CTF series: intermediate
On lab targets you find web flaws, network evidence and misconfigurations through puzzles that chain several steps.
Level 201 · 16 lessons · 0 practice labs
Lessons
Web
- A forgotten admin page found by directory discovery
- An ID that shows someone else's record
- SQL injection in a login form
- Finding a reflected XSS and proposing the fix
- A gap in the file upload check
- Short task: fix one of the web flaws you found in the code
Network and traffic
- An FTP password in a capture
- A flag hidden in a DNS TXT record
- A share open to anonymous access
- Finding an outdated service and matching its advisory
- Short task: list every cleartext credential in the capture
Linux and privileges
- Finding an over-broad sudo rule
- An unnecessary SUID file
- A scheduled script anyone can write
- An SSH key with wrong permissions
- Capstone: solve the web-to-root chain and fix every link
About this course
On lab targets you find web flaws, network evidence and misconfigurations through puzzles that chain several steps.
What you will learn
- Web
- Network and traffic
- Linux and privileges
Prerequisites
Finishing the level 101 courses of the same path, or knowing those topics, is enough.
Lab environment
Lessons run in your own Kali Linux terminal in the browser, connected to a private lab network. Nothing to install.
Frequently asked questions
- Is this course right for my level?
- The course is at level 201; it assumes you know the topics of the lower-level courses.
- Is there anything to install?
- No. Every lesson runs in your own lab environment that opens in the browser.
- How do lessons work?
- Each lesson has 8 to 10 steps and a short quiz. Early steps show the command to type, later steps give less help; if two attempts fail, the solution opens.
- Can I try it for free?
- Yes. The first three lessons of every course are free.