Security lab walkthroughs, explained step by step
Rooms and labs solved and written up by Animesh Roy. Search for the one you are working on, or browse them by learning path.
Learning paths
All paths- SOC Level 2 Detection engineering, threat hunting, log analysis and incident response for analysts moving past triage. 63 rooms
- Jr Penetration Tester Web hacking, network security, Metasploit and privilege escalation: the core skills for a first pentesting role. 58 rooms
- Web Application Pentesting Authentication, injection and server-side attacks against web applications, with the reasoning behind each exploit. 30 rooms
- Web Application Red Teaming Advanced web attack chains: SSTI, SSRF, deserialisation and other server-side techniques used on real engagements. 19 rooms
- Pre Security Networking, operating system and web fundamentals for people starting from zero. 12 rooms
Latest walkthroughs
All posts
Zeek Exercises: DNS Tunnel, Phishing and Log4Shell
PS Eclipse: Hunting BlackSun Ransomware in Splunk
Anonymous: Writable FTP Cron to SUID env Root
Event Horizon: Covenant C2 traffic decryption
Snort Challenge: blocking live attacks with IPS inline mode
Plant Photographer: SSRF to RCE via Werkzeug
Warzone 1: MirrorBlast C2 traffic analysis
BreachBlocker Unlocker: timing attacks and 2FA bypass
