Network Services
Service enumeration drills that teach the workflow: discover access, walk useful data, and prove impact.
Enumeration is the unglamorous skill that quietly decides engagements: the loot is usually already exposed, waiting for someone methodical enough to walk the service and read it. SNMP community strings, exposed shares, and chatty network daemons all give up information if you know how to ask.
These drills run against isolated simulated services and reward a repeatable workflow — discover access, enumerate thoroughly, and prove impact — rather than a single lucky command. Each rep shifts the details so the method, not the answer, is what sticks.
SNMP Community Strings
A valid community string is only the first step. Walk the tree and identify the OID that proves impact.
easySMB Share Enumeration and Loot
SMB Share Enumeration and Loot distilled into repeatable single-technique reps on isolated targets.
easyFTP Anonymous Enumeration
FTP Anonymous Enumeration distilled into repeatable single-technique reps on isolated targets.
easyDNS Zone Transfer
DNS Zone Transfer distilled into repeatable single-technique reps on isolated targets.
easySMTP VRFY Enumeration
SMTP VRFY Enumeration distilled into repeatable single-technique reps on isolated targets.
easyIMAP and POP3 Mailbox Loot
IMAP and POP3 Mailbox Loot distilled into repeatable single-technique reps on isolated targets.
easyMySQL Schema Enumeration
MySQL Schema Enumeration distilled into repeatable single-technique reps on isolated targets.
mediumMSSQL xp_cmdshell Abuse
MSSQL xp_cmdshell Abuse distilled into repeatable single-technique reps on isolated targets.
mediumRPC Endpoint Enumeration
RPC Endpoint Enumeration distilled into repeatable single-technique reps on isolated targets.
easyRedis Unauthenticated Loot
Redis Unauthenticated Loot distilled into repeatable single-technique reps on isolated targets.
easyLinux Remote Management Misconfiguration
Linux Remote Management Misconfiguration distilled into repeatable single-technique reps on isolated targets.
mediumNmap-Style Service Footprinting
Nmap-Style Service Footprinting distilled into repeatable single-technique reps on isolated targets.
easyService Login Brute Force Target
Service Login Brute Force Target distilled into repeatable single-technique reps on isolated targets.
easyPublic Exploit Version Matching
Public Exploit Version Matching distilled into repeatable single-technique reps on isolated targets.
easyStaged HTTP File Transfer
Staged HTTP File Transfer distilled into repeatable single-technique reps on isolated targets.
easySMB Collaborator File Transfer
SMB Collaborator File Transfer distilled into repeatable single-technique reps on isolated targets.
mediumLocal Bind Shell
Local Bind Shell distilled into repeatable single-technique reps on isolated targets.
mediumShell Upgrade and Stabilization
Shell Upgrade and Stabilization distilled into repeatable single-technique reps on isolated targets.
easyLinux Payload Generation Workflow
Linux Payload Generation Workflow distilled into repeatable single-technique reps on isolated targets.
mediumMetasploit-Style Module Workflow
Metasploit-Style Module Workflow distilled into repeatable single-technique reps on isolated targets.
easyStart drilling network services
Free to start — live isolated targets, a fresh variant every rep.