This room exploits an open-source Youtube video download tool using an interesting injection method. It also includes some common linux privilege escalation methods.

In this room, we will cover using Gobuster on a website, using SMBclient and SMBMap to enumerate shares and exploiting a CMS RFI vulnerability as well as wildcard privilege escalation.

In this room, we will cover brute-forcing account credentials, handling public exploits, using the Metasploit framework and privilege escalation on Windows.

In this room, we will give an introduction to shells, what they are, sending and receiving (reverse/bind) shells when exploiting target machines.