labs
05 — Linux intermediate labs
ANG Medium shortlist + agentctl pass. Check VIP+/free rotation before class.
Tier A — Easy stretch
| Order | Machine | Focus |
|---|---|---|
| 1 | Wifinetic / Broker / Antique | Service enum → Linux privesc |
| 2 | Squashed / Blocky / Haystack | NFS / artifact creds / Elastic-ish |
Tier B — Medium core
| Order | Machine | Diff | Primary objective |
|---|---|---|---|
| 3 | SolidState | Medium | Mail foothold → insecure root-run script / shell escape |
| 4 | Shibboleth | Medium | IPMI → Zabbix → privileged DB/exec chain |
| 5 | Dynstr or Carrier | Medium | Wildcard/script abuse or SNMP/infra (pick one) |
| Stretch | WifineticTwo | Medium | Wireless pivot from Linux host — networking interest only |
Per-box checklist
- Primary objective written before spawn
- Which AI (3 / 4 / 5) matched the win?
- One detection note
- Cleanup listeners / tools / modified files
Skip until operator
Blind kernel roulette; container escape as first Medium goal; full C2 on every box.