This room is a blue team forensics challenge: no exploitation, no privilege escalation. You’re handed a compromised machine and asked to reconstruct what happened. The attack vector turns out to be...

An intruder has infiltrated the network and targeted the NFS server where backup files are stored. A classified secret was accessed and stolen. The only evidence left behind is a packet capture (PC...

This room introduces Insecure Direct Object Reference (IDOR) — a vulnerability that occurs when an application exposes internal object references (like database IDs) directly to the user without pr...