Jump to content

Practice Images: Difference between revisions

From WikiCyber
Newer edit →

MigrationBot (talk | contribs)

1 user group
128 edits
VisualWikitext
Add practice image list (83 images: Windows, Linux, Cisco, Misc)
 
Point to the shared practice-image spreadsheet for now (table version kept in page history)
Tag: Replaced
Line 1: Line 1:
{{Submit}}
{{Submit}}
<!-- Generated from the community practice-image sheets (WINDOWS, LINUX, CISCO, MISC). Editorial notes: creators' personal-site links dropped unless they are the image's own page/download/walkthrough (Terms of Use 6.1); joke/placeholder rows dropped; creators' published practice-image logins kept. Links lost in the CSV export are marked TODO. Licence of the source sheets is not stated - reviewer please confirm. -->
<!-- Interim version (2026-09-19): points to the shared spreadsheet until the list is formatted for the wiki. The full table version is drafts/Practice_Images.wiki in the project folder and in this page's history. -->
Author(s): (add name) <br /> Last Updated: 9-18-2026
Author(s): (add name) <br /> Last Updated: 9-18-2026


'''Practice images''' are virtual machines (and Cisco Packet Tracer activity files) that someone has built to look like a neglected, vulnerable system. You harden them the way you would a real one: find the problems, fix them and answer the forensic questions, ideally under a time limit. They are the best way to get hands-on practice for competitions such as CyberPatriot without touching a system you care about.
'''Practice images''' are virtual machines (and Cisco Packet Tracer activity files) that someone has built to look like a neglected, vulnerable system. You harden them the way you would a real one: find the problems, fix them and answer the forensic questions, ideally under a time limit. They are the best way to get hands-on practice for competitions such as CyberPatriot without touching a system you care about.


This page lists 83 community-made images for Windows, Linux and Cisco. Every image was made by a volunteer; WikiCyber only collects the list.
== The list ==
 
The community's list of practice images for Windows, Linux and Cisco Packet Tracer, with difficulty, ratings, creators and download links, is kept in a shared spreadsheet:
 
'''[https://docs.google.com/spreadsheets/d/1cdVHtk4w5JDJCYy-EO2_ycr0ZqMgUyjFOVDn5Y8eGVw/edit?usp=sharing Practice images spreadsheet]'''


== Before you download ==
== Before you download ==
Line 11: Line 15:
* '''Use a virtual machine and take a snapshot first.''' Some images deliberately contain malware-like programs, backdoors and unwanted software. Never run one on your everyday computer, and keep its network set to NAT or host-only.
* '''Use a virtual machine and take a snapshot first.''' Some images deliberately contain malware-like programs, backdoors and unwanted software. Never run one on your everyday computer, and keep its network set to NAT or host-only.
* '''WikiCyber does not host, review or guarantee these files.''' They sit on third-party sites (mostly Google Drive) and links break or move. An image may also be broken or out of date.
* '''WikiCyber does not host, review or guarantee these files.''' They sit on third-party sites (mostly Google Drive) and links break or move. An image may also be broken or out of date.
* '''Passwords in the tables are for the practice images only.''' They are published by the image creators so you can log in. Never reuse them anywhere real.
* '''Any logins or extraction passwords in the spreadsheet are for the practice images only.''' Never reuse them anywhere real.
* '''Large and multi-part downloads are normal.''' Use [https://www.7-zip.org/ 7-Zip] to extract them, and read the README inside each image before you start.
* '''Large and multi-part downloads are normal.''' Use [https://www.7-zip.org/ 7-Zip] to extract them, and read the README inside each image before you start.
* '''Try before you peek.''' Where a walkthrough or answer key exists it is marked ''spoilers''. You learn far more if you work until you are truly out of ideas first.
* '''Try before you peek.''' Where a walkthrough or answer key exists, you learn far more if you work until you are truly out of ideas first.
* This list is unofficial and is not affiliated with CyberPatriot, the Air & Space Forces Association, Cisco or Microsoft. Each image belongs to its creator. If you made an image and want the credit corrected or the entry removed, leave a message on this page's Talk tab.
* Cisco Packet Tracer activity files (<code>.pka</code>) need [https://www.netacad.com/ Cisco Packet Tracer], which Cisco offers through its Networking Academy.
 
* This list is unofficial and is not affiliated with CyberPatriot, the Air & Space Forces Association, Cisco or Microsoft. Each image belongs to its creator.
== How to read the tables ==
 
Click a column heading to sort. The tables start with the hardest images.
 
{| class="wikitable" style="width:auto"
! Level !! Meaning
|-
| 0 || Unrated
|-
| 1 || Easy
|-
| 2 || Easy – Medium
|-
| 3 || Medium
|-
| 4 || Medium – Hard
|-
| 5 || Hard
|-
| 6 || Hard – Super Hard
|-
| 7 || Super Hard
|-
| 8 || Super-Duper Hard
|}
 
'''Rating''' is the average score out of 10 from the community's [https://forms.gle/MMC29FrJ8oQUmKNg8 rating form]. A dash means no rating yet. Difficulty and ratings are opinions, not measurements.
 
