This room exploits an open-source Youtube video download tool using an interesting injection method. It also includes some common linux privilege escalation methods.

You have been contracted by UltraTech. It’s a grey-box kind of assessment. The only information you have is the company's name and their server's IP address.

In this room, we will cover SQLi and how to exploit it both manually and via using SQLMap, cracking hashes, using SSH tunnels and Metasploit.