Overview This lab demonstrates a classic misconfiguration where a service is exposed with default credentials, leading to immediate root access. The target machine “Arrow” runs a Telnet service t...

Overview This lab demonstrates a horizontal privilege escalation vulnerability combined with sensitive data exposure. The application allows access to other users’ profiles via a request paramete...

Overview This lab demonstrates a horizontal privilege escalation vulnerability where user accounts are identified using GUIDs. Even though the identifiers are complex and unpredictable, the appli...

Overview This lab demonstrates exploitation of a Local File Inclusion (LFI) vulnerability combined with log poisoning to achieve remote code execution on a web server. The attack leverages improp...

Overview This lab demonstrates exploitation of a Server-Side Template Injection (SSTI) vulnerability to achieve remote code execution and gain shell access on the target system. The vulnerability...

title: “Path Traversal – Unauthorized File Access via Directory Traversal | Simple Case” date: 2026-03-29 14:00:00 +0530 categories: [A02 - Security Misconfiguration, Path Traversal] tags: [ path...

🧠 Overview This lab demonstrates a privilege escalation vulnerability where user roles are controlled via client-side input. By modifying a cookie value, an attacker can escalate privileges and g...

🧠 Overview This lab demonstrates why security through obscurity is ineffective. Even when administrative endpoints use unpredictable URLs, they can still be exposed through client-side code such ...

Overview This lab demonstrates a classic case of broken access control, where sensitive administrative functionality is exposed without authentication. An attacker can directly access privileged ...

Overview This lab focuses on performing a complete network penetration testing workflow, starting from reconnaissance to exploitation. It highlights weak authentication mechanisms in an FTP service...