== Windows ==
 
{| class="wikitable sortable" style="width:100%"
|-
! Image
! OS
! Difficulty
! Rating
! Creator
! Critical services / apps
! class="unsortable" | Notes
! class="unsortable" | Download
|-
| '''Troy Windows 10 Mock'''
| Windows 10
| data-sort-value="8" | 8 – Super-Duper Hard
| data-sort-value="8.0" | 8
| dudcom
| Netscape Navigator, MobaXTerm, Nginx, VSCode, ThunderBird, MySQL, BitComet
| —
| [https://drive.google.com/drive/folders/1dG-Xc7FsrCa_agSrjegMmlY8Ze0LI-jk?usp=drive_link Google Drive folder]
|-
| '''Beyond Journey's End'''
| Windows Server 2022
| data-sort-value="7" | 7 – Super Hard
| data-sort-value="8.0" | 8
| HIOOOO1234
| Active Directory, DNS, RDP
| Login: <code><nowiki>Frieren</nowiki></code> / <code><nowiki>Password1!</nowiki></code>
| [https://drive.google.com/file/d/1PRe5T9WXljVBh2e9CBqCpzObezsBb-HH/view?usp=sharing Google Drive]
|-
| '''Middlesea Hospital'''
| Windows Server 2025
| data-sort-value="7" | 7 – Super Hard
| data-sort-value="0" | —
| carbonice
| —
| Not released yet when the source list was compiled.
| —
|-
| '''Tokyo-3 Server'''
| Windows Server 2025
| data-sort-value="7" | 7 – Super Hard
| data-sort-value="9.0" | 9
| x1nni
| ApacheDS, pGina, MySQL, IIS (running Pydio 8), DNS, RDP, WinRM
| Login: <code><nowiki>sikari</nowiki></code> / <code><nowiki>IMu$t(N0t)Run&w4y</nowiki></code>
| [https://ejinnis.ca/practice-images/tokyo-3/ Author's page]
|-
| '''Baldis Basics'''
| Windows Server 2022
| data-sort-value="7" | 7 – Super Hard
| data-sort-value="9.5" | 9.5
| Donkey (d0nkeyman)
| Active Directory (Domain Services, DNS)
| —
| [https://drive.google.com/file/d/1woYKSkHiBAZI92D2ihTE72LNLABaGtXv/edit Google Drive]
|-
| '''King Arthurs Castle'''
| Windows Server 2019
| data-sort-value="7" | 7 – Super Hard
| data-sort-value="10.0" | 10
| Altoid0
| AD:DS, DNS, Dimension4, RDP
| Login: <code><nowiki>Arthur</nowiki></code> / <code><nowiki>CyberPatriot1!</nowiki></code>
| [https://drive.google.com/file/d/13OBAXsv408TQJ-WtNMc-mUEe2IBvI-UV/view?usp=share_link Google Drive]
|-
| '''Dead by Daylight'''
| Windows Server 2019
| data-sort-value="7" | 7 – Super Hard
| data-sort-value="10.0" | 10
| lolmenow
| Active Directory (Domain Services, DNS), DHCP
| Login: <code><nowiki>David</nowiki></code> / <code><nowiki>Th3_Ent1ty_Re4lm!</nowiki></code>
| [https://drive.google.com/file/d/1hWs8oLxXI1Ar0QaZSg0yTiQjHI_SPznd/view?usp=sharing Google Drive]
|-
| '''Princeton-Plainsboro Teaching Hospital (PPTH)'''
| Windows 11
| data-sort-value="6" | 6 – Hard - Super Hard
| data-sort-value="9.0" | 9
| x1nni
| SMB, RDP, Counter Strike Server (SRCDS)
| —
| [https://ejinnis.ca/practice-images/princeton-plainsboro-teaching-hospital/ Author's page]
|-
| '''Alphabet Soup'''
| Windows 10
| data-sort-value="6" | 6 – Hard - Super Hard
| data-sort-value="8.0" | 8
| swiftsnails
| RDP
| —
| [https://drive.google.com/file/d/1zTLpm26kZowc4mdNwrDv33RsCV-fj4-i/view Google Drive]
|-
| '''Sunrise Foundation Training Simulation'''
| Windows Server 2022
| data-sort-value="6" | 6 – Hard - Super Hard
| data-sort-value="9.0" | 9
| carbonice
| Active Directory (Domain Services, Certificate Services, DNS), IIS, RDP, SMTP (MailEnable), SMB
| Login: <code><nowiki>adminaccount</nowiki></code> / <code><nowiki>G0oDLuCK!!</nowiki></code><br />Extraction password: <code><nowiki>1658502732</nowiki></code><br />Treat <code>READMETOO.txt</code> as an extension of the usual README.
| [https://drive.google.com/file/d/1mm9jIRGv-OeGnywhIZgn4XcJV4fHjJGc/view?usp=sharing Google Drive]
|-
| '''Mushroom Kingdom'''
| Windows Server 2019
| data-sort-value="6" | 6 – Hard - Super Hard
| data-sort-value="8.0" | 8
| Magistrate
| IIS, Active Directory DNS, Active Directory Domain Services, Microsoft SQL, SMB, PHP
| Login: <code><nowiki>Mario</nowiki></code> / <code><nowiki>S3cure%The%Shr00ms</nowiki></code><br />Extraction password: <code><nowiki>MushroomMan64</nowiki></code>
| [https://drive.google.com/file/d/1KR1mnH5k5XGTOEJ-FdnYbZvLl12yMlQO/view Google Drive]
|-
| '''Hunter Management'''
| Windows Server 2022
| data-sort-value="5" | 5 – Hard
| data-sort-value="0" | —
| Unknown
| Active Directory (Domain Services, Directtory Certificate Services), DNS, and RDP
| Login: <code><nowiki>Adminstrator</nowiki></code> / <code><nowiki>CyberPatriot123!</nowiki></code>
| [https://drive.google.com/file/d/1by2aGa7zifXDvJMXKp2F7CEP0Am91Hq3/view?usp=drive_link Google Drive]
