CTF series: expert
In a hint-free, multi-machine, realistic corporate network you find the attack path, then apply the defence plan that closes it.
Level 501 · 15 lessons · 0 practice labs
Lessons
Recon and initial access
- Reading the scope document and fixing the rules
- Finding the weak link on the external surface
- Combining two small web bugs
- Recording the traces initial access leaves
- Short task: write two controls that would block the initial access
Internal network and domain
- Mapping the internal network
- Tracing a reused password
- A delegation misconfiguration
- A risky certificate template
- Short task: match each step of the domain path to an event ID
Objective and defence
- The final flag on the crown-jewel server
- Finding which step raised no alert
- Closing the findings with lasting fixes
- Re-running the same path after the fixes
- Capstone: the full attack path, detection gaps and a defence report
About this course
In a hint-free, multi-machine, realistic corporate network you find the attack path, then apply the defence plan that closes it.
What you will learn
- Recon and initial access
- Internal network and domain
- Objective and defence
Prerequisites
You should be experienced in the topics of the same path up to level 401.
Lab environment
Lessons run in a Kali Linux terminal in the browser and in a practice domain (CORP.LAB) set up separately for every lab. Nothing to install.
Frequently asked questions
- Is this course right for my level?
- The course is at level 501; it assumes you know the topics of the lower-level courses.
- Is there anything to install?
- No. Every lesson runs in your own lab environment that opens in the browser.
- How do lessons work?
- Each lesson has 8 to 10 steps and a short quiz. Early steps show the command to type, later steps give less help; if two attempts fail, the solution opens.
- Can I try it for free?
- Yes. The first three lessons of every course are free.