Hands-on All Courses

Explore hands-on cybersecurity courses across five technical paths, from Beginner to Intermediate, with guided labs and HTK certificates.

13

Courses

5

Beginner

5

Intermediate

5

Paths

Save with a Complete Learning Path

Beginner + Intermediate unlocked in one purchase. Discord community included.

Beginner (119€) + Intermediate (159€) = 278 € 199€. You save Save 79 € (28%).

278 €

199 €

Save 79 € (28%)

Pick a course, launch a lab

Each course pairs a guided VM lab with CTF-style objectives and an HTK certificate on completion.

New to cybersecurity?Start with Introduction to Cybersecurity — free, no card required.Start here →
Intro

Introduction to Cybersecurity

Confidentiality
Integrity
Availability
Introductory200 XP
Free

Introduction to Cybersecurity

Start from zero: the CIA triad, how attackers think, threat families, phishing analysis, hashes, and OSINT, ending with a real investigation lab. Free, hands-on, and beginner-friendly.

2 guided labs3h of content
Intro

SOC Analyst: Your First Shift

P1 EDR binary flagged
P2 Proxy beacon 60s
P3 Auth impossible logon
Introductory200 XP
Free

SOC Analyst: Your First Shift

Sit down at the console with a queue of alerts: read the six fields that matter, apply the four triage questions, prioritise forty alerts, enrich without tipping off the attacker, and write an escalation ticket L2 accepts. Free, and it ends with a full shift on real logs.

2 guided labs3h of content
Intro

Networking for Analysts: Reading Traffic

DNS query :53
TLS handshake :443
TCP SYN :80
Introductory200 XP
Free

Networking for Analysts: Reading Traffic

Ports, DNS, HTTP and TLS explained for someone who has to read traffic, not configure it. Layers without memorising them, TCP vs UDP, NAT and proxies, and the Wireshark filters that solve most of it. Free, and it ends with a real incident capture.

2 guided labs3h of content
Beginner

Windows Malware

.text.rdata.data.rsrc
MZ · PE32 executable · 4 sections
◎ BEGINNER500 XPAudio:ES

Windows Malware Beginner

Master the fundamentals of Windows malware analysis: static triage, dynamic execution, C2 detection, persistence hunting, and MITRE ATT&CK mapping in a guided FLARE-VM lab environment.

1 guided lab14h of content

119 EUR

View course →
Intermediate

Windows Malware

RIP 0x00401f20 bp
unpack OEP found
dump IAT rebuilt
▲ INTERMEDIATE750 XPAudio:ES

Windows Malware Intermediate

Intermediate Windows malware analysis: bypass anti-debug and sandbox evasion, manually unpack binaries with x64dbg and ScyllaHide, detect process injection and hollowing, extract C2 configs, and deliver DFIR reports.

2 guided labs16h of content

159 EUR

View course →
Beginner

Phishing with OSINT

paypa1-secure.com SPOOFED
◎ BEGINNER500 XPAudio:ES

Phishing with OSINT Beginner

Learn to detect, analyze, and investigate phishing campaigns, from email indicators and SSL certificate analysis to malicious document triage, attacker infrastructure tracking, and controlled simulation with GoPhish.

1 guided lab9h of content

119 EUR

View course →
Intermediate

Phishing with OSINT

SPF fail
DKIM fail
DMARC p=none
▲ INTERMEDIATE750 XPAudio:ES

Phishing with OSINT Intermediate

Advanced phishing investigation: polymorphic kit analysis, domain forensics, email authentication bypass (SPF/DKIM/DMARC), MFA attack simulation with Evilginx, and professional threat intelligence reporting.

2 guided labs15h of content

159 EUR

View course →
Beginner

Threat Hunting

ANOMALY
◎ BEGINNER500 XPAudio:ES

Threat Hunting Beginner

Practical threat hunting foundations with guided hands-on labs.

1 guided lab10h of content

119 EUR

View course →
Intermediate

Threat Hunting

hunt> parent=winword.exe AND child=powershell.exe
MITRE T1059.001 match
▲ INTERMEDIATE750 XPAudio:ES

Threat Hunting Intermediate

Intermediate threat hunting with complex real-world scenarios and professional workflow.

2 guided labs12h of content

159 EUR

View course →
Beginner

Network Security

◎ BEGINNER500 XPAudio:ES

Network Security Beginner

Practical network security foundations with guided hands-on labs.

1 guided lab10h of content

119 EUR

View course →
Intermediate

Network Security

L7 HTTP/TLS :443
L4 TCP SYN scan?
L3 IPv4 10.0.0.0/24
▲ INTERMEDIATE750 XPAudio:ES

Network Security Intermediate

Intermediate network security with complex real-world scenarios and professional workflow.

2 guided labs12h of content

159 EUR

View course →
Beginner

Android Malware

SEND_SMS
READ_CONTACTS
INTERNET
◎ BEGINNER500 XPAudio:ES

Android Malware Beginner

Practical Android malware foundations with guided hands-on labs.

1 guided lab10h of content

119 EUR

View course →
Intermediate

Android Malware

classes.dex obfuscated
libnative.so packed
▲ INTERMEDIATE750 XPAudio:ES

Android Malware Intermediate

Intermediate Android malware with complex real-world scenarios and professional workflow.

2 guided labs12h of content

159 EUR

View course →

Courses Frequently Asked Questions

Common questions students ask before enrolling in a course.

Start with your goal: if you want to analyze malware, go Windows or Android. If you're interested in deception and intelligence gathering, choose Phishing & OSINT or Threat Hunting. Network Security covers traffic analysis and protocol-level attacks. When in doubt, Windows Malware Beginner is the most popular starting point.

No experience is required for Beginner courses. They are built from scratch with guided, step-by-step lab instructions. You need basic computer literacy, no programming or hacking background needed. Intermediate courses assume you have completed the Beginner level or have equivalent knowledge.

Every course includes: written lessons with theory, a hands-on lab running in an isolated cloud VM with professional tools pre-installed, auto-validated flag objectives (CTF-style), quizzes and a module exam per module, and a final assignment reviewed by an instructor. Some courses also include narrated video; the course page states which.

Yes. Courses are sold independently, so you can buy only Beginner or only Intermediate. If you want both levels for the same track, the Complete Learning Path bundles them together at a discounted price (199 € instead of 278 €) and also includes Discord community access.

A lab session opens a VM window of up to 3 hours, depending on the lab. Once your time is up the VM is destroyed, but you can start a fresh session as many times as you need — restarts are unlimited and included.

Yes to both. Lab restarts are unlimited, practice as many times as you want with no additional cost. Exams can also be retaken. The HTK certificate is issued once you pass the final exam with a qualifying score.

Yes. Once purchased, you have permanent access to all course materials, future content updates for that course, and the ability to restart labs at any time. There is no subscription, it is a one-time purchase.

Yes. 14-day money-back if lesson progress is below 20% and you have not completed the HTK certificate path (all lessons + labs) for that course. Submit via Account → Orders. See Refund Policy.

All text content is available in both Spanish and English: lessons, exams, quizzes, flags and labs. Where a course includes narrated video, the audio is Spanish for now (English is coming) and the videos carry subtitles. Most courses are text-and-lab based and are unaffected.

From the HTK Blog