|-
| '''Town of Salem'''
| Windows Server 2022
| data-sort-value="5" | 5 – Hard
| data-sort-value="0" | —
| many_overcomplications
| —
| —
| [https://drive.google.com/file/d/1zD4LH7bWTvrJT3l0pJ906jgcWiDOjCIo/view?usp=sharing Google Drive]
|-
| '''Startup Central'''
| Windows Server 2022
| data-sort-value="5" | 5 – Hard
| data-sort-value="0" | —
| zyncist
| —
| Login: <code><nowiki>Administrator</nowiki></code> / <code><nowiki>Cyberpatriot21</nowiki></code><br />The source list was unsure where this download lives, so the link may not work.
| [https://scoreboard.titanturtles.xyz/files/c/TeamAssignmentTests/CP18/SharedWindowsTeamAssingment.7z Direct download (.7z)]
|-
| '''Aperture Science (Windows)'''
| Windows 10
| data-sort-value="5" | 5 – Hard
| data-sort-value="9.5" | 9.5
| infernushawk
| OpenSSH Server, FileZilla Server, SMB, RDP
| Three-part download: extract the first file with 7-Zip and the rest should follow. The links and extra details are in a Discord message.
| [https://discord.com/channels/301768361136750592/1058312750905954397/1153448304768716862 Discord message (needs Discord access)]
|-
| '''Windows Persistence Practice Image'''
| Windows Server 2025
| data-sort-value="5" | 5 – Hard
| data-sort-value="9.0" | 9
| pumpkinjones6_02843
| —
| Scores only ''persistence'': the methods attackers use to keep access to a machine.
| [https://drive.google.com/file/d/1xASQTw2yEdzUiEp02hQ0N0n2uceUUGPK/view Google Drive]
|-
| '''Lobotomy Corporation First Trumpet'''
| Windows Server 2022
| data-sort-value="5" | 5 – Hard
| data-sort-value="0" | —
| carbonice
| Active Directory (Domain Services, Certificate Services, DNS), IIS (MediaWiki), MySQL, RDP
| '''Warning:''' this was a rushed test image that was never meant for public use and has many problems; the author plans to replace it.<br />Login: <code><nowiki>sysAdmin</nowiki></code> / <code><nowiki>Password123!</nowiki></code><br />Three-part zip: extract part 1 with 7-Zip in the same folder as parts 2 and 3.
| [https://drive.google.com/file/d/1Cs6egjX1yokZRGq8SmdLsHcgx0qwVl90/view Google Drive]<br />[https://drive.google.com/file/d/1mN8yucgD31tVIJgWRkfYyRvegLsFHLS2/view?usp=sharing Part 1]<br />[https://drive.google.com/file/d/1Gp22ccrHR680o9Gdi52SvZEliBRpm0G8/view?usp=sharing Part 2]<br />[https://drive.google.com/file/d/1mo-r28xlR7aN4TUlEJGuHAkHss8W5lt1/view?usp=sharing Part 3]
|-
| '''Policy Violation Image'''
| Windows 11
| data-sort-value="5" | 5 – Hard
| data-sort-value="10.0" | 10
| lolmenow (lolmeow)
| what do you think?
| Focuses only on the Policy Violation categories (malware, prohibited files, unwanted software) plus Forensic Questions; no other vulnerability categories.<br />TPM password: <code><nowiki>CyberSquadViolations!</nowiki></code>
| [https://drive.google.com/file/d/1c1Zxr0AYk3gE_yUH_1vwxNETEmezvbBj/view Google Drive]
|-
| '''District 13'''
| Windows Server 2022
| data-sort-value="4" | 4 – Medium - Hard
| data-sort-value="0" | —
| brody001301
| ADDS, ADCS, IIS, SQL
| A walkthrough exists. Play the image until you are truly out of ideas before you open it.
| [https://drive.google.com/file/d/1EJXcC2SP3awuIjON9y655dLO4eZPZkmW/view?usp=sharing Google Drive]<br />[https://docs.google.com/document/d/1PRwvl90g5WWAy7ODXa62Na7GSnWk_gACh91aF1vJ4uY/edit?usp=sharing Walkthrough (spoilers)]
|-
| '''DPRK Server'''
| Windows Server 2025
| data-sort-value="4" | 4 – Medium - Hard
| data-sort-value="10.0" | 10
| lolmenow (lolmeow), SG, a_person
| Active Directory (Domain Services, Certificate Services), RDP, SMB, VBS
| Login: <code><nowiki>Kim Jong Un</nowiki></code> / <code><nowiki>N0rThKoR3@thEGo@t!!</nowiki></code>
| [https://drive.google.com/file/d/1FJ9ZxVpQDMaX29SVykuNW1LMODr3BAGu/view?usp=sharing Google Drive]<br />[https://sakouk.me/cyberpatriot#democratic-peoples-republic-of-korea Further information]
|-
| '''Among the Reindeer'''
| Windows 10
| data-sort-value="4" | 4 – Medium - Hard
| data-sort-value="0" | —
| Magistrate
| SMB
| —
| [https://drive.google.com/file/d/1h1P-BAwL5Pdm6l1GwWmbbDb2BnW3M6UE/view Google Drive]
|-
| '''My Little Pony'''
| Windows 10
| data-sort-value="4" | 4 – Medium - Hard
| data-sort-value="0" | —
| Donkey (d0nkeyman)
| FTP Server
| The author warns: do not open this image in a public place such as a library.
| [https://drive.google.com/file/d/1Og8lIMVqGKKenFXTpWYhA8X-szXyRtcY/view Google Drive]
