Free Interactive Wargame Simulates XZ Backdoor Attack for Hands-On Learning

A free cybersecurity wargame called BreachLab offers an interactive exercise simulating the xz/liblzma backdoor attack. The challenge, named Ghost II, consists of eighteen levels where users manually replicate the attack through a CI/CD pipeline, including bypassing branch protection and deploying malicious code to a fleet. The platform is accessible without signup and provides hands-on experience with real Linux systems over SSH. The exercise is designed to mirror the tradecraft typically covered in paid courses.