Practice Images
This draft is ready for review. If you're the author, click below to notify a reviewer. A reviewer will check it for structure, sourcing, and accuracy. You may continue editing while you wait.Request reviewApprove draftReject draft
Author(s): (add name)
Last Updated: 9-18-2026
Practice images are virtual machines (and Cisco Packet Tracer activity files) that someone has built to look like a neglected, vulnerable system. You harden them the way you would a real one: find the problems, fix them and answer the forensic questions, ideally under a time limit. They are the best way to get hands-on practice for competitions such as CyberPatriot without touching a system you care about.
This page lists 83 community-made images for Windows, Linux and Cisco. Every image was made by a volunteer; WikiCyber only collects the list.
Before you download
- Use a virtual machine and take a snapshot first. Some images deliberately contain malware-like programs, backdoors and unwanted software. Never run one on your everyday computer, and keep its network set to NAT or host-only.
- WikiCyber does not host, review or guarantee these files. They sit on third-party sites (mostly Google Drive) and links break or move. An image may also be broken or out of date.
- Passwords in the tables are for the practice images only. They are published by the image creators so you can log in. Never reuse them anywhere real.
- Large and multi-part downloads are normal. Use 7-Zip to extract them, and read the README inside each image before you start.
- Try before you peek. Where a walkthrough or answer key exists it is marked spoilers. You learn far more if you work until you are truly out of ideas first.
- This list is unofficial and is not affiliated with CyberPatriot, the Air & Space Forces Association, Cisco or Microsoft. Each image belongs to its creator. If you made an image and want the credit corrected or the entry removed, leave a message on this page's Talk tab.
How to read the tables
Click a column heading to sort. The tables start with the hardest images.
| Level | Meaning |
|---|---|
| 0 | Unrated |
| 1 | Easy |
| 2 | Easy – Medium |
| 3 | Medium |
| 4 | Medium – Hard |
| 5 | Hard |
| 6 | Hard – Super Hard |
| 7 | Super Hard |
| 8 | Super-Duper Hard |
Rating is the average score out of 10 from the community's rating form. A dash means no rating yet. Difficulty and ratings are opinions, not measurements.
Windows
| Image | OS | Difficulty | Rating | Creator | Critical services / apps | Notes | Download |
|---|---|---|---|---|---|---|---|
| Troy Windows 10 Mock | Windows 10 | 8 – Super-Duper Hard | 8 | dudcom | Netscape Navigator, MobaXTerm, Nginx, VSCode, ThunderBird, MySQL, BitComet | — | Google Drive folder |
| Beyond Journey's End | Windows Server 2022 | 7 – Super Hard | 8 | HIOOOO1234 | Active Directory, DNS, RDP | Login: Frieren / Password1!
|
Google Drive |
| Middlesea Hospital | Windows Server 2025 | 7 – Super Hard | — | carbonice | — | Not released yet when the source list was compiled. | — |
| Tokyo-3 Server | Windows Server 2025 | 7 – Super Hard | 9 | x1nni | ApacheDS, pGina, MySQL, IIS (running Pydio 8), DNS, RDP, WinRM | Login: sikari / IMu$t(N0t)Run&w4y
|
Author's page |
| Baldis Basics | Windows Server 2022 | 7 – Super Hard | 9.5 | Donkey (d0nkeyman) | Active Directory (Domain Services, DNS) | — | Google Drive |
| King Arthurs Castle | Windows Server 2019 | 7 – Super Hard | 10 | Altoid0 | AD:DS, DNS, Dimension4, RDP | Login: Arthur / CyberPatriot1!
|
Google Drive |
| Dead by Daylight | Windows Server 2019 | 7 – Super Hard | 10 | lolmenow | Active Directory (Domain Services, DNS), DHCP | Login: David / Th3_Ent1ty_Re4lm!
|
Google Drive |
| Princeton-Plainsboro Teaching Hospital (PPTH) | Windows 11 | 6 – Hard - Super Hard | 9 | x1nni | SMB, RDP, Counter Strike Server (SRCDS) | — | Author's page |
| Alphabet Soup | Windows 10 | 6 – Hard - Super Hard | 8 | swiftsnails | RDP | — | Google Drive |
| Sunrise Foundation Training Simulation | Windows Server 2022 | 6 – Hard - Super Hard | 9 | carbonice | Active Directory (Domain Services, Certificate Services, DNS), IIS, RDP, SMTP (MailEnable), SMB | Login: adminaccount / G0oDLuCK!!Extraction password: 1658502732Treat READMETOO.txt as an extension of the usual README.
