E
Endlessus Academy Practical Labs
school Academy / Practice / Practical Security Labs
arrow_back Back to Curriculum
school PRACTICAL LEARNING ROOMS • GUIDED ENVIRONMENT

Hands-On Learning Rooms

One room equals one complete learning experience. Every room pairs progressive theory with isolated sandbox execution, step-by-step tasks, intelligent mentor hints, and production defense engineering.

explore Recommended Starting Points (No Choice Paralysis)
SELECT YOUR GOAL
BEGINNER arrow_forward
01. HTTP Headers

Start here if you want to understand how web browsers enforce security boundaries.

WEB SECURITY arrow_forward
05. SQL Injection

Learn SQL injection from error probing to UNION exploitation and prepared statements.

SYSTEM ADMIN arrow_forward
02. Linux Permissions

Master POSIX permissions, calculate octal masks, and fix dangerous 777 configs.

OFFENSIVE arrow_forward
08. Network & SMB

Run stealth Nmap scans, grab service banners, and enumerate anonymous shares.

Tier:
Category:

folder_open I. FOUNDATIONS

Computer systems, operating system permissions, and authentication primitives

3 Rooms
ROOM 01 • FOUNDATIONS Beginner

HTTP Security Headers Hardening

Learn how HTTP security headers protect browsers from common web attacks and how to identify and remediate missing security controls.

schedule ~20 mins checklist 5 Tasks
Prereqs: HTTP basics, curl
NOT SOLVED
ROOM 02 • FOUNDATIONS Beginner

Linux Permissions & Octal Masking

Understand how Linux file attributes protect system assets, identify dangerous world-writable files, and enforce the principle of least privilege.

schedule ~20 mins checklist 5 Tasks
Prereqs: Linux CLI, terminal navigation
NOT SOLVED
ROOM 03 • FOUNDATIONS Beginner

Authentication & Rate Limiting Bypass

Investigate unthrottled authentication endpoints, detect lack of account lockout controls, and implement token-bucket rate limiting.

schedule ~20 mins checklist 5 Tasks
Prereqs: HTTP POST, status codes
NOT SOLVED

folder_open II. WEB SECURITY

OWASP Top 10 web application vulnerabilities and client/server exploitation

4 Rooms
ROOM 04 • WEB SECURITY Intermediate

Insecure Direct Object Reference (IDOR)

Expose vulnerabilities where applications trust user-supplied identifiers without verifying server-side session ownership.

schedule ~25 mins checklist 4 Tasks
Prereqs: REST APIs, JSON, AuthZ
NOT SOLVED
ROOM 05 • WEB SECURITY Intermediate

UNION-Based SQL Injection

Learn how unsanitized input breaks SQL syntax boundaries, extract sensitive database schema tables, and deploy parameterized prepared statements.

schedule ~25 mins checklist 5 Tasks
Prereqs: HTTP basics, basic SQL
NOT SOLVED
ROOM 06 • WEB SECURITY Intermediate

Reflected XSS & Context Escaping

Trace how untrusted user input renders in DOM attributes, bypass simplistic tag filters using event handlers, and apply context-aware encoding.

schedule ~20 mins checklist 4 Tasks
Prereqs: HTML, JavaScript basics, DOM
NOT SOLVED
ROOM 07 • WEB SECURITY Intermediate

Cross-Site Request Forgery (CSRF) & SameSite

Analyze how browsers automatically send session cookies on cross-origin requests and deploy anti-CSRF synchronizer tokens and SameSite cookies.

schedule ~25 mins checklist 4 Tasks
Prereqs: Cookies, forms, Same-Origin Policy
NOT SOLVED

folder_open III. NETWORK & SYSTEM

Network service discovery, SMB enumeration, blue team log forensics, and privilege escalation

3 Rooms
ROOM 08 • NETWORK & SYSTEM Intermediate

Network Service & SMB Enumeration

Master port discovery using Nmap SYN scans, identify service versions and vulnerabilities, and inspect misconfigured SMB file shares.

schedule ~25 mins checklist 5 Tasks
Prereqs: TCP 3-way handshake, ports, CIDR
NOT SOLVED
ROOM 09 • NETWORK & SYSTEM Beginner

Security Incident Log Analysis

Act as a SOC analyst examining Linux authentication logs and web access logs to identify attacker IPs, attack timelines, and compromised accounts.

schedule ~20 mins checklist 5 Tasks
Prereqs: Linux log files, grep, regex basics
NOT SOLVED
ROOM 10 • NETWORK & SYSTEM Intermediate

SUID Privilege Escalation

Understand how the SetUID permission bit elevates execution privileges to root and leverage GTFOBins techniques to escape restricted shells.

schedule ~25 mins checklist 5 Tasks
Prereqs: Linux file permissions, EUID vs RUID
NOT SOLVED

folder_open IV. ADVANCED APPLICATION SECURITY

Modern cryptographic tokens, stateless authentication, and cipher analysis

2 Rooms
ROOM 11 • ADVANCED APPLICATION SECURITY Advanced

JWT 'None' Algorithm Exploitation

Deconstruct JSON Web Tokens into Header, Payload, and Signature, exploit insecure cryptographic validation, and elevate privileges to administrator.

schedule ~30 mins checklist 5 Tasks
Prereqs: Base64URL, JWT anatomy, HMAC
NOT SOLVED
ROOM 12 • ADVANCED APPLICATION SECURITY Beginner

XOR & Frequency Analysis Decryption

Analyze intercepted ciphertext, calculate English character frequency distributions, recover the single-byte key, and understand modern authenticated ciphers.

schedule ~20 mins checklist 5 Tasks
Prereqs: Plaintext vs ciphertext, XOR arithmetic
NOT SOLVED
ROOM 13 • JUNIOR PENTESTER CAPSTONE Advanced

Capstone Pentest: Final Enterprise Target

Execute a complete multi-stage penetration test against enterprise host 10.10.10.100. Reconnaissance, SQLi bypass, SSH initial access, SUID privilege escalation, and executive reporting.

schedule ~60 mins checklist 6 Tasks
Prereqs: Nmap, Curl, SQLi, SUID, Linux CLI
NOT SOLVED