|-
| '''System Hardening 9'''
| Windows Server 2022
| data-sort-value="3" | 3 – Medium
| data-sort-value="8.3" | 8.3
| firepony57
| SMTP (MailEnable), IIS
| Login: <code><nowiki>frodo</nowiki></code> / <code><nowiki>Pa$$w0rd10</nowiki></code>
| [https://drive.google.com/file/d/1qPkE62na-Io3lQcCrd0aXMEqt3ItjBpq/view Google Drive]<br />[https://eth007.me/cypat/syshardening9/ Image page]
|-
| '''Kalis Windows Image'''
| Windows 10
| data-sort-value="3" | 3 – Medium
| data-sort-value="9.0" | 9
| KaliPatriot
| OpenSSH, File Sharing (smb)
| —
| [https://drive.google.com/file/d/1FzzYG7haDwrz4D69MtKGDifDpqNWcg5q/view?usp=sharing Google Drive]
|-
| '''Windows 7 Advanced'''
| Windows 7
| data-sort-value="3" | 3 – Medium
| data-sort-value="0" | —
| Unknown
| —
| One of several older images in a shared Google Drive folder.
| [https://drive.google.com/drive/folders/1LY_nvNZwJ9AxKO-fQCg7q08cNjVJhfKv Google Drive folder]
|-
| '''Windows 7 Intermediate'''
| Windows 7
| data-sort-value="2" | 2 – Easy - Medium
| data-sort-value="0" | —
| Unknown
| —
| One of several older images in a shared Google Drive folder.
| [https://drive.google.com/drive/folders/1LY_nvNZwJ9AxKO-fQCg7q08cNjVJhfKv Google Drive folder]
|-
| '''Cincinnati Zoo'''
| Windows 10
| data-sort-value="2" | 2 – Easy - Medium
| data-sort-value="8.3" | 8.3
| Donkey (d0nkeyman)
| SMB
| —
| [https://drive.google.com/file/d/1ai3vff_pS_rABc8hsnE_0uv08MOZiB1W/view Google Drive]
|-
| '''Jason'''
| Windows Server 2022
| data-sort-value="1" | 1 – Easy
| data-sort-value="0" | —
| Unknown
| Active Directory Domain Service (ADDS), DNS
| Login: <code><nowiki>Administrator</nowiki></code> / <code><nowiki>GoTroyCyber!</nowiki></code><br />Forensics questions are in <code><nowiki>C:\Users\Jason\Desktop</nowiki></code>.<br />Reinstalling VMware Tools is recommended for a smoother experience.
| [https://drive.google.com/file/d/1hxRrVfQAuopYrDO70Qmm6YPk3NsXQLOu/view?usp=drive_link Google Drive]
|-
| '''Santas Workshop'''
| Windows 10
| data-sort-value="1" | 1 – Easy
| data-sort-value="6.0" | 6
| Magistrate
| BioniX Video Wallpaper (leave it alone)
| —
| [https://drive.google.com/file/d/1T7Lj5rHqq3JD2O1tZf_24vTytdOKytXO/view Google Drive]
|-
| '''Windows 7 Beginner'''
| Windows 7
| data-sort-value="1" | 1 – Easy
| data-sort-value="0" | —
| Unknown
| —
| One of several older images in a shared Google Drive folder.
| [https://drive.google.com/drive/folders/1LY_nvNZwJ9AxKO-fQCg7q08cNjVJhfKv Google Drive folder]
|-
| '''Windows 7 Elk Grove'''
| Windows 7
| data-sort-value="0" | 0 – Unrated
| data-sort-value="0" | —
| Unknown
| —
| One of several older images in a shared Google Drive folder.
| [https://drive.google.com/drive/folders/1LY_nvNZwJ9AxKO-fQCg7q08cNjVJhfKv Google Drive folder]
|-
| '''Windows Server 2016'''
| Windows Server 2016
| data-sort-value="0" | 0 – Unrated
| data-sort-value="0" | —
| Unknown
| —
| One of several older images in a shared Google Drive folder.
| [https://drive.google.com/drive/folders/1LY_nvNZwJ9AxKO-fQCg7q08cNjVJhfKv Google Drive folder]
|-
| '''Infinity War'''
| Windows 10
| data-sort-value="0" | 0 – Unrated
| data-sort-value="9.5" | 9.5
| Unknown
| Notepad++, Acrobat Reader XI, Firefox
| These are programs rather than services; the image's README lists them.
| [https://drive.google.com/file/d/1ORNNOwuy-PhGVsqR-OFykTS6CsDDL23o/view Google Drive]
|-
| '''Pontiac'''
| Windows 10
| data-sort-value="0" | 0 – Unrated
| data-sort-value="0" | —
| Unknown
| —
| —
| [https://drive.google.com/file/d/1qMPyLA76h2RTUu95IxE3cwRstacT8-HJ/view Google Drive]
|-
| '''Titan'''
| Windows 10
| data-sort-value="0" | 0 – Unrated
| data-sort-value="0" | —
| Unknown
| —
| —
| [https://drive.google.com/file/d/1sPRayHz74vLBL8KrQNO1JdAVzQQ2YpSB/view Google Drive]
|-
| '''Generic Windows 2022 Practice'''
| Windows Server 2022
| data-sort-value="0" | 0 – Unrated
| data-sort-value="1.0" | 1
| Unknown
| —
| Login: <code><nowiki>dva</nowiki></code> / <code><nowiki>enemyspotted</nowiki></code>
| [https://drive.google.com/file/d/1JUQLly7S0m980L1kEm7tH2bKvjwklVcb/view Google Drive]
|-
| '''Skip Brewer (?)'''
| Windows 10
| data-sort-value="0" | 0 – Unrated
| data-sort-value="0" | —
| Unknown
| —
| One of several older images in a shared Google Drive folder.
| [https://drive.google.com/drive/folders/1LY_nvNZwJ9AxKO-fQCg7q08cNjVJhfKv Google Drive folder]
|}
 