|
Google Drive |
| Mushroom Kingdom | Windows Server 2019 | 6 – Hard - Super Hard | 8 | Magistrate | IIS, Active Directory DNS, Active Directory Domain Services, Microsoft SQL, SMB, PHP | Login: Mario / S3cure%The%Shr00msExtraction password: MushroomMan64
|
Google Drive |
| Hunter Management | Windows Server 2022 | 5 – Hard | — | Unknown | Active Directory (Domain Services, Directtory Certificate Services), DNS, and RDP | Login: Adminstrator / CyberPatriot123!
|
Google Drive |
| Town of Salem | Windows Server 2022 | 5 – Hard | — | many_overcomplications | — | — | Google Drive |
| Startup Central | Windows Server 2022 | 5 – Hard | — | zyncist | — | Login: Administrator / Cyberpatriot21The source list was unsure where this download lives, so the link may not work. |
Direct download (.7z) |
| Aperture Science (Windows) | Windows 10 | 5 – Hard | 9.5 | infernushawk | OpenSSH Server, FileZilla Server, SMB, RDP | Three-part download: extract the first file with 7-Zip and the rest should follow. The links and extra details are in a Discord message. | Discord message (needs Discord access) |
| Windows Persistence Practice Image | Windows Server 2025 | 5 – Hard | 9 | pumpkinjones6_02843 | — | Scores only persistence: the methods attackers use to keep access to a machine. | Google Drive |
| Lobotomy Corporation First Trumpet | Windows Server 2022 | 5 – Hard | — | carbonice | Active Directory (Domain Services, Certificate Services, DNS), IIS (MediaWiki), MySQL, RDP | Warning: this was a rushed test image that was never meant for public use and has many problems; the author plans to replace it. Login: sysAdmin / Password123!Three-part zip: extract part 1 with 7-Zip in the same folder as parts 2 and 3. |
Google Drive Part 1 Part 2 Part 3 |
| Policy Violation Image | Windows 11 | 5 – Hard | 10 | lolmenow (lolmeow) | what do you think? | Focuses only on the Policy Violation categories (malware, prohibited files, unwanted software) plus Forensic Questions; no other vulnerability categories. TPM password: CyberSquadViolations!
|
Google Drive |
| District 13 | Windows Server 2022 | 4 – Medium - Hard | — | brody001301 | ADDS, ADCS, IIS, SQL | A walkthrough exists. Play the image until you are truly out of ideas before you open it. | Google Drive Walkthrough (spoilers) |
| DPRK Server | Windows Server 2025 | 4 – Medium - Hard | 10 | lolmenow (lolmeow), SG, a_person | Active Directory (Domain Services, Certificate Services), RDP, SMB, VBS | Login: Kim Jong Un / N0rThKoR3@thEGo@t!!
|
Google Drive Further information |
| Among the Reindeer | Windows 10 | 4 – Medium - Hard | — | Magistrate | SMB | — | Google Drive |
| My Little Pony | Windows 10 | 4 – Medium - Hard | — | Donkey (d0nkeyman) | FTP Server | The author warns: do not open this image in a public place such as a library. | Google Drive |
| System Hardening 9 | Windows Server 2022 | 3 – Medium | 8.3 | firepony57 | SMTP (MailEnable), IIS | Login: frodo / Pa$$w0rd10
|
Google Drive Image page |
| Kalis Windows Image | Windows 10 | 3 – Medium | 9 | KaliPatriot | OpenSSH, File Sharing (smb) | — | Google Drive |
| Windows 7 Advanced | Windows 7 | 3 – Medium | — | Unknown | — | One of several older images in a shared Google Drive folder. | Google Drive folder |
| Windows 7 Intermediate | Windows 7 | 2 – Easy - Medium | — | Unknown | — | One of several older images in a shared Google Drive folder. | Google Drive folder |
| Cincinnati Zoo | Windows 10 | 2 – Easy - Medium | 8.3 | Donkey (d0nkeyman) | SMB | — | Google Drive |
