🧪 Lab Challenges
🧠 Cybersecurity Lab Challenges
Below are selected labs I’ve completed on platforms like Hack The Box Academy and TryHackMe. Each includes a summary, tools used, and links to detailed writeups in PDF format.
🐧 Linux Fundamentals
Platform: Hack The Box Academy
Skills: Linux CLI, file permissions, SUID, processes, services
Summary:
Covered essential Linux concepts like navigation, file manipulation, permissions, process handling and privilege escalation techniques in a Linux environment.
🌐 Web Applications
Platform: Hack The Box Academy
Skills: HTTP, Burp Suite, cookies, file uploads, web enumeration
Summary:
Explored how web servers and applications function. Practiced identifying vulnerabilities such as insecure forms, input validation flaws, and file inclusion bugs.
🚀 Attacking Web Applications with FFUF
Platform: Hack The Box / Manual Practice
Skills: Fuzzing, URL parameter discovery, HTTP methods, hidden directories
Summary:
Used the ffuf tool to fuzz parameters, discover hidden routes, and perform extension brute-force to uncover functionality not visible through standard browsing. Identified hidden PHP endpoints and vulnerable behaviors through crafted requests and wordlists.
💉 Fundamentals of SQL Injection
Platform: Hack The Box Academy
Skills: SQL syntax, login bypass, UNION-based injection, database enumeration
Summary:
Learned to exploit vulnerable input fields by injecting malicious SQL queries. Practiced techniques such as authentication bypass, error-based injection, and extracting data using UNION SELECT. Also explored how parameterized queries can mitigate these vulnerabilities.
🔍 Passive Recon
Platform: Try Hack Me
Skills: WHOIS, Shodan, DNSDumpster, dig, nslookup
Summary:
Used passive techniques to gather intelligence about a target before active engagement, without triggering detection systems.
🛰️ Nmap Introduction
Platform: Hack The Box Academy
Skills: Port scanning, service detection, OS fingerprinting
Summary:
Learned the foundations of nmap—including scanning techniques, banner grabbing, timing options and script scanning for enumerating target systems.
🌐 Network Fundamentals
Platform: Hack The Box Academy
Skills: OSI Model, IP addressing, routing, DNS, ARP, DHCP
Summary:
Introduced to computer networks: how data travels, network layers, core protocols and tools to inspect or troubleshoot network communication.