== Linux ==
 
{| class="wikitable sortable" style="width:100%"
|-
! Image
! OS
! Difficulty
! Rating
! Creator
! Critical services
! class="unsortable" | Notes
! class="unsortable" | Download
|-
| '''eth007's Arena (Ubuntu 22)'''
| Ubuntu 22
| data-sort-value="7" | 7 – Super Hard
| data-sort-value="7.0" | 7
| eth007
| SSH (openssh-server), Samba server (smbd), Elasticsearch, Kibana, Logstash, Filebeat
| —
| [https://drive.google.com/file/d/1qpe6mq5QS0s8ee-Z-fO4Yktm7Bx_Kl79/view?usp=drive_link Google Drive]
|-
| '''eth007's Arena (Debian 11)'''
| Debian 11
| data-sort-value="7" | 7 – Super Hard
| data-sort-value="10.0" | 10
| eth007
| Dovecot, Postfix, Apache2
| —
| [https://drive.google.com/file/d/1Q65-3hOYKSssoMtwZBQND_o5BsiX1bjS/view?usp=drive_link Google Drive]
|-
| '''Potato Kingdom'''
| Mint 21
| data-sort-value="7" | 7 – Super Hard
| data-sort-value="0" | —
| samn0270_65431
| Mailcow, Postfix, Dovecot, SOGo, PHP-FPM, Nginx, MariaDB, Redis, Rspamd
| Login: <code><nowiki>puhtahto</nowiki></code> / <code><nowiki>potato</nowiki></code>
| [https://drive.google.com/file/d/1NPcR_uo73NvqtaC8ebIU19xTrIu4w0eB/view?usp=drive_link Google Drive]
|-
| '''Botforge Practice'''
| Mint 22
| data-sort-value="6" | 6 – Hard - Super Hard
| data-sort-value="10.0" | 10
| tirefire
| SSH, Nginx, MariaDB, Docker
| —
| [https://tirefire.org/posts/botforge-practice/ Author's page]
|-
| '''Fellowship of the Ring (Sys Hardening 8)'''
| Fedora 38
| data-sort-value="5" | 5 – Hard
| data-sort-value="0" | —
| eth007
| SSH (openssh-server), HTTP (boa)
| —
| [https://drive.google.com/file/d/1pf11TRG9gh94x0wli3-tX3P4PlQhccmW/view Google Drive]
|-
| '''Hollow Knight'''
| Ubuntu 24.04
| data-sort-value="5" | 5 – Hard
| data-sort-value="0" | —
| aryajb_
| Apache, MySQL
| Default login: <code><nowiki>knight</nowiki></code> / <code><nowiki>password</nowiki></code>
| [https://drive.google.com/drive/folders/1cpgftalqqRAitYMl3Z31RrKJm6FOHJ5D?usp=sharing Google Drive folder]
|-
| '''Little Big Planet'''
| Ubuntu 16.04
| data-sort-value="5" | 5 – Hard
| data-sort-value="1.0" | 1
| Unknown
| SSH, vsftpd
| —
| [https://drive.google.com/file/d/135ReRspmJm-4Kv4el_g-zpJITXDZUUO3/view?usp=drive_link Google Drive]
|-
| '''1984'''
| Mint 22.3
| data-sort-value="5" | 5 – Hard
| data-sort-value="0" | —
| ml2322
| Dovecot, MLSMTP, SFTP (ssh)
| <nowiki>Walkthrough: https://raw.githubusercontent.com/Matthiasclee/1984-Mint22.3/refs/heads/master/Walkthrough.pdf</nowiki>
| [https://cypat.s3.us-west-1.amazonaws.com/1984.zip Amazon S3]<br />[https://raw.githubusercontent.com/Matthiasclee/1984-Mint22.3/refs/heads/master/Walkthrough.pdf Walkthrough (spoilers)]
|-
| '''Nevermore'''
| Ubuntu 22
| data-sort-value="5" | 5 – Hard
| data-sort-value="7.0" | 7
| hypernova
| OpenSSH, Seafile, MySQL
| Login: <code><nowiki>waddams</nowiki></code> / <code><nowiki>password</nowiki></code>
| [https://drive.google.com/file/d/1EW3hsjZMM--UtoFJuYBVbAMhUwU4Z8gn/view Google Drive]
|-
| '''Kimetsu No Yaiba'''
| Ubuntu 22.04
| data-sort-value="5" | 5 – Hard
| data-sort-value="6.5" | 6.5
| samn0270_65431
| OpenSSH Server, Very Secure FTPD, PostgreSQL
| —
| [https://drive.google.com/file/d/1O3TSZnGTQf-pgcBOs7-d2XPuqYWgtCWE/view Google Drive]
|-
| '''Aperture Science Ubuntu'''
| Ubuntu 22.04
| data-sort-value="5" | 5 – Hard
| data-sort-value="9.5" | 9.5
| InfernusHawk
| OpenSSH Server (SSH), FTP Server (vsftpd), Apache Server (apache2)
| The difficulty is an unconfirmed estimate based on the Aperture Science Windows image.
| [https://drive.google.com/file/d/1_ZDn7K4Xy6pQ5YXWroqBkZoIdYfSivkT/view Google Drive]<br />[https://discord.com/channels/301768361136750592/1058312750905954397/1153448304768716862 Extra details (Discord, needs access)]
|-
| '''LAMP Stack Practice'''
| Ubuntu 16
| data-sort-value="3" | 3 – Medium
| data-sort-value="0" | —
| Unknown
| LAMP + Wordpress
| —
| [https://drive.google.com/file/d/1vAq_f9lZq3vyFIu6fjwDcpsuMv-saUez/view?usp=drive_link Google Drive]
|-
| '''Among Us (Sys Hardening 10)'''
| Ubuntu 22.04
| data-sort-value="3" | 3 – Medium
| data-sort-value="0" | —
| FIREPONY57
| Samba, MySQL Server, SSH
| System Hardening 10 contains additional fixes.
| [https://drive.google.com/file/d/1z64QN-DWQHXQbDGuslJc68pD-ggtJcsx/view Google Drive]
|-
| '''Space Force Server'''
| Debian 8
| data-sort-value="3" | 3 – Medium
| data-sort-value="3.0" | 3
| Magistrate
| ProFTPD, Bind9, SSH
| The services are inferred; the image does not state them.
| [https://drive.google.com/file/d/1Eo6FIq9UfWtzyIso62FH9yJ922Kvj54T/view Google Drive]
|-
| '''Kalis Ubuntu Image'''
| Ubuntu 18
| data-sort-value="3" | 3 – Medium
| data-sort-value="9.0" | 9
| KaliPatriot
| Open SSH Server (sshd), Very-Secure FTP Server (vsftpd)
| <nowiki>Additional information can be found here https://discord.com/channels/301768361136750592/414537868766347265/1059965290328367286</nowiki>
| [https://drive.google.com/file/d/1ZLKf-DAij1VN6aFz6T5Z3fpGEpfxJWzo/view?usp=sharing Google Drive]<br />[https://discord.com/channels/301768361136750592/414537868766347265/1059965290328367286 Extra details (Discord, needs access)]
|-
| '''X-Men'''
| Ubuntu 24.04
| data-sort-value="3" | 3 – Medium
| data-sort-value="0" | —
