Security lab walkthroughs, explained step by step
Rooms and labs solved and written up by Animesh Roy. Search for the one you are working on, or follow a learning path from room 1.
Learning paths
All paths- SOC Level 2 Detection engineering, threat hunting, log analysis and incident response for analysts moving past triage. 63 rooms
- Jr Penetration Tester Web hacking, network security, Metasploit and privilege escalation: the core skills for a first pentesting role. 58 rooms
- Web Application Pentesting Authentication, injection and server-side attacks against web applications, with the reasoning behind each exploit. 29 rooms
- Web Application Red Teaming Advanced web attack chains: SSTI, SSRF, deserialisation and other server-side techniques used on real engagements. 19 rooms
- Pre Security Networking, operating system and web fundamentals for people starting from zero. 12 rooms
Latest walkthroughs
All posts
Plant Photographer: SSRF to RCE via Werkzeug
Warzone 1: MirrorBlast C2 traffic analysis
BreachBlocker Unlocker: timing attacks and 2FA bypass
Profiles: Linux memory forensics with Volatility 3
Overflow The Jackpot CTF: full chain walkthrough
Juicy: XSS to SSRF via unsanitised LLM output
Model Poisoning: supply chain and training data attacks
LLM Output Handling: XSS and RCE via model output
