Overview This lab demonstrates an Insecure Direct Object Reference (IDOR) vulnerability in a note-sharing feature of a web application. Users can generate shareable links for their notes, but the ...

Overview This lab demonstrates a Broken Access Control vulnerability in an API endpoint used for retrieving user statistics in a typing test application. The issue arises because the server fails...

Overview This challenge demonstrates how sensitive information can be exposed through publicly accessible components of a web application, including source code comments, HTTP response headers, an...

Overview This room demonstrates exploitation of a critical SMB vulnerability (MS17-010), commonly known as EternalBlue. The attack leads to remote code execution on a Windows machine and full syst...

Overview This room focuses on web enumeration, exploiting a known CMS vulnerability, and privilege escalation using misconfigured sudo permissions. The attack path demonstrates how outdated softwa...

Overview This room demonstrates how poor credential management and log exposure can lead to full system compromise. The attack path focuses on web enumeration, credential discovery, and privilege ...

Overview This room focuses on identifying and exploiting a vulnerable web application to achieve remote code execution. The target machine hosts a CMS application with a known vulnerability that ...

Overview This lab focuses on exploiting a vulnerable Nostromo web server to gain initial access and then leveraging a Linux kernel vulnerability to escalate privileges to root. The attack chain d...

Overview This lab demonstrates a full attack chain starting from service enumeration to remote code execution and finally privilege escalation on a Linux system. The target application runs an ou...

Overview This lab demonstrates a complete attack chain involving web application exploitation, privilege escalation via misconfigured sudo permissions, and cracking encrypted files. The target ru...