Demo mode. Machines, IPs and VPN configs here are fake. Set NEXT_PUBLIC_LAB_API and the NEXT_PUBLIC_FIREBASE_* keys in Vercel to go live. Try flag CYBERTECTION{demo_user} on OAuth State Bypass.

Connect to the labs

Every student gets a personal WireGuard profile. It only routes lab traffic (10.20.0.0/16) through the tunnel, so your normal internet keeps working.

1. Download your config

Sign in, open Labs, and click Download .conf. The file is yours alone. Don't share it; each profile is tied to your account.

2. Bring the tunnel up

WireGuard is in the Kali repos. Install it once:

sudo apt update && sudo apt install -y wireguard resolvconf

Then from the folder where you saved the file (replace student.conf with your file name):

sudo wg-quick up ./student.conf

3. Check it's working

sudo wg show

You should see latest handshake: a few seconds ago. Then start a machine on the dashboard and ping its IP:

ping -c 3 <TARGET_IP>

4. Disconnect when done

sudo wg-quick down ./student.conf

Troubleshooting

No handshake. Your network may block UDP 51820. Try another network or a phone hotspot.
Handshake OK, but can't reach the target. Make sure the machine shows running with an IP on the dashboard. New machines take about a minute to boot.
resolvconf: command not found. Run sudo apt install -y resolvconf, or delete the DNS = line from your config.
Using a Kali VM? Run WireGuard inside the VM, with the VM on NAT networking.
Lost your config? Download it again from the dashboard. It's the same profile.