| fastanddanger2
| Open SSH Server (sshd), Apache2 Web Server (apache2), VSFTPD FTP Server (vsftpd)
| —
| [https://drive.google.com/file/d/18mJ9lTTc8JR-jRz7eL1cqdJEKGrOFeCv/view?usp=sharing Google Drive]
|-
| '''Narnia Minecraft Server (Sys Hardening 6)'''
| Ubuntu 22
| data-sort-value="1" | 1 – Easy
| data-sort-value="9.3" | 9.3
| eth007
| SSH (openssh-server), HTTP (nginx), Minecraft server
| A walkthrough exists. Give the image everything you have before opening it.
| [https://drive.google.com/file/d/12x8aYXIpGwO47MIvUCB6G3bqV-8npVUx/view Google Drive]<br />[https://github.com/Quasar0147/Syshardening-6-Writeup/tree/main Walkthrough (spoilers)]
|-
| '''Rooreaper Strikes Back (Sys Hardening 7)'''
| Ubuntu 22
| data-sort-value="1" | 1 – Easy
| data-sort-value="10.0" | 10
| eth007
| SSH (openssh-server)
| A walkthrough exists. Give the image everything you have before opening it.
| [https://drive.google.com/file/d/1gyshPKjhQ2o907LQpwB_gq3BeqwmN2ko/view Google Drive]<br />[https://github.com/ImaginaryCTF/ImaginaryCTF-2022-Challenges/tree/master/Misc/system-hardening-7 Walkthrough (spoilers)]
|-
| '''Cybertech Ubuntu Image'''
| Ubuntu 24.04
| data-sort-value="1" | 1 – Easy
| data-sort-value="0" | —
| immortalmanan
| None
| Login: <code><nowiki>jmuskington</nowiki></code> / <code><nowiki>password123!</nowiki></code>
| [https://drive.google.com/file/d/10QHbNdrtHqyX0U-5KMdIBHvdUt8FVi4e/view Google Drive]
|-
| '''Bloons TD 6'''
| Debian 10
| data-sort-value="1" | 1 – Easy
| data-sort-value="0" | —
| Mobmaker
| OpenSSH
| —
| [https://drive.google.com/file/d/1-QN2GjowfgRHPnI9JibqwZiyx-mGgCzT/view Google Drive]
|-
| '''Age of Pirates'''
| Mint 22
| data-sort-value="1" | 1 – Easy
| data-sort-value="8.0" | 8
| gooseman
| OpenSSH, vsftpd, Apache2
| Login: <code><nowiki>jack_sparrow</nowiki></code> / <code><nowiki>C@pt@1nJack#321</nowiki></code><br />An answer key / walkthrough exists.<!-- TODO: add link; it was not in the exported sheet -->
| [https://drive.google.com/file/d/1uXWLFdBXJ-_IgD2vtWKtXLmW4oiE6vOr/view Google Drive]
|-
| '''Critical Service Chaos'''
| Debian 10
| data-sort-value="0" | 0 – Unrated
| data-sort-value="0" | —
| Unknown
| OpenSSH Server (sshd), NGINX Webserver (nginx), Apache Webserver (apache2), Samba Server (smbd), PostgreSQL (postgresql)
| Login: <code><nowiki>admin-bear</nowiki></code> / <code><nowiki>^qpwp4Wr</nowiki></code>
| [https://drive.google.com/drive/folders/1v_n7FT-tcrZSNMtm_9SyDPEh8i-5AYEf Google Drive folder]
|-
| '''Nintendo Semifinals Practices'''
| Debian 11
| data-sort-value="0" | 0 – Unrated
| data-sort-value="0" | —
| Unknown
| LAMP (all component + WordPress)
| After extracting, delete <code><nowiki>Nintendo Debian 11 Semifinals Practice Image.vmsd</nowiki></code> from the folder.
| [https://drive.google.com/file/d/1YEWwGZPPGMZmhno2HVDOk5To4eSbBYiC/view Google Drive]
|-
| '''Mr. Robot'''
| Fedora 37
| data-sort-value="0" | 0 – Unrated
| data-sort-value="0" | —
| tirefire
| SSH (unconfirmed)
| Corrections for the forensics questions are on the author's page.
| [https://ln5.sync.com/dl/3e4ff83c0/u2wyn5b9-yuthhkgw-dqhghbr4-qme8tqjx Sync.com]<br />[https://tirefire.org/posts/fedora-practice/ Author's page]
|-
| '''House on the Borderland'''
| Ubuntu 20
| data-sort-value="0" | 0 – Unrated
| data-sort-value="8.0" | 8
| poarthanarseus
| None
| —
| [https://drive.google.com/file/d/1MaEmGrTFMZIcG2S0DPCLDfWffThndkGk/view?usp=sharing Google Drive]
|-
| '''System Hardening 11'''
| Mint 22
| data-sort-value="0" | 0 – Unrated
| data-sort-value="9.0" | 9
| shubuntu + prilasey
| SSH, Samba
| Has a scoring issue with FQ5; an updated README is available.<!-- TODO: add README link; not in the exported sheet -->
| [https://drive.google.com/file/d/1dQfLPgzDq-iaXBCNLLrgDsWxYtpTWbDP/view Google Drive]
|-
| '''Eric Zuniga Ubuntu CP ImageAeacusv2'''
| Ubuntu (version unknown)
| data-sort-value="0" | 0 – Unrated
| data-sort-value="0" | —
| Eric Zuniga
| —
| From the "CyberSpace Image Directory"; not verified to work.
| [https://drive.google.com/file/d/1yt3PaFp1Kb7Hv50Uszmq3klkGfWSqIxI/view Google Drive]
|-
| '''Ubuntu16-FlashGordonScoreAeacus'''
| Ubuntu 16
| data-sort-value="0" | 0 – Unrated
| data-sort-value="0" | —
| Unknown
| —
| From the "CyberSpace Image Directory"; not verified to work.
| [https://drive.google.com/file/d/1la-V6x0EI3IcTaHJhAXcXtH6PM5bjx0w/view Google Drive]
|-
| '''GreenArrowUbuntu16Lvl7'''
| Ubuntu 16
| data-sort-value="0" | 0 – Unrated
| data-sort-value="0" | —
| Unknown
| —
| From the "CyberSpace Image Directory"; not verified to work.
| [https://drive.google.com/file/d/1Gjh93xlDgRV3Vp1XXazlOUL-uVRLeu7n/view Google Drive]
|-
| '''SuperGirl-Ubuntu16'''
| Ubuntu 16
| data-sort-value="0" | 0 – Unrated
| data-sort-value="0" | —
| Unknown
| —
| From the "CyberSpace Image Directory"; not verified to work.
| [https://drive.google.com/file/d/1vZ6AXodZW96_yoiLWo8E1bxKkSx_G_wD/view Google Drive]
|-
| '''Seinfield'''
| Ubuntu (version unknown)
| data-sort-value="0" | 0 – Unrated
| data-sort-value="0" | —
| hashfastr
| —
| Very old image, from around CyberPatriot season 8.
| [https://practicevms.s3.us-east-1.amazonaws.com/Seinfeld+ubuntu+image+by+Sylvain+Jones.zip Amazon S3]
|}
 
