Labs, CTFs and course modules
One challenge, one lesson. Click an entry to read it. Each is labelled guided, reproduced, adapted or independent.
Following a Failed Logon Through a SIEM
Wazuh lab write-up: a local failed-logon triage (AUTH-001) and a real remote brute-force attack from Kali caught and investigated (AUTH-002).
Local File Inclusion — Learning the Request-to-File Path
A study writeup from Hack The Box Academy focused on understanding how application input can influence file access.
flAWS: Six Levels of AWS Misconfiguration
Six flaws.cloud levels: public S3 listing, over-broad bucket permissions, secrets in git history, a public EBS snapshot, SSRF to the EC2 metadata service, and over-permissive IAM read access.