Security lab walkthroughs, explained step by step
Rooms and labs solved and written up by Animesh Roy. Search for the one you are working on, or browse them by learning path.
Learning paths
All paths- SOC Level 2 Detection engineering, threat hunting, log analysis and incident response for analysts moving past triage. 63 rooms
- Jr Penetration Tester Web hacking, network security, Metasploit and privilege escalation: the core skills for a first pentesting role. 58 rooms
- Web Application Pentesting Authentication, injection and server-side attacks against web applications, with the reasoning behind each exploit. 29 rooms
- Web Application Red Teaming Advanced web attack chains: SSTI, SSRF, deserialisation and other server-side techniques used on real engagements. 19 rooms
- Pre Security Networking, operating system and web fundamentals for people starting from zero. 12 rooms
Latest walkthroughs
All posts
Plant Photographer: SSRF to RCE via Werkzeug
Warzone 1: MirrorBlast C2 traffic analysis
BreachBlocker Unlocker: timing attacks and 2FA bypass
Profiles: Linux memory forensics with Volatility 3
Overflow The Jackpot CTF: full chain walkthrough
Juicy: XSS to SSRF via unsanitised LLM output
Model Poisoning: supply chain and training data attacks
LLM Output Handling: XSS and RCE via model output
