Skip to main content

October-2023 Updates - New Exclusive & Training Machines

Diablo avatar
Written by Diablo
Updated over 10 months ago

We’ve introduced three new exclusive and five training machines to Dedicated Labs and one exclusive challenge.


NEW EXCLUSIVE MACHINES

Looney

Difficulty

Very Easy - Penetration Tester Level 1

Areas of Interest

Systems & Privilege Escalation

Technologies

Ubuntu, Gnu C library

Languages

Python, C

Skills

CVE Exploitation

CVSS Score

7.8 (High)

Influence

Difficulty

Very Easy - Penetration Tester Level 2

Areas of Interest

Web Applications, Authentication & Authorization

Technologies

Atlassian Confluence

Languages

Python

Skills

CVE Exploitation

CVSS Score

10 (Critical)

Cued

Difficulty

Easy - Penetration Testing Level 1

Areas of Interest

Systems & Networking

Technologies

Libcue, GNOME Desktop, LinkStack

Languages

Bash

Skills

CVE Exploitation

CVSS Score

8.8 (High)


EXCLUSIVE CHALLENGES

Nooto (Artificial Intelligence):

Difficulty

Medium - Penetration Testing Level 2

Areas of Interest

Artificial Intelligence & Machine Learning

Technologies

OpenAI, Jupyter Notebook

Languages

Python

Skills

Prompt Injection


NEW TRAINING MACHINES

The retired community machines from 20th September to 20th October are detailed below.

  • Snoopy

    • A Hard Difficulty Linux machine that involves the exploitation of an LFI vulnerability to extract the configuration secret of Bind9.

  • Format

    • A medium-difficulty Linux machine that highlights security problems caused by how a solution is structured.

  • PC

    • An Easy Difficulty Linux machine that features a gRPC endpoint that is vulnerable to SQL Injection.

  • Intentions

    • A hard Linux machine that starts off with an image gallery website, which is prone to a second-order SQL injection leading to the discovery of BCrypt hashes.

  • Aero

    • A medium-difficulty Windows machine featuring two recent CVEs: CVE-2023-38146, affecting Windows 11 themes, and CVE-2023-28252, targeting the Common Log File System (CLFS).


Looking for more content, features, or a place to leave feedback?

Book your spot for a 15-minute call where we can discuss how to level up your training!

Did this answer your question?