We're moving from canyouhack.me to canyouhackme.com which should help a ton with SEO!
Start here when setting up your first lab connection.
Complete the Getting Started module to better understand our lab.
Open Connect To Lab, choose the VPN server available to your account, then download your connection pack. The file downloads as your username with an .ovpn extension.
Import the .ovpn file into OpenVPN Connect, Tunnelblick, or your OpenVPN client. Keep it connected while you work on machines.
Open Machines, Challenges, Active Directory Labs, or a Lab Module. Pick a target and use LAUNCH. When the machine is active, copy the IP address shown on the page.
Use the flag fields on the machine page. Regular machines use User Flag and Root Flag. Challenges use the Challenge Flag field.
Use the VPN pack before scanning or connecting to a target.
In the top navigation, select Connect To Lab. The same dialog opens from Connection Pack on machine pages. Choose Free or Pro+ based on your account, then download the .ovpn file.
On Linux, one common way to connect is:
sudo openvpn --config ~/Downloads/<username>.ovpnSpawn one target at a time and use the displayed IP.
After LAUNCH, wait for Active and copy the IP address from the machine control panel.
Machines run on a timer. Use Extend if you need more time, or DESPAWN when you are finished.
Only one target can be active on your account. If a different target is already running, open it from the active machine bar and despawn it first.
Use the copied IP with your normal testing tools.
Start with service discovery, then connect to whatever the target exposes.
nmap -sC -sV <target-ip>ssh <user>@<target-ip>http://<target-ip>Use the copy button next to the active IP to avoid typos.
Some lab module machines expose a Key download.
If a lab module shows a Key button next to the active IP, use that downloaded key and restrict its permissions before connecting.
chmod 600 ~/Downloads/<key-file>.pemssh -i ~/Downloads/<key-file>.pem <user>@<target-ip>Submit flags from the machine page after you capture them.
Regular machines may include a lower-privilege user flag.
Root flags complete regular machines and may despawn the machine after a successful submit.
Challenge machines use a single challenge flag field.
Plan access varies by lab type.
Challenges and learning machines are available after sign in.
Free accounts can launch the starter regular machines.
Pro unlocks regular machines. Pro+ unlocks the full AD lab catalog.
Check these before contacting support.
If the .ovpn file does not download, sign in again and make sure your profile has a username.
If a target IP does not respond, confirm your VPN is connected and the machine status is Active.
If you see Another Machine Active, despawn the current machine before launching a different target.
Windows targets can take about a minute before the IP is shown. Wait for the countdown to finish before testing connectivity.
If VPN traffic still fails, disconnect other VPNs, reconnect this VPN pack, and try launching the machine again.