== Cisco Packet Tracer ==
 
These are Packet Tracer activity files (<code>.pka</code>). You need [https://www.netacad.com/ Cisco Packet Tracer], which Cisco offers through its Networking Academy. Open the file, read the instructions and complete the tasks.
 
{| class="wikitable sortable" style="width:100%"
|-
! Image
! Difficulty
! Rating
! Creator
! Major protocols
! class="unsortable" | Notes
! class="unsortable" | Download
|-
| '''CCNA Mega Lab (Jeremy's IT Lab).pka'''
| data-sort-value="7" | 7 – Super Hard
| data-sort-value="9.7" | 9.7
| Jeremy IT Lab
| VLANs, L2 and L3 EtherChannels, IPv4 addressing, HSRP, Rapid PVST+, OSPF, static routing, DHCP, NTP, SNMP, Syslog, FTP, SSH, NAT, ACLs and other L2 security features, IPv6 addressing, wireless
| Walkthrough available from Jeremy's IT Lab.<!-- TODO: add link; not in the exported sheet -->
| [https://drive.google.com/file/d/1WsLlEmMS38Zfq0AOg3fq3TZmTX7sSPMz/view?usp=drive_link Google Drive]
|-
| '''Modules_1_13_Image.pka'''
| data-sort-value="6" | 6 – Hard - Super Hard
| data-sort-value="0" | —
| noobfooditem123
| OSPF, ACL, VPN/IPSec
| —
| [https://drive.google.com/file/d/1NOZvFVst0RhbQuH18WS8P_t8mRubvTgf/view Google Drive]
|-
| '''Final_R3_BDSM.pka'''
| data-sort-value="5" | 5 – Hard
| data-sort-value="4.0" | 4
| crescental_, toasty3302
| <nowiki>DHCP, VLANs & Trunking, Inter-VLAN Routing (SVI on MLS), OSPF, Static Routing, NAT, Syslog, NTP, AAA w/ TACACS+, SSH</nowiki>
| dw about the name lol
| [https://drive.google.com/file/d/1h-9tX9uS4WO-giUBY0LWhDPLOpurR8x5/view?usp=drive_link Google Drive]
|-
| '''R3_OKCUP_23_24_CiscoPT.pka'''
| data-sort-value="4" | 4 – Medium - Hard
| data-sort-value="8.0" | 8
| Oklahoma Cup
| <nowiki>SSH, NTP, Syslog, NAT (Static, Dynamic, PAT), DHCP, ACL (Standard & Extended)</nowiki>
| —
| [https://drive.google.com/file/d/18y8PBfuA_dF9tmlhD6-_CjSaIJESHVnM/view?usp=drive_link Google Drive]
|-
| '''R3_OKCUP_24_25_CiscoPT.pka'''
| data-sort-value="4" | 4 – Medium - Hard
| data-sort-value="7.0" | 7
| Oklahoma Cup
| <nowiki>SSH, NTP, Syslog, NAT (Static, Dynamic, PAT), DHCP, ACL (Standard & Extended)</nowiki>
| —
| [https://drive.google.com/file/d/1QbC1NRSNZ26EBlEQnee0LjSrBW-SW2fu/view?usp=drive_link Google Drive]
|-
| '''Atomic Inn'''
| data-sort-value="4" | 4 – Medium - Hard
| data-sort-value="0" | —
| AntryCat
| <nowiki>OSPF, Static Routing, VLANs, Trunking, Inter-VLAN Routing (SVI on MLS & RoaS), EtherChannel (LACP), Spanning-Tree, HSRP</nowiki>
| Report issues to @antrycat on Discord.
| [https://drive.google.com/file/d/15qO2QE1wzdM6shxb4pHFLYHIaocp4s_w/view?usp=drive_link Google Drive]
|-
| '''R2_OKCUP_24_25_CiscoPTUNLOCKED.pka'''
| data-sort-value="3" | 3 – Medium
| data-sort-value="10.0" | 10
| Oklahoma Cup
| <nowiki>OSPF, Static Routing, VLAN & Trunking, Inter-VLAN Routing (SVI on MLS, RoaS), SSH</nowiki>
| —
| [https://drive.google.com/file/d/1Qy-oZx8F-jvvEfYJ0_i0kX3wCvmshXsY/view?usp=drive_link Google Drive]
|-
| '''AP CyberPatriot Networking R2 Full Exam'''
| data-sort-value="3" | 3 – Medium
| data-sort-value="8.5" | 8.5
| lolmenow, okdargy
| —
| Mock exam; the answer key is on the same page.
| [https://sakouk.me/blog/2026/AP-CyberPatriot-R2-Mock-Exam.html Author's page]
|-
| '''R1_OKCUP_24_25_CiscoPT.pka'''
| data-sort-value="2" | 2 – Easy - Medium
| data-sort-value="0" | —
| Oklahoma Cup
| <nowiki>IPv4 Addressing, Static Routing, VLANs & Trunking, Inter-VLAN Routing (SVI on MLS), SSH</nowiki>
| —
| [https://drive.google.com/file/d/1DCm-k1fsHxDFNW58mTkg4Bfjjnj-fwa7/view?usp=sharing Google Drive]
|-
| '''Pixystems.pka'''
| data-sort-value="2" | 2 – Easy - Medium
| data-sort-value="9.0" | 9
| AntryCat
| <nowiki>Static Routing, VLANs & Trunking, Inter-VLAN Routing (SVI on MLS), IPv4 Addressing</nowiki>
| Report issues to @antrycat on Discord.
| [https://drive.google.com/file/d/1MWs3cVVo1RxIhpippNrkyIHrU4r7R127/view?usp=sharing Google Drive]
|-
| '''Baby Steps PKA'''
| data-sort-value="1" | 1 – Easy
| data-sort-value="8.5" | 8.5
| stageking5000
| IPv4, IPv6 Addressing, VLANs, SSH, DTP
| —
| [https://drive.google.com/file/d/1ZizvwKdlIjZyKwDIX3MoxnCqXiKW9H4j/view?usp=drive_link Google Drive]
|-
| '''NationalsEmulatorTemplate.pka'''
| data-sort-value="0" | 0 – Unrated
| data-sort-value="10.0" | 10
| noobfooditem123
| —
| Meant to emulate the national round, as the name says.
| [https://drive.google.com/file/d/1vRCt8XVWyJLZOGpByb3o7rghUfyBmtZ1/view?usp=drive_link Google Drive]
|-
| '''CCNA Lab Series'''
| data-sort-value="0" | 0 – Unrated
| data-sort-value="0" | —
| Jeremy IT Lab
| —
| Covers the whole CCNA. Walkthroughs by Jeremy's IT Lab.<!-- TODO: add link -->
| [https://drive.google.com/drive/folders/1hTUo9LDSbJ7WAqiAJ8WdVvsWBE6z3MG6?usp=drive_link Google Drive folder]
|-
| '''CCNA Flashcards and Labs'''
| data-sort-value="0" | 0 – Unrated
| data-sort-value="10.0" | 10
| Jeremy IT Lab
| —
| Covers the whole CCNA and includes a full flashcard set. Walkthroughs by Jeremy's IT Lab.<!-- TODO: add link -->
| [https://drive.google.com/drive/folders/1PwK_jWqfUtOjV7gHt8ODutq9QA5cxCgi Google Drive folder]
|}
 
