Dockerizing the NetSPI Linux Labs

The final Linux case studies post builds a vulnerable Kali lab server, recreating the Rsync, NFS, phpMyAdmin, and sudo misconfiguration scenarios from the series for safe hands-on practice at home.

Most enterprise data-centers house at least a few web servers that support Java Server Pages (JSP). In this blog, I’ll provide two JSP shell code examples and outline five common upload methods that can be used to get the shells onto vulnerable servers in order to execute arbitrary system commands.

For those of you who aren’t in the loop, BackTrack is a Live Linux distribution that ships with a large number of open source tools that can be used to assess the security of networks, systems, and applications.

Demonstrates that container isolation can be completely compromised via Linux kernel subsystem flaws, providing security researchers with reproducible testbeds to evaluate kernel-level container escape threats.

NetSPI surveyed its 300-plus pentesters to rank twelve must-have offensive security tools, including Burp Suite, NMAP, CrackMapExec, Metasploit, BloodHound and Impacket, with commentary on each.

NetSPI U alumni share their experience breaking into a career in cybersecurity and advice on how to get started as a pentester.