Lab User

Profile Logout

Profile Logout

Bug Report Support

Dashboard
Search
Ongoing Labs 0
Latest Additions
Community Labs
Earn Credentials
Verifiable Badges
Windows Security
Reconnaissance
- Getting Started
- Host Discovery
- SMB
- MSSQL
- IIS
Basic Exploitation
- With Metasploit
- Pentesting
Post Exploitation
- With Metasploit
Service Exploitation
- RDP
- SMB
- WinRM
- WMI
- MSSQL
- IIS
Privilege Escalation
- Basic
Maintaining Access
- Basics
Cloud Security
AWS Cloud Security
- IAM
- S3
- DynamoDB
- API Gateway
- Lambda
- Databases
- EC2
- ECS and ECR
- Defense
Bootcamp
- Recordings
Linux Security
Linux Basics
- Getting Started
- Basics
Reconnaissance
Exploitation
Post Exploitation
Privilege Escalation
- Getting Started
- Basic
Pivoting
- Getting Started
- Basics
Maintaining Access
- Getting Started
- Basics
MITRE ATTACK
Exploit Research
- Getting Started
- Buffer Overflow
Bootcamp
- Recordings
WebApp Pentesting Basics
Web Application Basics
- Getting Started
- Basics
Tools of the Trade
- Getting Started
- Basics
OWASP Top 10
Webapp CVEs
- Getting Started
- Basics
Bootcamp
- Recordings
Advanced Priv-Esc
Windows
Linux
Container Security
Intro to Containers
Container/Host Security
Docker Image Security
Miscellaneous
- Docker Security Tools
Securing Docker
- Securing Docker
Bootcamp
- Recordings
DevSecOps
DevOps Basics
DevSecOps Basics
Pipeline Basics
Fix The Code
- Web Applications
Bootcamp
- Recordings
WiFi Security
Basics
Personal Networks
- Offline Cracking
- Live Cracking
Enterprise Networks
Advanced Labs
Forensics
- Basics
Bootcamp
- Recordings
Reverse Engineering
Linux
- GDB Basics
- Static Binary Analysis
Password Cracking
Hashes
- Getting Started
- Basics
File Passwords
- Basics
Forensics
Disk Forensics
- Getting Started
- Basics
Memory Forensics
- Basics
Offensive Python
Interacting with Files
Live Interactions
IoT Security
Device Attacks
- Getting Started
- Bootloader
Network Attacks
- MQTT
- AMQP
Other Topics
Network Recon
Real World WebApps
Traffic Analysis
- Tshark Fu
WebApp CVEs
- 2022
- 2021
- 2020
- 2019
- 2018
- 2017
- 2016
- Older CVEs
Metasploit
Network Pivoting
- Single Pivots
Infrastructure Attacks
- Memcached
- Squid Proxy
- MongoDB
- Apache
- Nginx
Privilege Escalation
Deliberately Vulnerable
- Web Apps
Forensics
- Browser
Firmware Analysis
- Wi-Fi Routers
Secure Coding
Malware Analysis
- Simple Samples
DevSecOps
- CI/CD Tools
Code Repositories
Endpoint Security
- osquery
- OSQuery MITRE
- Sysdig
- Malware Scanner
- HIDS
Persistence
- Maintaining Access
- Data Exfiltration
Linux Runtime Analysis
- Profiling Tools
Log Analysis
REST
MITRE ATTACK Linux
Service Exploitation
- Linux Services
- WebApp Frameworks
Web Technologies
- WebSockets
- Bot Attack
Android Pentesting
- Basics
OWASP Top 10
- Single Page Applications
- Getting Started
Network Pentesting
- DNS
- Git
- Recon
- Subversion (SVN)
Advanced Exercises
Weekly CTF
- All
Capture the Flags
PA Course Labs
Tshark Unleashed
- Course Labs
Python For Pentesters
- Course Labs
VoIP Traffic Analysis
- Course Labs
Javascript For Pentesters
- Course Labs
Pandas For Pentesters
- Course Labs
Embedded/IoT Linux
- Course Labs
WAP Challenges
- Course Labs
Web App Pentesting
- Course Labs
Pentesting Challenges
- Course Labs
x86 Asm and Shellcoding
- Course Labs
x86_64 Asm and Shellcoding
- Course Labs
GNU Debugger
- Course Labs
Data Science and Machine Learning for InfoSec
- Course Labs
Coming Soon
Win Badges
Earn Certificates

Dashboard

Exploiting Setuid Programs

Shared Server

Cron Jobs Gone Wild!

Fallen Guardian

Permissions Matter!

Editing Gone Wrong

The Golden Logs

Load Order Matters

Restricted Shell

Chroot Jail I

Privacy Policy
ToS

Copyright © 2018-2019. All right reserved.

Web
Analytics