Junior Penetration Tester
Chain a web foothold into a lateral move and a root shell — the full offensive loop.
- Estimated time
- 2 hours
- Rooms
- 3 rooms
- Points
- 825 pts
- Enrolled
- Be the first to enroll
About this path
A real engagement is rarely one clever exploit — it is a chain: get a foothold, understand the environment, move laterally on reused trust, and escalate to full control. This path walks that whole loop, from a first web break-in through Linux privilege escalation to a complete boot-to-root. It assumes you have met the individual techniques elsewhere on the Arena and are ready to put them together under pressure.
Who should start here
Learners who have done some web and privesc rooms and want to practise the end-to-end attacker workflow — aspiring junior pentesters and red-teamers.
Prerequisites
Comfort with web exploitation basics (see Web Application Pentesting) and Linux privilege escalation (see the privesc rooms), plus an SSH client and scripting. The rooms get harder across the path.
What you will be able to do
- Gain an initial foothold through a web vulnerability
- Enumerate a compromised host and loot credentials
- Move laterally using reused credentials
- Escalate to root and complete a boot-to-root
- Operate the full foothold → lateral → privesc chain end to end
Curriculum
Module 1 — Foothold0 of 1 rooms complete
Break in through the web.
Module 2 — Escalate0 of 1 rooms complete
Turn a login into root.
Module 3 — Boot to root0 of 1 rooms complete
The whole chain, one box.