Armory Labs
Scenario-driven red team labs that test how you think when the path is not obvious. Each operation has a mission brief, realistic enterprise constraints, and no built-in walkthrough.
Candidate to ZeroExplore Armory
PRACTICAL SECURITY TRAINING ECOSYSTEM
Learn it properly, or don't bother.
Build practical cybersecurity skills through realistic labs, technically rigorous courses, and intelligence built for serious operators. Train across the full assessment lifecycle, from reconnaissance and phishing through to internal compromise and reporting.
RCO25
armory_access.sh
tty1|UTF-8
Status: Ready for practice
Proof Strip
Evidence over reviews.
Establishing momentum through real, verifiable operator metrics.
These figures are small as the platform is young. We'd rather show that than pad it with vanity metrics.
hf-stats.sh
tty1|UTF-8
$hf-stats --scope community
>active_labs_+
>students_+
>community_members_+
>youtube_subscribers_+
>integrity_checkWAIT
operator@hackerforce:~$
COUNTER-DOCTRINE
Cybersecurity training does not need more shortcuts.
Too much cybersecurity training is rushed, recycled, and dressed up in fancy labels. HackerForce is built around realistic practice and a methodology that holds up.
PROBLEM 01HF-CD/01
Rushed production
Recorded quickly, shipped quickly, and presented as settled doctrine before the material had earned that trust.
PROBLEM 02HF-CD/02
Recycled tactics
The same exploit paths get renamed and repackaged as a 'new' training arc without building better judgement.
PROBLEM 03HF-CD/03
Scripted scenarios
Practice environments teach one expected route and then stop teaching the moment the learner deviates from the script.
Alternative
Here's what we do instead.
Realistic practice, principle-based instruction, and a community that values sound judgement over fancy labels.
- Realistic operations shaped around constraints, evidence, uncertainty, and operational pressure.
- Courses that teach judgement first and the tools come after you understand why an attack works, not before.
- Methodology that holds up so you can explain what happened, why it worked, and what comes next.
Ecosystem Paths
One ecosystem. Three ways to build capability.
Start with an Armory operation, follow a structured course, or study the tradecraft behind the techniques.
Training Courses
Structured courses that bring individual techniques together into a complete workflow, covering phishing, lateral movement, internal compromise, and more through realistic scenarios.
Comprehensive InstructionExplore Courses
Intelligence Reports
Technical articles, field notes from the AO, and research explaining the tradecraft behind various aspects of security operations, from red team to blue team and far beyond.
Field Notes & ResearchExplore Intelligence Reports
Featured Operations
Featured Armory Operations
Choose an operation based on your current capabilities and the environment you want to face.
Recruitbeta
Darkglass
Red Team Scenario - Trust the process
Agentbeta
Northwood Timber
Red Team Scenario - Inside the Woodwork
APTbeta
Medisys
Red Team Scenario - Beyond the Ward
Armory entries open from focused internal briefs.
Flagship Training Journey
Train across the full engagement
HackerForce connects individual techniques into one professional workflow, helping you understand not only how an attack works, but also when and why to use it.
01Phase 01
Plan and discover
Scope the engagement, then map the attack surface: OSINT, exposed assets, reconnaissance.
02Phase 02
Gain initial access
Establish phishing infrastructure, bypass MFA, and secure a secure C2 channel back into the network you've just breached.
03Phase 03
Operate inside targets
Establish persistence, elevate privileges, steal credentials, then move laterally, all whilst staying under the radar.
04Phase 04
Deliver the assessment
Present findings that withstand scrutiny, a genuinely actionable remediation path, and a report that an executive will read.
Intelligence Reports
Technical reports, from HackerForce's intelligence desk.
Technical docs, red team notes, Armory research, and lessons from building training that does not insult your intelligence.
Offensive SecurityOct 24, 2026
Contributing custom armory tools in Sliver C2
Learn the requirements and how to publish your own tools to Sliver’s armory.
- sliver c2
- extensions
- armory
By @Sunflower7 min read
Offensive SecurityOct 17, 2026
Harvesting cached Notepad data
Understand how Notepad caches unsaved contents, and harvest it for everything it's worth.
- red team
- pentesting
- windows
By @Sunflower12 min read
Offensive SecurityOct 4, 2026
Writing extensions in Sliver C2
Learn what Sliver extensions consist of and how to write your own in C.
- sliver c2
- extensions
- armory
By @Sunflower10 min read
FAQ
Questions before you deploy?
Everything you need to know about HackerForce operations, courses, and platform access.
What is HackerForce?
HackerForce is a security training ecosystem that combines realistic Armory operations, principle-led courses, intelligence reports, research, YouTube content, announcements, and an operator Discord community.
Who is HackerForce for?
HackerForce is built for cybersecurity enthusiasts, red teamers, blue teamers, and everyone else who wants rigorous, technically serious training with a repeatable methodology.
Where should I start?
Start with a course if you want a structured approach. Choose a Recruit-tier operation if you're ready to apply the fundamentals. You can also use our intelligence reports and YouTube (free of charge) to deepen your understanding of a specific topic.
What is an Armory operation?
An operation is a realistic practice environment (i.e. lab) with a mission brief, defined constraints, and an outcome that requires technical evidence. The Armory is simply a repository for such material.
Are the labs guided?
Guidance depends on the tier. Recruit operations provide more structure; APT and Zero expect you to work with ambiguity. Every operation page shows its status, target segment, and tier before you commit.
What do the tiers mean?
The tiers range from Recruit, through Agent and APT, to Zero. Higher tiers naturally involve greater uncertainty, stronger defensive maturity, increased surveillance, and more serious consequences. Lower tiers are better suited to beginners.