PurpleDuel: learn cybersecurity by playing
A free browser game for learning information security: fully simulated ethical-hacking labs, card duels where every attack has its real-world countermeasure, a PvP Arena and a brand-new CTF challenge every day.
Runs in the browser on PC, tablet and phone. You can try the labs right away, no account needed.
How it works
Learn in the labs
Open the simulated terminal, explore an invented system and capture the flag: from your first Linux commands to analysing an incident. Every lab ends with a write-up that explains what went wrong and how to defend against it.
Test what you know
With the 158 cards of PurpleDuel you attack and defend: every attack has a real countermeasure (a firewall against a flood, multi-factor authentication against phishing) and combos reward real attack sequences, from scanning to exploit.
Challenge other players
Build your own node in the PvP Arena, fight card duels, try the Draft and the weekly events and play the daily CTF: the same challenge for everyone, ranked by number of commands and time.
What's inside
- 39 ethical-hacking labs in 6 learning paths, from the Linux shell to incident response
- 158 cards of attacks, defences, terrains and traps, with combos and statuses inspired by real security
- Card duels against the AI, trophy-ranked challenges and an adventure through the history of computing
- PvP Arena: set up your virtual server, defend it and attack other players’ servers
- Daily CTF, Draft and weekly events with special rules
- Levels, XP, a Battle Pass and missions to keep you motivated
- Available in English, Italian, Spanish, French and German
Lab learning paths
- Linux Fundamentals – Shell, files, filters, permissions (9 labs)
- Encodings & secrets – Base64, hex, ciphers (6 labs)
- Recon & Scanning – Nmap, banners, DNS, enumeration (6 labs)
- Web Exploitation – Hidden dirs, cookies, access (7 labs)
- Privilege Escalation – From user to root (5 labs)
- Blue Team / Defense – Logs, incidents, hardening (6 labs)
Everything is simulated, for education only
The lab targets are invented data inside the game: no command ever reaches a real computer and you do not have to install any hacking tool. You learn the method of those who defend systems and of those who test them with permission.
Never use these techniques on systems that are not yours or that you do not have written permission to test: doing so is a crime.
Guides to get started
- What is phishing and how to spot it
- What is a CTF and how to get started
- Red team, blue team and purple team: what is the difference?
- SQL injection explained: what it is and how to prevent it
- Brute force and strong passwords: how they work and how to defend
- MFA and passkeys: what they are and how to use them to protect your accounts
Frequently asked questions
Is PurpleDuel free?
Yes. You play for free in the browser. The labs can be tried right away, even without an account; cards, the Arena, the daily CTF and leaderboards need a free account (Google sign-in works too). Optional purchases exist, such as Bit packs and the Premium Battle Pass, but you do not need them to learn.
Do I need to install anything?
No. PurpleDuel runs in the browser on PC, tablet and phone and can be added to your home screen like an app. There is nothing to download or configure: the lab terminal is simulated.
Is it safe and legal?
Yes. The labs never touch real computers and you do not need any hacking tool on your device. The personal data collected is minimal and described in the privacy policy; optional payments go through Polar, and your card details never reach PurpleDuel.
What does "everything is simulated" mean?
Each lab is a small invented world inside the game, with fictional files, services and web pages. The terminal accepts about forty commands (ls, cat, grep, find, nmap, curl…) that only work on that data. At the end a write-up explains the defensive lesson.
Who is PurpleDuel for?
For anyone who wants to learn information security from scratch, such as students, curious people or those preparing for a CTF, and for people who already know it and want a challenge. The labs start from Linux shell basics and get harder step by step.
Which languages are available?
English, Italian, Spanish, French and German: interface, labs and cards are all translated. The language starts from your browser setting and can be changed from the selector at the top.