Scenarios and community commands, rated by the people who ran them. No install — pick one and start typing.
2 scenarios
3 scenarios
Wake inside a compromised system and take it back
On-call: bring web-01 back to green
A web host tripped the IDS at 02:14 UTC. You have a read-only investigator shell. Reconstruct the intrusion — initial access, the dropped webshell, the cron persistence — and recover the backdoor's kill-switch to neutralize it. A pure-content scenario: filesystem forensics with the standard shell, gated by real Unix permissions and rule-driven unlocks.
A free-play Ubuntu 22.04 box — explore the filesystem, services and network
Break in, escalate, take root — without tripping the watchdog