Deep Drill Packs¶
Where ../drills.md is a quick 15-challenge sampler, these are deep per-domain packs — 8–12 Practical-style challenges each, every one with a full step-by-step solution walkthrough (commands + expected output + the exact answer), progressing from easy to hard. Solve under a timer; expand the solution only when done or stuck.
Setup: the lab running, and the challenge-lab generated (
../challenge-lab/setup-challenges.sh) for the stego/pcap/crypto/hash packs. Recipes:../challenge-playbooks.md.
| Pack | Drills what | Uses |
|---|---|---|
| 01 — Recon & scanning | Fingerprint hosts: OS, versions, FQDN, ports | lab |
| 02 — Enumeration | SMB/SNMP/LDAP/SMTP/NFS, users, shares | lab |
| 03 — Web & SQLi | XSS, LFI, upload→RCE, cmd injection, SQLi | Docker web |
| 04 — Passwords & hashes | Crack every hash type, online + offline | challenge-lab + lab |
| 05 — Active Directory | Kerberoast, AS-REP, RBCD, ADCS, DCSync, PtH | AD lab |
| 06 — PCAP forensics | Extract creds/files/values from captures | challenge-lab + lab |
| 07 — Wireless | Capture + crack WPA2, identify AP details | own AP / sample cap |
| 08 — Stego & crypto | steghide/exif/binwalk, decode/decrypt | challenge-lab |
| 09 — Exploitation & privesc | Get a shell, escalate, loot a file | lab |
How to use¶
- Pick a pack matching a weak area from your skills checklist.
- Timer on. Solve each challenge from the recipes, not the solution.
- Score ✅/⚠️/❌; re-drill anything not ✅ under time.
- When every pack is ✅, take a full simulated exam.