Sinisterly
Hacking-Lab - Printable Version

+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.ly/Forum-Website-Server-Hacking)
+--- Thread: Hacking-Lab (/Thread-Hacking-Lab)

Pages: 1 2 3

Hacking-Lab - kratuspneuma - 12-12-2013

Hi folks,

For case studying and not be bad with anybody, I suggest to you visit this site: http://www.hacking-lab.com/ there is a lot of challenges to solve in a VM.

Stay safe. Cool

RE: Hacking-Lab - Adorapuff - 12-12-2013

Thanks for making your first post hacking related. I'm checking out the lab as you post this.
Welcome to SL

RE: Hacking-Lab - kratuspneuma - 12-12-2013

Adorapuff,

better late than never... Biggrin

I will post some tuts with the basics of XSS and Web Vulns used in some of this challenges.

This site for training the skills is great, in my humble opinion.

Best regards!

RE: Hacking-Lab - Satan - 12-12-2013

(12-12-2013, 04:46 AM)kratuspneuma Wrote: Adorapuff,

better late than never... Biggrin

I will post some tuts with the basics of XSS and Web Vulns used in some of this challenges.

This site for training the skills is great, in my humble opinion.

Best regards!

Don't suppose they have a CSRF challenge, do they?

RE: Hacking-Lab - kratuspneuma - 12-12-2013

Yes Satan,

They do have one and similars: https://www.hacking-lab.com/cases/6115-owasp-2010-a5-x-cross-site-request-forgery-/6115_OWASP_A5_cross-site-request-for-wargame.html?event=245&case=695

Enjoy!!

RE: Hacking-Lab - Adorapuff - 12-12-2013

They servers for their ssh based challenged are down Sad

RE: Hacking-Lab - Satan - 12-12-2013

(12-12-2013, 04:58 AM)kratuspneuma Wrote: Yes Satan,

They do have one and similars: https://www.hacking-lab.com/cases/6115-owasp-2010-a5-x-cross-site-request-forgery-/6115_OWASP_A5_cross-site-request-for-wargame.html?event=245&case=695

Enjoy!!



"You are not authorized to see this page."

:< no bueno.

RE: Hacking-Lab - kratuspneuma - 12-12-2013

Folks,

Sorry, it's my fault, I dont explain correctly to you how use that, you need to register in the site and see what events are open and enter in these. They have a VM name hacking-lab in downloads sector than can be used for solve the challenges but, I prefer kalil. Biggrin

Adorapuff,

For what challenge is down? I can connect under VPN in SSH to solving a challenge.
Ops!!

Is that correct, the SSH is not working... Biggrin
Now it's working with the user and pass: restricted , there is an error in the description of the challenge. Biggrin

RE: Hacking-Lab - Satan - 12-12-2013

(12-12-2013, 05:35 AM)kratuspneuma Wrote: Folks,

Sorry, it's my fault, I dont explain correctly to you how use that, you need to register in the site and see what events are open and enter in these. They have a VM name hacking-lab in downloads sector than can be used for solve the challenges but, I prefer kalil. Biggrin

Adorapuff,

For what challenge is down? I can connect under VPN in SSH to solving a challenge.
Ops!!

Is that correct, the SSH is not working... Biggrin
Now it's working with the user and pass: restricted , there is an error in the description of the challenge. Biggrin

So do they not have a csrf event open then, since the link didn't work?

RE: Hacking-Lab - kratuspneuma - 12-12-2013

(12-12-2013, 07:05 AM)Satan Wrote: So do they not have a csrf event open then, since the link didn't work?

Satan,

You must to register your self in "OWASP Top Ten" in option "Event" after logon on the site:

[Image: wbts.png]

And the the challenges for this event are open to you, see this:

[Image: 6ntx.png]


Any question just tell me... Wink