{"id":3923,"date":"2026-11-04T14:26:48","date_gmt":"2026-11-04T22:26:48","guid":{"rendered":"https:\/\/cyber.mag212.com\/?page_id=3923"},"modified":"2026-11-04T14:26:48","modified_gmt":"2026-11-04T22:26:48","slug":"labs","status":"publish","type":"page","link":"https:\/\/cyber.mag212.com\/fr\/learn\/labs\/","title":{"rendered":"Hands-on Cybersecurity Labs"},"content":{"rendered":"\n<div class=\"m212x\" id=\"m212-labs\">\n<style>\n.m212x{--bg:#0a0f15;--panel:#0f1720;--panel2:#121c27;--line:#1f2d3a;--line2:#2a3b4b;--ink:#e6edf3;--mute:#9fb0c0;--green:#3ee6a0;--red:#ff5468;--cyan:#3cc8f0;--amber:#f6b544;--violet:#a98bff;\n font-family:Inter,system-ui,-apple-system,\"Segoe UI\",sans-serif;color:var(--ink);line-height:1.6;font-size:16px}\n.m212x *{box-sizing:border-box}\n.m212x h2,.m212x h3,.m212x h4,.m212x p,.m212x ul,.m212x ol{margin:0}\n.m212x a{color:var(--cyan)}\n.m212x .hero{position:relative;background:radial-gradient(ellipse at 90% 0%,rgba(60,200,240,.14),transparent 60%),var(--bg);border:1px solid var(--line);border-radius:14px;padding:34px 30px;overflow:hidden;margin-bottom:22px}\n.m212x .hero::before{content:\"\";position:absolute;left:0;right:0;top:0;height:4px;background:linear-gradient(90deg,var(--green),var(--cyan) 60%,var(--red))}\n.m212x .kick{font-size:12px;font-weight:800;letter-spacing:.2em;text-transform:uppercase;color:var(--cyan);margin-bottom:8px}\n.m212x .hero h2{font-size:clamp(26px,4.6vw,40px);line-height:1.1;font-weight:800;margin-bottom:10px}\n.m212x .hero h2 span{color:var(--green)}\n.m212x .hero p{color:var(--mute);font-size:17px;max-width:680px}\n.m212x .sec{background:var(--panel);border:1px solid var(--line);border-radius:14px;padding:24px;margin-bottom:22px;scroll-margin-top:110px}\n.m212x .sec h3{font-size:22px;font-weight:800;margin-bottom:8px}\n.m212x .sec h4{font-size:16px;font-weight:800;margin:16px 0 6px}\n.m212x .sec p{color:#cdd8e2;margin-bottom:10px}\n.m212x .lead{color:var(--mute) !important;margin-bottom:16px !important}\n.m212x .grid{display:grid;gap:14px;grid-template-columns:repeat(auto-fit,minmax(230px,1fr))}\n.m212x .card{display:block;background:var(--panel2);border:1px solid var(--line2);border-radius:10px;padding:18px;text-decoration:none;color:var(--ink)}\n.m212x a.card:hover{border-color:var(--green)}\n.m212x .card b{display:block;font-size:17px;margin-bottom:6px}\n.m212x .card p{color:var(--mute);font-size:14.5px;margin:0}\n.m212x .card .go{display:inline-block;margin-top:10px;font-size:13px;font-weight:800;letter-spacing:.06em;color:var(--green)}\n.m212x .ic{font-size:26px;display:block;margin-bottom:8px}\n.m212x ul.l,.m212x ol.l{padding-left:22px;color:#cdd8e2;margin-bottom:10px}\n.m212x ul.l li,.m212x ol.l li{margin-bottom:6px}\n.m212x table{width:100%;border-collapse:collapse;font-size:14.5px;margin:6px 0 12px}\n.m212x th{text-align:left;font-size:12px;letter-spacing:.12em;text-transform:uppercase;color:var(--mute);border-bottom:1px solid var(--line2);padding:8px}\n.m212x td{border-bottom:1px solid var(--line);padding:8px;vertical-align:top;color:#d3dde6}\n.m212x code,.m212x .mono{font-family:\"JetBrains Mono\",\"DejaVu Sans Mono\",Consolas,monospace;font-size:.9em}\n.m212x code{background:rgba(60,200,240,.1);color:#bfe9ff;padding:1px 5px;border-radius:4px}\n.m212x pre{font-family:\"JetBrains Mono\",\"DejaVu Sans Mono\",Consolas,monospace;font-size:13.5px;background:#060a0f;border:1px solid var(--line);border-left:3px solid var(--green);border-radius:6px;padding:12px 14px;overflow-x:auto;color:#cfe8d9;margin:6px 0 12px;white-space:pre}\n.m212x .callout{border:1px solid rgba(246,181,68,.4);background:rgba(246,181,68,.08);border-radius:10px;padding:14px 16px;margin:12px 0}\n.m212x .callout b{color:var(--amber)}\n.m212x .pill{display:inline-block;font-size:12px;font-weight:800;letter-spacing:.06em;padding:2px 9px;border-radius:999px;border:1px solid}\n.m212x .p-n{color:#9fb0c0;border-color:#3a4b5b}\n.m212x .p-l{color:var(--green);border-color:rgba(62,230,160,.5);background:rgba(62,230,160,.08)}\n.m212x .p-m{color:var(--amber);border-color:rgba(246,181,68,.5);background:rgba(246,181,68,.08)}\n.m212x .p-h{color:#ff8a5c;border-color:rgba(255,138,92,.5);background:rgba(255,138,92,.08)}\n.m212x .p-c{color:var(--red);border-color:rgba(255,84,104,.5);background:rgba(255,84,104,.08)}\n.m212x .toc{display:flex;flex-wrap:wrap;gap:8px;margin-top:18px}\n.m212x .toc a{font-size:14px;font-weight:700;text-decoration:none;color:var(--ink);background:var(--panel2);border:1px solid var(--line2);border-radius:999px;padding:7px 13px}\n.m212x .toc a:hover{border-color:var(--green);color:var(--green)}\n.m212x input[type=text],.m212x input[type=search],.m212x input[type=url]{width:100%;background:#060a0f;color:var(--ink);border:1px solid var(--line2);border-radius:8px;padding:12px 14px;font-size:16px;font-family:inherit}\n.m212x input:focus{outline:2px solid var(--cyan);outline-offset:1px}\n.m212x button{font-family:inherit;font-size:15px;font-weight:700;cursor:pointer;border-radius:8px;padding:11px 16px;border:1px solid var(--line2);background:var(--panel2);color:var(--ink)}\n.m212x button.pri{background:var(--green);color:#04130c;border-color:var(--green)}\n.m212x .help{display:flex;gap:18px;align-items:center;flex-wrap:wrap;background:linear-gradient(90deg,rgba(60,200,240,.12),rgba(62,230,160,.05));border:1px solid rgba(60,200,240,.35);border-radius:14px;padding:20px 24px}\n.m212x .help div{flex:1;min-width:240px}\n.m212x .help a.cta{display:inline-block;background:var(--cyan);color:#03141b;font-weight:800;text-decoration:none;border-radius:8px;padding:12px 18px}\n.m212x .small{font-size:13.5px;color:var(--mute)}\n<\/style>\n<section class=\"hero\">\n<div class=\"kick\">MAG212 CYBER \u00b7 Learn \u00b7 Hands-on labs<\/div>\n<h2>Hands-on labs: <span>practise safely on your own computer.<\/span><\/h2>\n<p>Reading about security is a start. Doing it is how it sticks. Every MAG212 lab runs locally, uses fictional data or your own device, and comes with step-by-step instructions. Nothing touches real systems, so there are no permission problems.<\/p>\n<div class=\"toc\">\n<a href=\"#rules\">Lab rules<\/a>\n<a href=\"#ai-lab\">AI ethical hacking<\/a>\n<a href=\"#mac-audit\">Mac self-audit<\/a>\n<a href=\"#windows-audit\">Windows self-audit<\/a>\n<a href=\"#log-lab\">Catch a brute-force attack<\/a>\n<\/div>\n<\/section>\n\n<section id=\"rules\" class=\"sec\">\n<h3>Three lab rules<\/h3>\n<ul class=\"l\">\n<li><b>Your device or written permission only.<\/b> Run labs on computers you own, or ones you are explicitly authorised to assess.<\/li>\n<li><b>Read before you run.<\/b> Open every script in a text editor first. That habit alone stops a lot of real attacks.<\/li>\n<li><b>Fictional data only.<\/b> Never paste real passwords, customer records or company files into a lab.<\/li>\n<\/ul>\n<\/section>\n\n<section id=\"ai-lab\" class=\"sec\">\n<h3>Lab 1 \u00b7 AI ethical hacking: your first safe prompt injection <span class=\"pill p-l\">Available<\/span><\/h3>\n<p><b>Level:<\/b> Beginner \u00b7 <b>Time:<\/b> about 30 minutes \u00b7 <b>Needs:<\/b> Python 3.9+ on Windows, macOS or Linux<\/p>\n<p>Trick a deliberately vulnerable document summarizer with a hidden line of text, watch a <i>fake<\/i> email tool fire, then add real defenses and retest honestly. It uses a fictional company and a repeatable toy model, with no AI account or internet needed.