Cybersecurity learning platform
Learn · Analyse · Verify
Understanding the attack is the first act of defence.
EVIL is a free lab, in English and Italian, that runs in your browser. You simulate attacks in a sandbox, study real incidents from public sources and analyse the sites you are allowed to check.
● free · nothing to install · the analysis tools need an account
In ten seconds
Every page on EVIL belongs to one of these three areas. Pick where to start.
Understand how a vulnerability is born and how it is fixed, with guided exercises that never touch a real system.
Study real threats and incidents from public sources: what happened, how, and what it taught defenders.
Check websites and files you are entitled to analyse and get explained results, even for non-technical readers.
The whole site at a glance
Hover over a node (or tap it, or use Tab) to see what the page does. Click, or tap a second time, to open it.
Full catalogue
The badge tells you whether you need an account: the training and intelligence areas are open to everyone.
The full list of pages is also in the menu at the top and at the bottom of the page.
Try it without signing up
Mini exercises taken from the real modules. Nothing leaves your browser.
The oldest cipher: every letter moves N places. Julius Caesar used 3.
Ciphertext
Challenge: this message was encrypted with an unknown key. Find the key with the slider.HYLO → ?
Hover over the button to see where it really leads, then decide. The bank and the domains are made up.
Dear customer, we have detected a suspicious sign-in. Your account will be suspended unless you confirm your details today.
Confirm your details→ http://f1ctionalbank-login.top/confirmIt's phishing.
-verify.co).f1ctionalbank-login.top: a "1" in place of the "i".More questions like this in the Quiz centre.
An estimate of how long an offline attacker would need to guess it. The calculation happens here: the password goes nowhere.
Recommended paths
Three ready-made sequences, depending on who you are and how much time you have.
Beginner level · no prerequisites
For those starting from scratch who want to understand how basic attacks and defences work.
Intermediate level · web and networking basics
For those building applications who want to understand and close bugs before others do.
Intermediate level · defenders (blue team / SOC)
For those who want to learn to read attacks like a security operations centre analyst.
With an account
Every lab you complete, quiz you pass and incident you close ends up in your profile: sixteen trophies, from bronze to legendary. And this page hides six secrets: the ring fills up as you find them.
The simulators run locally: no payload is sent to real sites.
The tools are for your own sites or ones you have written permission to test.
Advisories, incidents and malware come from open feeds and archives.
An email for the account, progress in your profile, nothing else.
Knowledge is neutral, like fire: it can cook or destroy. Ethics and law →
The first lab takes ten minutes and needs no sign-up.