CTF series: advanced
In advanced puzzles across the domain, the network and applications you find misconfigurations and write a defence note after every flag.
Level 401 · 14 lessons · 0 practice labs
Lessons
The domain
- A password written in an LDAP description field
- An account with pre-authentication disabled
- A service account with a weak password
- A forgotten password in Group Policy preferences
- A path made of dangerous object permissions
- Short task: write a one-line fix for every domain issue you found
Network and pivoting
- The route into a second segment of a segmented network
- A tunnelled connection in a capture
- SNMP open with a default community string
- Short task: write the firewall rule that would stop the pivot
Application and binary
- A service with unsafe deserialisation
- A file operation with a race condition
- Reversing a simple licence check
- Capstone: the chain from a web server to domain admin, with a defence report
About this course
In advanced puzzles across the domain, the network and applications you find misconfigurations and write a defence note after every flag.
What you will learn
- The domain
- Network and pivoting
- Application and binary
Prerequisites
You should have practised the topics of the same path up to level 301.
Lab environment
Lessons run in a Kali Linux terminal in the browser and in a practice domain (CORP.LAB) set up separately for every lab. Nothing to install.
Frequently asked questions
- Is this course right for my level?
- The course is at level 401; it assumes you know the topics of the lower-level courses.
- Is there anything to install?
- No. Every lesson runs in your own lab environment that opens in the browser.
- How do lessons work?
- Each lesson has 8 to 10 steps and a short quiz. Early steps show the command to type, later steps give less help; if two attempts fail, the solution opens.
- Can I try it for free?
- Yes. The first three lessons of every course are free.