[kratuspneuma]

Hi folks,

For case studying and not be bad with anybody, I suggest to you visit this site: http://www.hacking-lab.com/ there is a lot of challenges to solve in a VM.

Stay safe.

[Adorapuff]

Thanks for making your first post hacking related. I'm checking out the lab as you post this.
Welcome to SL

[kratuspneuma]

Adorapuff,

better late than never...

I will post some tuts with the basics of XSS and Web Vulns used in some of this challenges.

This site for training the skills is great, in my humble opinion.

Best regards!

[Satan]

Adorapuff,

better late than never...

I will post some tuts with the basics of XSS and Web Vulns used in some of this challenges.

This site for training the skills is great, in my humble opinion.

Best regards!

Don't suppose they have a CSRF challenge, do they?

[kratuspneuma]

Yes Satan,

They do have one and similars: https://www.hacking-lab.com/cases/6115-o...5&case=695

Enjoy!!

[Adorapuff]

They servers for their ssh based challenged are down

[Satan]

Yes Satan,

They do have one and similars: https://www.hacking-lab.com/cases/6115-o...5&case=695

Enjoy!!

"You are not authorized to see this page."

:< no bueno.

[kratuspneuma]

Folks,

Sorry, it's my fault, I dont explain correctly to you how use that, you need to register in the site and see what events are open and enter in these. They have a VM name hacking-lab in downloads sector than can be used for solve the challenges but, I prefer kalil.

Adorapuff,

For what challenge is down? I can connect under VPN in SSH to solving a challenge.

---

Ops!!

Is that correct, the SSH is not working...

---

Now it's working with the user and pass: restricted , there is an error in the description of the challenge.

[Satan]

Folks,

Sorry, it's my fault, I dont explain correctly to you how use that, you need to register in the site and see what events are open and enter in these. They have a VM name hacking-lab in downloads sector than can be used for solve the challenges but, I prefer kalil.

Adorapuff,

For what challenge is down? I can connect under VPN in SSH to solving a challenge.

---

Ops!!

Is that correct, the SSH is not working...

---

Now it's working with the user and pass: restricted , there is an error in the description of the challenge.

So do they not have a csrf event open then, since the link didn't work?

[kratuspneuma]

So do they not have a csrf event open then, since the link didn't work?

Satan,

You must to register your self in "OWASP Top Ten" in option "Event" after logon on the site:



And the the challenges for this event are open to you, see this:




Any question just tell me...