Broken Access Control – Credential Leakage to Privilege Escalation | Silver Platter

Overview This room demonstrates how poor credential management and log exposure can lead to full system compromise. The attack path focuses on web enumeration, credential discovery, and privilege ...

Apr 7, 2026 Penetration Testing, Linux Privilege Escalation

Remote Code Execution – Exploiting FuelCMS (CVE-2018-16763) | Vulnerability Capstone

Overview This room focuses on identifying and exploiting a vulnerable web application to achieve remote code execution. The target machine hosts a CMS application with a known vulnerability that ...

Apr 5, 2026 Penetration Testing, CVE-2018-16763 (Fuel CMS RCE)

Remote Code Execution – Nostromo Exploit to Root via Dirty Pipe | Glitch

Overview This lab focuses on exploiting a vulnerable Nostromo web server to gain initial access and then leveraging a Linux kernel vulnerability to escalate privileges to root. The attack chain d...

Mar 31, 2026 Penetration Testing, CVE-2019-16278 (Nostromo RCE)

Remote Code Execution – Supervisor Exploit to Root via SUID Python | Super Process

Overview This lab demonstrates a full attack chain starting from service enumeration to remote code execution and finally privilege escalation on a Linux system. The target application runs an ou...

Mar 31, 2026 Penetration Testing, CVE-2017-11610 (Supervisor XML-RPC RCE)

Remote Code Execution – GLPI Exploit to Root & ZIP Password Cracking | Find and Crack

Overview This lab demonstrates a complete attack chain involving web application exploitation, privilege escalation via misconfigured sudo permissions, and cracking encrypted files. The target ru...

Mar 30, 2026 Penetration Testing, Web Application Exploitation

Server-Side Template Injection Exploitation

Server-Side Template Injection – Remote Code Execution & Data Exposure | Leaf

Overview This lab demonstrates how Server-Side Template Injection (SSTI) can lead to full server compromise. The attack chain includes: SSTI detection Template engine identification Remot...

Mar 29, 2026 A05 - Injection, SSTI

Directory Enumeration to SSH Brute Force Attack

Weak Authentication – SSH Brute Force Leading to Unauthorized Access | Discover Lernaean

Overview This lab demonstrates a full attack chain starting from directory enumeration, leading to admin panel access, and ending with SSH brute-force login. It highlights how multiple small misc...

Mar 29, 2026 Penetration Testing, Linux priviledge escalation

MySQL Unauthenticated Access Exploitation

Unauthenticated Access – MySQL Misconfiguration Leading to Data Exposure | Query Gate

Overview This lab demonstrates a critical misconfiguration where a MySQL database is exposed without authentication, allowing attackers to access sensitive data directly. Databases often store hi...

Mar 29, 2026 Penetration Testing, Web Application Exploitation

Default Credentials – SSH Misconfiguration Leading to Root Access | Secure Command

Overview This lab demonstrates how weak or default credentials in an SSH service can lead to unauthorized access and full system compromise. Although SSH is a secure protocol, improper credential...