challenges
115 TopicsHelp Request – Infrastructure Hacking: Demonstrate Your Skills – Attacking UnrealIRC
Hi Everyone, I’m currently working on the Infrastructure Hacking: Demonstrate Your Skills – Attacking UnrealIRC lab and have been stuck on Target 2. The target is running an SMTP server that is vulnerable to remote code execution. After identifying the software and version, I attempted to develop and execute an exploit to retrieve the token located in /root/token.txt. I also noted the hint that ncat is installed on the target. I have tried multiple approaches, including the exploit script shared below, but I have not been successful in obtaining a shell or retrieving the token. Despite several troubleshooting attempts, I’m unable to progress further. Has anyone completed this lab successfully? If so, I would greatly appreciate any guidance, hints, or suggestions that could help me understand what I might be missing. The target server has ncat installed. can someone complete this lab, can please help me Thank you in advance for your help and support! Regards, Prashanth N.2Views0likes1CommentAI Red Teaming: Lateral Movement and Privilege Escalation – Demonstrate Your Skills
Yes, this is a Demonstrate Your Skills Lab. I extracted the SSH key, but I am not able to find the IP address of the Postgres server. OrchidDB AI Chatbot did not tell me, even in maintenance mode, I ran a lot of Nmap -p 22, but no server is accepting the key. e.g., 10.102.105.91 Permission denied (publickey,password,keyboard-interactive)31Views0likes1CommentRansomware: TeslaCrypt - Stuck at Last Question
Has anyone figured out the final question of the Ransomware: TeslaCrypt lab? "What is the domain of the first DNS request made after executing the malware?" No correct answers via Ghidra No answers via ProcMon (suggested in the briefing) I checked the activity in x32dbg - nothing Any ideas? Is the lab broken? As always I might be looking too far...27Views0likes1CommentAre you heading to InfoSec Europe 2026?
We’re looking for the true Cyber Masters in the crowd. Think you have what it takes? 👀 Ahead of InfoSec this year, we’re giving you the chance to complete 5 immersive lab, whether you currently have access to labs or not, and earn your Cyber Master badges. What you need to do: ✔ Complete any of the five labs 🏅 Earn your Cyber Master badges 📍 Visit our InfoSec booth at F26 to collect your physical pins ★ Complete all five to unlock the coveted BLACK STAR 🎮 Enter our on-site prize draw for the chance to win a Nintendo Switch 2 Haven’t secured your InfoSec ticket yet? We’ve got you covered. Fill out the form here to claim your complimentary ticket. The challenge is open now and closes at 12pm on Thursday 4 June. ★ Click here to start the challenge! ★ Not attending InfoSec? No problem - you can still take part in the challenge and test your skills from anywhere. Good luck and see you there!74Views2likes2CommentsWant to design a CTF lab to share? 🤩🖥️
For this year's Community Challenge Series of labs, we want to see what you can make! Our Lab Builder allows users to build custom labs with the help of ai tooling. We'll give some guidance on creating the lab, then you build it, we assess it and add it to the Challenge Series 2026. If you're interested, drop a comment below or email [email protected] 💡👇 Here are tutorials on how to build your first practical lab: Building Your First Practical Lab (Part 1) | Immersive Community - 2505 Building Your First Practical Lab (Part 2) | Immersive Community - 2506252Views2likes0CommentsHelp with Cross Site Request Forgery (Twooter)
Hi folks, I'm having a hard time getting past the Cross Site Request Forgery lab - specifically I'm not sure what sort of payload I can use to obtain the username of the scraper. I can get their IP address using just a link and I've tried a range of scripts hosted on my machine which I then link to in my 'twoots' but there's no connection at all. I'd be really grateful for any direction as to the sort of payload that could capture the necessary information. Thanks, JonathanSolved359Views0likes5CommentsNetcat: Advanced Features last question (9)
I'm supposed to do a reverse bind using an netcat website. it hangs and the client and there is no feedback on the netcat website that the listener is working. i don't need the course i was taking it this one for fun, but fun it hasn't been.104Views0likes2CommentsCreate Teams for Students and assign tasks to be completed
Dear community, being a professor at a university, I'm trying to create a group where i can invite students in order to complete the tasks of a laboratory that are important to the subject we are learning. I have had the experience on the past but as I see a lot has changed and I cant find how to do that now. Can someone guide me through process please?57Views0likes1Comment