Server-Side Template Injection Exploitation

Server-Side Template Injection – Remote Code Execution & Data Exposure | Leaf

Overview This lab demonstrates how Server-Side Template Injection (SSTI) can lead to full server compromise. The attack chain includes: SSTI detection Template engine identification Remot...

Mar 29, 2026 A05 - Injection, SSTI

Directory Enumeration to SSH Brute Force Attack

Weak Authentication – SSH Brute Force Leading to Unauthorized Access | Discover Lernaean

Overview This lab demonstrates a full attack chain starting from directory enumeration, leading to admin panel access, and ending with SSH brute-force login. It highlights how multiple small misc...

Mar 29, 2026 Penetration Testing, Linux priviledge escalation

MySQL Unauthenticated Access Exploitation

Unauthenticated Access – MySQL Misconfiguration Leading to Data Exposure | Query Gate

Overview This lab demonstrates a critical misconfiguration where a MySQL database is exposed without authentication, allowing attackers to access sensitive data directly. Databases often store hi...

Mar 29, 2026 Penetration Testing, Web Application Exploitation

Default Credentials – SSH Misconfiguration Leading to Root Access | Secure Command

Overview This lab demonstrates how weak or default credentials in an SSH service can lead to unauthorized access and full system compromise. Although SSH is a secure protocol, improper credential...

Mar 29, 2026 Penetration Testing, Linux priviledge escalation

Anonymous Access – FTP Misconfiguration Leading to Credential Disclosure | File Hunter

Overview This lab demonstrates how misconfigured FTP services allowing anonymous login can expose sensitive files, leading to credential disclosure and potential system compromise. The target mac...

Mar 29, 2026 Penetration Testing, Web Application Exploitation

Default Credentials – Telnet Misconfiguration Leading to Root Access | Arrow

Overview This lab demonstrates a classic misconfiguration where a service is exposed with default credentials, leading to immediate root access. The target machine “Arrow” runs a Telnet service t...

Mar 29, 2026 Penetration Testing, Linux Privilege Escalation

IDOR – Password Disclosure via Insecure Direct Object Reference | User ID Controlled by Request Parameter

Overview This lab demonstrates a horizontal privilege escalation vulnerability combined with sensitive data exposure. The application allows access to other users’ profiles via a request paramete...

Mar 29, 2026 A01 - Broken Access Control, IDOR

IDOR – Unauthorized Access via Predictable Identifier Manipulation | User ID Controlled by Request Parameter

Overview This lab demonstrates a horizontal privilege escalation vulnerability where user accounts are identified using GUIDs. Even though the identifiers are complex and unpredictable, the appli...

Mar 29, 2026 A01 - Broken Access Control, IDOR

Local File Inclusion and Log Poisoning Exploitation

Local File Inclusion – Log Poisoning to Remote Code Execution | Venomous

Overview This lab demonstrates exploitation of a Local File Inclusion (LFI) vulnerability combined with log poisoning to achieve remote code execution on a web server. The attack leverages improp...

Mar 29, 2026 A02 - Security Misconfiguration, Local File Inclusion

Server-Side Template Injection – Remote Code Execution via Twig & Bind Shell | Leaf

Overview This lab demonstrates exploitation of a Server-Side Template Injection (SSTI) vulnerability to achieve remote code execution and gain shell access on the target system. The vulnerability...