Hack the Route Start free Open app Labs / Red Team
Road 9 of 11
Red Team
Network attacks, run to learn how a network falls: mapping it, getting in, standing in the middle, abusing DHCP, and flooding it off the air.
Start this road, freeRecon, brute force & exfiltration
How attackers map a network and find a way in.
- 01 Reconnaissance: mapping a network before you touch it Do network reconnaissance: find which hosts are up and which services they run. Free
- 02 A weak password, guessed See how fast a guessable password falls, and how loud it is in the log. Pro
- 03 DNS exfiltration: smuggling data out through the one port left open See how data leaks out through DNS queries, and how to stop it. Pro
MITM: ARP, DNS & public Wi-Fi
Standing between a device and the network, and the defence.
- 01 ARP spoofing: the machine in the middle Poison ARP caches to sit in the middle; read HTTP; watch HTTPS shut it out. Pro
- 02 How DNS works, and how a lie in DNS hijacks you See how a lie in DNS redirects you, and how HTTPS catches it. Pro
- 03 Hotel Wi-Fi: who is on your path Someone is on your path on a hotel network: HTTP read and rewritten, HTTPS warns. Pro
DHCP attacks: rogue servers & starvation
Abusing DHCP, and the switch features that stop it.
- 01 Rogue DHCP: the server nobody checked Watch a rogue DHCP server hand out a false gateway, then shut it out. Pro
- 02 DHCP starvation: every address taken Watch a pool of addresses get drained, then stop it at the switch. Pro
- 03 Layer 2 security: the switch says no Turn on DHCP snooping, ARP inspection and port security on an access switch. Pro
Denial of service: floods, reflection & spoofing
Floods that knock servers over, and what stops them.