Junior Penetration Tester

A real engagement is rarely one clever exploit — it is a chain: get a foothold, understand the environment, move laterally on reused trust, and escalate to full control. This path walks that whole loop, from a first web break-in through Linux privilege escalation to a complete boot-to-root. It assumes you have met the individual techniques elsewhere on the Arena and are ready to put them together under pressure.

Learners who have done some web and privesc rooms and want to practise the end-to-end attacker workflow — aspiring junior pentesters and red-teamers.

Comfort with web exploitation basics (see Web Application Pentesting) and Linux privilege escalation (see the privesc rooms), plus an SSH client and scripting. The rooms get harder across the path.