labs
04 — Linux beginner labs
Prefer Very Easy → Easy. Free HTB rotation changes; VIP+ unlocks retired set.
Tier A — Starting Point (service fundamentals)
| Order | Machine | Focus |
|---|---|---|
| 1 | Meow | Auth / telnet comfort |
| 2 | Fawn | FTP anonymous |
| 3 | Redeemer | Redis |
| 4 | Sequel | MySQL client enum (not web SQLi) |
Tier B — Easy foothold → root (core class)
| Order | Machine | Focus |
|---|---|---|
| 5 | Lame | Samba / classic Easy |
| 6 | Irked | Non-web service + Linux privesc |
| 7 | Nibbles / Bashed / Vaccine | Common Easy web→shell→privesc (pick what is available) |
Optional stretch (still Easy-ish)
Shocker, BoardLight — only after Tier B feels easy.
Skip early
Kernel exploit chains, container escapes, persistence catalogs, “finish with Metasploit.”
Per-box checklist
- What service gave the foothold?
- Which enum phase found the privesc hint?
- One sentence: why was that misconfiguration root-worthy?