| Jason | Windows Server 2022 | 1 – Easy | — | Unknown | Active Directory Domain Service (ADDS), DNS | Login: Administrator / GoTroyCyber!Forensics questions are in C:\Users\Jason\Desktop.Reinstalling VMware Tools is recommended for a smoother experience. |
Google Drive |
| Santas Workshop | Windows 10 | 1 – Easy | 6 | Magistrate | BioniX Video Wallpaper (leave it alone) | — | Google Drive |
| Windows 7 Beginner | Windows 7 | 1 – Easy | — | Unknown | — | One of several older images in a shared Google Drive folder. | Google Drive folder |
| Windows 7 Elk Grove | Windows 7 | 0 – Unrated | — | Unknown | — | One of several older images in a shared Google Drive folder. | Google Drive folder |
| Windows Server 2016 | Windows Server 2016 | 0 – Unrated | — | Unknown | — | One of several older images in a shared Google Drive folder. | Google Drive folder |
| Infinity War | Windows 10 | 0 – Unrated | 9.5 | Unknown | Notepad++, Acrobat Reader XI, Firefox | These are programs rather than services; the image's README lists them. | Google Drive |
| Pontiac | Windows 10 | 0 – Unrated | — | Unknown | — | — | Google Drive |
| Titan | Windows 10 | 0 – Unrated | — | Unknown | — | — | Google Drive |
| Generic Windows 2022 Practice | Windows Server 2022 | 0 – Unrated | 1 | Unknown | — | Login: dva / enemyspotted
|
Google Drive |
| Skip Brewer (?) | Windows 10 | 0 – Unrated | — | Unknown | — | One of several older images in a shared Google Drive folder. | Google Drive folder |
Linux
| Image | OS | Difficulty | Rating | Creator | Critical services | Notes | Download |
|---|---|---|---|---|---|---|---|
| eth007's Arena (Ubuntu 22) | Ubuntu 22 | 7 – Super Hard | 7 | eth007 | SSH (openssh-server), Samba server (smbd), Elasticsearch, Kibana, Logstash, Filebeat | — | Google Drive |
| eth007's Arena (Debian 11) | Debian 11 | 7 – Super Hard | 10 | eth007 | Dovecot, Postfix, Apache2 | — | Google Drive |
| Potato Kingdom | Mint 21 | 7 – Super Hard | — | samn0270_65431 | Mailcow, Postfix, Dovecot, SOGo, PHP-FPM, Nginx, MariaDB, Redis, Rspamd | Login: puhtahto / potato
|
Google Drive |
| Botforge Practice | Mint 22 | 6 – Hard - Super Hard | 10 | tirefire | SSH, Nginx, MariaDB, Docker | — | Author's page |
| Fellowship of the Ring (Sys Hardening 8) | Fedora 38 | 5 – Hard | — | eth007 | SSH (openssh-server), HTTP (boa) | — | Google Drive |
| Hollow Knight | Ubuntu 24.04 | 5 – Hard | — | aryajb_ | Apache, MySQL | Default login: knight / password
|
Google Drive folder |
| Little Big Planet | Ubuntu 16.04 | 5 – Hard | 1 | Unknown | SSH, vsftpd | — | Google Drive |
| 1984 | Mint 22.3 | 5 – Hard | — | ml2322 | Dovecot, MLSMTP, SFTP (ssh) | Walkthrough: https://raw.githubusercontent.com/Matthiasclee/1984-Mint22.3/refs/heads/master/Walkthrough.pdf | Amazon S3 Walkthrough (spoilers) |
| Nevermore | Ubuntu 22 | 5 – Hard | 7 | hypernova | OpenSSH, Seafile, MySQL | Login: waddams / password
|
Google Drive |
| Kimetsu No Yaiba | Ubuntu 22.04 | 5 – Hard | 6.5 | samn0270_65431 | OpenSSH Server, Very Secure FTPD, PostgreSQL | — | Google Drive |
| Aperture Science Ubuntu | Ubuntu 22.04 | 5 – Hard | 9.5 | InfernusHawk | OpenSSH Server (SSH), FTP Server (vsftpd), Apache Server (apache2) | The difficulty is an unconfirmed estimate based on the Aperture Science Windows image. | Google Drive Extra details (Discord, needs access) |
| LAMP Stack Practice | Ubuntu 16 | 3 – Medium | — | Unknown | LAMP + Wordpress | — | Google Drive |
