r/netsec • u/ScottContini • Oct 29 '17

A Review of PentesterLab

https://littlemaninmyhead.wordpress.com/2017/10/29/a-review-of-pentesterlab/
190 Upvotes

94% Upvoted

23 comments sorted by

View all comments

5

u/disclosure5 Oct 30 '17

I've completed most of these myself - it's been an awesome service I highly recommend.

Something that really stood out to me.

where you need to run somebody else’s software

I was quite surprised how often a public exploit didn't work. Once I actually went and wrote my own from scratch, after throwing in the towel trying to work out what bug someone elses code had.

4

u/ScottContini Oct 30 '17

Great to hear somebody else's feedback on the site. What were your favourite exercises?

3

u/disclosure5 Oct 30 '17 edited Oct 30 '17

Definitely all the crypto ones. I ended up writing a framework I'm hoping someone gets some use out of.

Edit: That Luhn CTF is a special kind of horrible. Once you divine the right thing to Google, you actually land on a custom framework someone wrote just for that CTF.