Languages: English · 简体中文 · Español · Français · Deutsch · 日本語 · Русский · 한국어 · Português
A 30-day DevSecOps challenge path curated from the DevSecOps Linux and Docker security labs, progressing from host exposure audits to permissions, secrets, service identity, container hardening, Compose isolation, image hygiene, and incident cleanup.
| Index | Name | Difficulty | Practice |
|---|---|---|---|
| 01 | Audit Listening Services | Beginner | Start Challenge |
| 02 | Remove Unnecessary Public Port | Beginner | Start Challenge |
| 03 | Restrict Admin Interface to Localhost | Beginner | Start Challenge |
| 04 | Disable Web Directory Listing | Beginner | Start Challenge |
| 05 | Remove Exposed Backup Archive | Beginner | Start Challenge |
| 06 | Fix Unsafe Secret File Permissions | Beginner | Start Challenge |
| 07 | Fix World-Writable Web Directory | Beginner | Start Challenge |
| 08 | Dedicated Service User | Intermediate | Start Challenge |
| 09 | Service Env File | Intermediate | Start Challenge |
| 10 | Log Write Boundary | Intermediate | Start Challenge |
| 11 | Remove Hardcoded Credentials | Intermediate | Start Challenge |
| 12 | Process Env Secret | Intermediate | Start Challenge |
| 13 | Remove Over-Permissive Sudo Rule | Intermediate | Start Challenge |
| 14 | Safe Script PATH | Intermediate | Start Challenge |
| 15 | Harden Root-Run Cron Job | Intermediate | Start Challenge |
| 16 | Compose Handoff Audit | Intermediate | Start Challenge |
| 17 | Support Portal Audit | Beginner | Start Challenge |
| 18 | Metrics Endpoint Exposure | Beginner | Start Challenge |
| 19 | Local Debug Console | Beginner | Start Challenge |
| 20 | Internal Database Access | Intermediate | Start Challenge |
| 21 | Read-Only Config Mount | Intermediate | Start Challenge |
| 22 | Non-Root Image Worker | Intermediate | Start Challenge |
| 23 | Least-Privilege Log Collector | Intermediate | Start Challenge |
| 24 | Webhook Docker Socket | Intermediate | Start Challenge |
| 25 | Scoped Compose Secret | Intermediate | Start Challenge |
| 26 | Split Service Networks | Intermediate | Start Challenge |
| 27 | API Token in Env | Intermediate | Start Challenge |
| 28 | Build Token Leak | Intermediate | Start Challenge |
| 29 | Safer Worker Image | Intermediate | Start Challenge |
| 30 | Incident Debug Cleanup | Advanced | Start Challenge |
LabEx is a hands-on learning platform for beginners.
Explore Linux, DevOps, Cybersecurity, and more — all directly in your browser.
Learn step by step through interactive labs, guided exercises, and real-world projects. 🌱
No setup, no stress — just practice and grow your skills by doing.
📖 Need help? Visit our Help Center or email info@labex.io