== Other ==
 
{| class="wikitable sortable" style="width:100%"
|-
! Image
! OS
! Difficulty
! Rating
! Creator
! Critical services
! class="unsortable" | Notes
! class="unsortable" | Download
|-
| '''Boeing 2.0'''
| Boeing
| data-sort-value="0" | 0 – Unrated
| data-sort-value="9.7" | 9.7
| lukshmwah
| —
| Legacy image; the source list calls it a relic.
| [https://drive.google.com/file/d/1j_f3m6KezvvLMhCdUWkW0h_tRAZ-sRtt/view Google Drive]
|}
 
== Credits ==
 
This page is adapted from the community-maintained practice-image lists (Windows, Linux, Cisco and Miscellaneous) that were published on the CyberPatriot community's cypat.guide site; the Windows list credits carbonice as its maintainer. The image names, difficulty labels, ratings and creator credits come from those lists. Images are the work of the creators named in each row.


[[Category:Practice images]]
[[Category:Practice images]]

Revision as of 06:24, 19 September 2026

This draft is ready for review. If you're the author, click below to notify a reviewer. A reviewer will check it for structure, sourcing, and accuracy. You may continue editing while you wait.Request reviewApprove draftReject draft

Author(s): (add name)
Last Updated: 9-18-2026

Practice images are virtual machines (and Cisco Packet Tracer activity files) that someone has built to look like a neglected, vulnerable system. You harden them the way you would a real one: find the problems, fix them and answer the forensic questions, ideally under a time limit. They are the best way to get hands-on practice for competitions such as CyberPatriot without touching a system you care about.

The list

The community's list of practice images for Windows, Linux and Cisco Packet Tracer, with difficulty, ratings, creators and download links, is kept in a shared spreadsheet:

Practice images spreadsheet

Before you download

  • Use a virtual machine and take a snapshot first. Some images deliberately contain malware-like programs, backdoors and unwanted software. Never run one on your everyday computer, and keep its network set to NAT or host-only.
  • WikiCyber does not host, review or guarantee these files. They sit on third-party sites (mostly Google Drive) and links break or move. An image may also be broken or out of date.
  • Any logins or extraction passwords in the spreadsheet are for the practice images only. Never reuse them anywhere real.
  • Large and multi-part downloads are normal. Use 7-Zip to extract them, and read the README inside each image before you start.
  • Try before you peek. Where a walkthrough or answer key exists, you learn far more if you work until you are truly out of ideas first.
  • Cisco Packet Tracer activity files (.pka) need Cisco Packet Tracer, which Cisco offers through its Networking Academy.
  • This list is unofficial and is not affiliated with CyberPatriot, the Air & Space Forces Association, Cisco or Microsoft. Each image belongs to its creator.
Retrieved from "https://wikicyber.org/index.php?title=Practice_Images&oldid=137"