BreachLab — Wargame Platform
@breachlab

BreachLab — the hacker gym

BreachLab is a self-hosted wargame platform training the next generation of security operatives. We drop players into real Linux boxes, real shells, real privilege-escalation scenarios — no click-to-solve, no hand-holding, no certification grind.

Live tracks

• 🟢 Ghost — 22 levels. Linux and shell fundamentals. Navigation, permissions, processes, encoding, network, SSH keys, port scanning, cron, git forensics, /proc. Where every operator starts.
• 🟢 Phantom — 32 levels. Post-exploitation — the full chain. SUID, sudo, capabilities, kernel CVEs, credential harvesting, persistence, defense evasion, lateral movement, container escape, Kubernetes takeover, cloud pivot, data exfiltration, operational cleanup.
• 🟢 Specter I (just shipped 2026-05-11) — 14 levels. OSINT and open-source investigation. Paper-trail forensics, advanced search-operator chains, source-code intelligence, JS reconnaissance, people recon, sock-puppet OPSEC, image geolocation, reverse-image triage, travel-pattern reconstruction, corporate intel, dark-web leak-broker hunts, Telegram supergroup convergence, adversarial counter-intel, and a finale graded as a Berkeley Protocol-aligned court-admissible report. Graduates earn the Specter Analyst certification.
• More Specter sub-tracks coming: II (network), III (wireless), IV (social engineering), V (physical & resilience).

• Tracks on the roadmap: Mirage (web), Cipher (crypto), Nexus (CI/CD & supply chain), Oracle (AI/LLM), Wraith (Windows/AD), Shadow, Sentinel, Prism, Venom, Flux.

  Graduates earn serialised certificates and dedicated Discord roles. First-bloods get permanent recognition on the leaderboard.

  Why we need your support

  BreachLab runs on a single VPS + a crypto-node volume. Every euro pays for:

• VPS hosting — CPX32, €17/month

• NVMe storage volume — 90 GB for wargame containers and Bitcoin + Monero nodes, €10/month

• Domain — breachlab.org

• Future tracks — each track takes weeks of design

• Container rebuilds — kernels, CVEs, distro upgrades. Every few months we rebuild the wargame boxes from scratch to match the current threat landscape

  No ads. No tracker. No corporate sponsors. No VC money. Everything self-hosted, including the donation infrastructure — we run our own BTCPay Server for BTC / Lightning / XMR / USDT-L with 0% processing fees and no custodian.

  Links

• 🌐 Site: https://breachlab.org

• ⚡ Donate crypto: https://breachlab.org/donate

  Thanks for keeping this project non-custodial, independent, and free for every future operator.