| Among Us (Sys Hardening 10) | Ubuntu 22.04 | 3 – Medium | — | FIREPONY57 | Samba, MySQL Server, SSH | System Hardening 10 contains additional fixes. | Google Drive |
| Space Force Server | Debian 8 | 3 – Medium | 3 | Magistrate | ProFTPD, Bind9, SSH | The services are inferred; the image does not state them. | Google Drive |
| Kalis Ubuntu Image | Ubuntu 18 | 3 – Medium | 9 | KaliPatriot | Open SSH Server (sshd), Very-Secure FTP Server (vsftpd) | Additional information can be found here https://discord.com/channels/301768361136750592/414537868766347265/1059965290328367286 | Google Drive Extra details (Discord, needs access) |
| X-Men | Ubuntu 24.04 | 3 – Medium | — | fastanddanger2 | Open SSH Server (sshd), Apache2 Web Server (apache2), VSFTPD FTP Server (vsftpd) | — | Google Drive |
| Narnia Minecraft Server (Sys Hardening 6) | Ubuntu 22 | 1 – Easy | 9.3 | eth007 | SSH (openssh-server), HTTP (nginx), Minecraft server | A walkthrough exists. Give the image everything you have before opening it. | Google Drive Walkthrough (spoilers) |
| Rooreaper Strikes Back (Sys Hardening 7) | Ubuntu 22 | 1 – Easy | 10 | eth007 | SSH (openssh-server) | A walkthrough exists. Give the image everything you have before opening it. | Google Drive Walkthrough (spoilers) |
| Cybertech Ubuntu Image | Ubuntu 24.04 | 1 – Easy | — | immortalmanan | None | Login: jmuskington / password123!
|
Google Drive |
| Bloons TD 6 | Debian 10 | 1 – Easy | — | Mobmaker | OpenSSH | — | Google Drive |
| Age of Pirates | Mint 22 | 1 – Easy | 8 | gooseman | OpenSSH, vsftpd, Apache2 | Login: jack_sparrow / C@pt@1nJack#321An answer key / walkthrough exists. |
Google Drive |
| Critical Service Chaos | Debian 10 | 0 – Unrated | — | Unknown | OpenSSH Server (sshd), NGINX Webserver (nginx), Apache Webserver (apache2), Samba Server (smbd), PostgreSQL (postgresql) | Login: admin-bear / ^qpwp4Wr
|
Google Drive folder |
| Nintendo Semifinals Practices | Debian 11 | 0 – Unrated | — | Unknown | LAMP (all component + WordPress) | After extracting, delete Nintendo Debian 11 Semifinals Practice Image.vmsd from the folder.
|
Google Drive |
| Mr. Robot | Fedora 37 | 0 – Unrated | — | tirefire | SSH (unconfirmed) | Corrections for the forensics questions are on the author's page. | Sync.com Author's page |
| House on the Borderland | Ubuntu 20 | 0 – Unrated | 8 | poarthanarseus | None | — | Google Drive |
| System Hardening 11 | Mint 22 | 0 – Unrated | 9 | shubuntu + prilasey | SSH, Samba | Has a scoring issue with FQ5; an updated README is available. | Google Drive |
| Eric Zuniga Ubuntu CP ImageAeacusv2 | Ubuntu (version unknown) | 0 – Unrated | — | Eric Zuniga | — | From the "CyberSpace Image Directory"; not verified to work. | Google Drive |
| Ubuntu16-FlashGordonScoreAeacus | Ubuntu 16 | 0 – Unrated | — | Unknown | — | From the "CyberSpace Image Directory"; not verified to work. | Google Drive |
| GreenArrowUbuntu16Lvl7 | Ubuntu 16 | 0 – Unrated | — | Unknown | — | From the "CyberSpace Image Directory"; not verified to work. | Google Drive |
| SuperGirl-Ubuntu16 | Ubuntu 16 | 0 – Unrated | — | Unknown | — | From the "CyberSpace Image Directory"; not verified to work. | Google Drive |
| Seinfield | Ubuntu (version unknown) | 0 – Unrated | — | hashfastr | — | Very old image, from around CyberPatriot season 8. | Amazon S3 |
Cisco Packet Tracer
These are Packet Tracer activity files (.pka). You need Cisco Packet Tracer, which Cisco offers through its Networking Academy. Open the file, read the instructions and complete the tasks.