<\/p>\n<div class=\"callout\"><b>Start:<\/b> <a href=\"\/wp-content\/uploads\/2026\/11\/mag212-ai-lab.zip\">download the lab (zip)<\/a> \u00b7 <a href=\"https:\/\/youtu.be\/pcDf81aTffk\" target=\"_blank\" rel=\"noopener\">watch the video<\/a> \u00b7 <a href=\"\/learn\/ai-prompt-injection\/\">read the lesson<\/a><\/div>\n<\/section>\n\n<section id=\"mac-audit\" class=\"sec\">\n<h3>Lab 2 \u00b7 Audit your own Mac in two minutes <span class=\"pill p-l\">Available<\/span><\/h3>\n<p><b>Level:<\/b> Beginner \u00b7 <b>Time:<\/b> about 10 minutes \u00b7 <b>Needs:<\/b> macOS and the Terminal app, no administrator password<\/p>\n<p>A read-only script checks 18 security basics: macOS updates, FileVault encryption, the firewall, Gatekeeper, System Integrity Protection, sharing services and the ports your Mac opens to the network. It then saves an HTML report with a plain-language fix for every warning. It never changes a setting and sends nothing online.<\/p>\n<div class=\"callout\"><b>Start:<\/b> <a href=\"\/wp-content\/uploads\/2026\/11\/mag212-mac-audit.zip\">download the Mac lab (zip)<\/a>, unzip it into Downloads, then in Terminal run <code>cd ~\/Downloads\/mag212-mac-audit<\/code> and <code>bash mag212-mac-audit.sh<\/code>.<\/div>\n<\/section>\n\n<section id=\"windows-audit\" class=\"sec\">\n<h3>Lab 3 \u00b7 Audit your own Windows PC with PowerShell <span class=\"pill p-m\">Coming soon<\/span><\/h3>\n<p><b>Level:<\/b> Beginner to intermediate \u00b7 <b>Needs:<\/b> Windows 10\/11, PowerShell (administrator optional)<\/p>\n<p>The same idea for Windows: Microsoft Defender, Windows Update, the firewall, BitLocker, Secure Boot, UAC, local accounts, Remote Desktop, SMBv1, startup programs and listening ports, all read-only. It is currently being tested on real Windows machines before release, together with its video walkthrough.<\/p>\n<\/section>\n\n<section id=\"log-lab\" class=\"sec\">\n<h3>Lab 4 \u00b7 Catch a brute-force attack in the logs <span class=\"pill p-m\">Coming soon<\/span><\/h3>\n<p><b>Level:<\/b> Beginner SOC \u00b7 <b>Needs:<\/b> any computer<\/p>\n<p>Use sample log files to spot a password-guessing attack, work out which account was targeted and from where, and write a simple detection rule. It is good preparation for our <a href=\"\/learn\/learning-paths\/\">SOC &amp; incident response path<\/a>.<\/p>\n<p class=\"small\">Want to be told when new labs go live? <a href=\"\/subscribe-free\/\">Subscribe free<\/a>.<\/p>\n<\/section>\n<div class=\"help\"><div><div class=\"kick\" style=\"margin-bottom:4px\">Need expert help?<\/div>\n<p style=\"font-size:17px;margin:0\"><b>MAG212 CYBER<\/b> offers network and cybersecurity consultation, penetration testing with MAG212 Atlas, and security seminars for organisations around the world.<\/p><\/div>\n<a class=\"cta\" href=\"\/services\/\">Explore our services \u2192<\/a><\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Free, safe, hands-on cybersecurity labs you run on your own computer: AI prompt injection, Mac and Windows self-audits, and log analysis.<\/p>","protected":false},"author":1,"featured_media":0,"parent":3385,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-3923","page","type-page","status-publish","hentry"],"_hostinger_reach_plugin_has_subscription_block":false,"_hostinger_reach_plugin_is_elementor":false,"_links":{"self":[{"href":"https:\/\/cyber.mag212.com\/fr\/wp-json\/wp\/v2\/pages\/3923","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cyber.mag212.com\/fr\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/cyber.mag212.com\/fr\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/cyber.mag212.com\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cyber.mag212.com\/fr\/wp-json\/wp\/v2\/comments?post=3923"}],"version-history":[{"count":1,"href":"https:\/\/cyber.mag212.com\/fr\/wp-json\/wp\/v2\/pages\/3923\/revisions"}],"predecessor-version":[{"id":3926,"href":"https:\/\/cyber.mag212.com\/fr\/wp-json\/wp\/v2\/pages\/3923\/revisions\/3926"}],"up":[{"embeddable":true,"href":"https:\/\/cyber.mag212.com\/fr\/wp-json\/wp\/v2\/pages\/3385"}],"wp:attachment":[{"href":"https:\/\/cyber.mag212.com\/fr\/wp-json\/wp\/v2\/media?parent=3923"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}