EVIL

Learn ▾

Understand how a vulnerability is born and how it is fixed, with guided exercises that never touch a real system.
Learning pathsThree ordered tracks, from the basics to SOC work: level, duration and goals for every step. Web attack simulatorSQL injection, XSS, CSRF, brute force and insecure upload in four phases: context, bug, impact, defence. Virtual labGuided scenarios in a simulated terminal: reconnaissance, exploitation and, at the end of every lab, the fix. Cryptography studioHashes, classical and modern ciphers, TLS and post-quantum cryptography: try the algorithms and see what changes. Incident response timelineIncidents rebuilt minute by minute: what defenders see and which decisions would have stopped the attack. Quiz centreQuestions by category with an explanation for every answer, to measure what you know and what to review. GlossarySecurity terms explained in plain language, from A to Z.
Analyse ▾

Study real threats and incidents from public sources: what happened, how, and what it taught defenders.
Advisories and vulnerabilities mapCERT advisories and exploited vulnerabilities from public sources, grouped by region and constantly updated. Historic breachesThe cases that changed security: who was hit, how, how much data and what we learned. Malware catalogueDocumented malware families with behaviour, spread and signs to recognise them. Malware taxonomyMalware categories explained with examples, plus a quiz to test yourself. Persistence and evasionHow an intruder stays in a system and evades controls, and which signals give it away to defenders.
Verify ▾

Check websites and files you are entitled to analyse and get explained results, even for non-technical readers.
URL checkA passive check of an address: certificate, headers, reputation and risk signals. HTTP header auditWhich security headers a site is missing (HSTS, CSP…) and what is at risk without them. Domain reconnaissanceThe starting point for a domain’s DNS, WHOIS, subdomains and certificates. File analysisA suspicious file read up close: real type, hashes, metadata and danger signs. OSINTOpen sources used the right way: to understand your own exposure, not to profile other people. Report generatorTurn the results of an authorised assessment into a report you can hand over.
Project ▾

Mission, ethics and law, privacy and help: the rules that turn knowledge into a defensive tool.
AboutThe project’s mission, where the data comes from and what is real, simulated or educational. Ethics and lawEVIL’s code of conduct, the laws that matter and how to report a vulnerability responsibly. HelpFrequently asked questions and a form to contact us. Privacy and termsHow we handle data, which cookies we use and the platform’s terms of use.

Sign in Sign up

Sign in

Sign in to EVIL

Email

Password

Forgotten your password?

No account yet? Sign up here

Welcome to EVIL

With an account you can use the analysis tools and keep your progress and trophies on every device. Use the tools only on your own systems or on systems you have written authorisation to test (Ethics and law).

URL check and HTTP header audit
Domain reconnaissance and TLS certificate
File analysis and defensive OSINT tools
Progress, trophies and activity log

EVIL

Hands-on cybersecurity training. We explain how attacks work so that learners can prevent them, within the law.

Knowledge is neutral, like fire: it can cook or destroy. Here you learn to use it to protect.

Learn

Learning paths
Web attack simulator
Virtual lab
Cryptography studio
Incident response timeline
Quiz centre
Glossary

Analyse

Advisories and vulnerabilities map
Historic breaches
Malware catalogue
Malware taxonomy
Persistence and evasion

Verify

URL check
HTTP header audit
Domain reconnaissance
File analysis
OSINT
Report generator

Project

About
Ethics and law
Help
Privacy and terms

Source code on GitHub

IT EN