| Image | Difficulty | Rating | Creator | Major protocols | Notes | Download |
|---|---|---|---|---|---|---|
| CCNA Mega Lab (Jeremy's IT Lab).pka | 7 – Super Hard | 9.7 | Jeremy IT Lab | VLANs, L2 and L3 EtherChannels, IPv4 addressing, HSRP, Rapid PVST+, OSPF, static routing, DHCP, NTP, SNMP, Syslog, FTP, SSH, NAT, ACLs and other L2 security features, IPv6 addressing, wireless | Walkthrough available from Jeremy's IT Lab. | Google Drive |
| Modules_1_13_Image.pka | 6 – Hard - Super Hard | — | noobfooditem123 | OSPF, ACL, VPN/IPSec | — | Google Drive |
| Final_R3_BDSM.pka | 5 – Hard | 4 | crescental_, toasty3302 | DHCP, VLANs & Trunking, Inter-VLAN Routing (SVI on MLS), OSPF, Static Routing, NAT, Syslog, NTP, AAA w/ TACACS+, SSH | dw about the name lol | Google Drive |
| R3_OKCUP_23_24_CiscoPT.pka | 4 – Medium - Hard | 8 | Oklahoma Cup | SSH, NTP, Syslog, NAT (Static, Dynamic, PAT), DHCP, ACL (Standard & Extended) | — | Google Drive |
| R3_OKCUP_24_25_CiscoPT.pka | 4 – Medium - Hard | 7 | Oklahoma Cup | SSH, NTP, Syslog, NAT (Static, Dynamic, PAT), DHCP, ACL (Standard & Extended) | — | Google Drive |
| Atomic Inn | 4 – Medium - Hard | — | AntryCat | OSPF, Static Routing, VLANs, Trunking, Inter-VLAN Routing (SVI on MLS & RoaS), EtherChannel (LACP), Spanning-Tree, HSRP | Report issues to @antrycat on Discord. | Google Drive |
| R2_OKCUP_24_25_CiscoPTUNLOCKED.pka | 3 – Medium | 10 | Oklahoma Cup | OSPF, Static Routing, VLAN & Trunking, Inter-VLAN Routing (SVI on MLS, RoaS), SSH | — | Google Drive |
| AP CyberPatriot Networking R2 Full Exam | 3 – Medium | 8.5 | lolmenow, okdargy | — | Mock exam; the answer key is on the same page. | Author's page |
| R1_OKCUP_24_25_CiscoPT.pka | 2 – Easy - Medium | — | Oklahoma Cup | IPv4 Addressing, Static Routing, VLANs & Trunking, Inter-VLAN Routing (SVI on MLS), SSH | — | Google Drive |
| Pixystems.pka | 2 – Easy - Medium | 9 | AntryCat | Static Routing, VLANs & Trunking, Inter-VLAN Routing (SVI on MLS), IPv4 Addressing | Report issues to @antrycat on Discord. | Google Drive |
| Baby Steps PKA | 1 – Easy | 8.5 | stageking5000 | IPv4, IPv6 Addressing, VLANs, SSH, DTP | — | Google Drive |
| NationalsEmulatorTemplate.pka | 0 – Unrated | 10 | noobfooditem123 | — | Meant to emulate the national round, as the name says. | Google Drive |
| CCNA Lab Series | 0 – Unrated | — | Jeremy IT Lab | — | Covers the whole CCNA. Walkthroughs by Jeremy's IT Lab. | Google Drive folder |
| CCNA Flashcards and Labs | 0 – Unrated | 10 | Jeremy IT Lab | — | Covers the whole CCNA and includes a full flashcard set. Walkthroughs by Jeremy's IT Lab. | Google Drive folder |
Other
| Image | OS | Difficulty | Rating | Creator | Critical services | Notes | Download |
|---|---|---|---|---|---|---|---|
| Boeing 2.0 | Boeing | 0 – Unrated | 9.7 | lukshmwah | — | Legacy image; the source list calls it a relic. | Google Drive |
Credits
This page is adapted from the community-maintained practice-image lists (Windows, Linux, Cisco and Miscellaneous) that were published on the CyberPatriot community's cypat.guide site; the Windows list credits carbonice as its maintainer. The image names, difficulty labels, ratings and creator credits come from those lists. Images are the work of the creators named in each row.