Purple Edge
Get started

Password and Credential Attacks

intermediate4 labsSubscription

Attack the credentials layer: how hashes work, offline cracking, online spraying and stuffing, and a hashes-to-access capstone.

This path is available with a Purple Edge subscription. Sign in to read the full overview and start the labs.

Labs in this path

  1. 1
    beginner Hands-on lab Subscription

    Credential Attack Fundamentals

    Understand how passwords are stored and the difference between the online and offline attacks against them.

    35 min3 tasksCredential Access
  2. 2
    intermediate Hands-on lab Subscription

    Offline Password Cracking

    Recover plaintext passwords from captured hashes using wordlists, rules, and masks.

    50 min3 tasksCredential Access
  3. 3
    intermediate Hands-on lab Subscription

    Password Spraying and Credential Stuffing

    Attack many accounts with a few likely passwords, staying under lockout thresholds.

    45 min3 tasksCredential Access
  4. 4
    advanced Hands-on lab Subscription

    Capstone: From Hashes to Access

    Given captured material and a login portal, recover a working credential and get in.

    70 min3 tasksCredential Access

Unlock this lab

Launch the lab in your browser. Real Kali, Ubuntu and Windows targets, guided step by step. No setup, no VM downloads.

Create free accountSign in to start

Updated 2026-09-01