Attack-Defense Online Lab
1800+ Labs!
Lab User - Online Labs
This section contains labs of the Web Application Pentesting course on Pentester Academy. We would highly recommend following the course and then attempting the labs below to better understand the objective of this section.
Lab User - Online Labs
On-Demand Cyber Security Lab
Damn Vulnerable Web Application - Online Labs
You can download DVWA locally and install it in a virtual machine. We are providing an online version to save you the time and pain of having to do that. A sample set of vulnerabilities include: Cross Site Scripting. Command Injection. SQL Injection. File Upload/Inclusion. and many more.
Scheduling: Cron Basics - Online Labs
Cron jobs are used to schedule tasks on the system. Objective: Analyse the scheduled cron jobs on the provided machine and answer the following questions: Is the cron service running?
Cracking MD5Crypt Digests - Online Labs
Crypt is a function to generate salted hashes for storing passwords securely and is widely supported by programming libraries. MD5 crypt is a crypt based on MD5 hash function. An MD5 crypt output for a password is provided in digest.txt file.
Cracking HMAC-SHA1 key - Online Labs
The key used to generate the HMAC-SHA1 is either taken from a key dictionary or by using the key policy. The digest.txt file and the dictionary file "1000000-password-seclists.txt" is present in the user's home directory. Objective: Recover the secret key.
WEP Cracking - Online Labs
Wired Equivalent Privacy (WEP) standard was the first attempt of WiFi Alliance to secure the WiFi traffic. The scheme was found to be vulnerable to attack and it was succeeded by WPA standards.
Cracking MD5 Hashes - Online Labs
The MD5 message-digest algorithm is a popular 128-bit hash function designed by Ronald Rivest in 1991. It was widely used to store hashed passwords and verify the integrity of files/binaries a few years back.
WPA PSK Cracking - Online Labs
This makes it susceptible to dictionary attacks as users might choose a weak passphrase. In this exercise, you will learn how to crack the WPA PSK key of a network assuming you have captured the initial 4 way handshake between the access point and the client.