Ask me anything about your lessons or your code.
“What is a port?” · “Why is my code erroring?”
Enumerate, foothold, escalate, submit flags. Every target runs on your own hardware.
A classic beginner VulnHub box. Full recon to root, the honest way.
A beginner VulnHub box that rewards full enumeration and a clean privesc chain.
The buggy Web Application. Over 100 web bugs behind one login.
A beginner VulnHub box built on an outdated CMS. Recon to root, honestly.
The Damn Vulnerable Web Application. A tunable playground for the web basics.
OWASP's deliberately broken web shop. A perfect first target.
The classic first VulnHub box. Old services, honest recon to root.
OWASP's deliberately broken PHP app. Injection all the way to command execution.
A themed VulnHub box with three hidden keys. Web recon to root.
A deliberately vulnerable REST API. Learn how APIs actually get broken.
OWASP's guided, lesson-by-lesson tour of how web apps break.