From initial contact to exfiltration.

Month 5 opens on ILIAS, a fast-growing AI scale-up with a dangerously misconfigured cloud. What starts as a stray credential in a verbose production log spirals into full organizational takeover. You'll exploit VM metadata services, abuse IAM roles, drain key vaults and escalate to subscription Owner. Two paths, two endings, one question: how far do you go?

Then the floor drops. Apex Meridian's cryptographic service Whisper CORE exposes no obvious attack surface. No injection points. No leaked tokens. Just behavior. You'll learn to listen. Timing-based side-channel analysis. Error oracle attacks. Padding oracle attacks, byte by byte, until a full block yields its secret. Statistical decryption of bearer tokens. You'll reconstruct an internal API catalog from scraps of service responses and uncover hidden data relationships across data lakes.

Month 5 is where instinct replaces checklists. You stop looking for the obvious flaw. You start reading the system.

One last hack. One last chance to prove you've mastered The Grid. While you were training, the enemy was watching. Sine Nomine is under attack. A rival hacker group has been tracking your progress and is now coming for the organization that built you. Your final mission: go on the offensive. Infiltrate their hacker forum on the dark web, the nerve center where they coordinate their attacks. To succeed, you'll need to think like an attacker and a defender. Analyze the system. Exploit its weaknesses. Patch its flaws. And above all: survive the breach with lessons you can carry into the real world.

This is your final test. Bring it down and graduate from The Grid.