λGreyHat Labs
certification-grade ctf · by theosec

Read the source.
Script the exploit.
Own the box.

Grey Hat Labs builds machines that mirror the shape of industry certification labs and exams — the same vulnerabilities, methodology and pressure — without copying official content or breaking course integrity.

5 tiers/unauth → RCE/manual exploit review
exploit.py — python3tty/1
λ
the loop

From download to first blood

01

Deploy

Import the VirtualBox VM and boot it locally. An in-browser editor comes wired for debugging the source.

$ vagrant up
02

Exploit

Read the code, find the chain, and script it end to end — unauthenticated to remote code execution.

$ ./exploit.py TARGET
03

Capture

Land the shell and grab local.txt and proof.txt on your own box, exactly like the exam.

$ cat proof.txt
04

Submit

Send your working exploit and usage notes. We verify every one by hand before it counts.

$ git push origin pwn
difficulty

Five tiers, one path

Every machine belongs to a tier. Clear one from each to prove you can hold the whole spectrum — from a gentle warm-up to a chain that will test everything you know.

01super easy
02easy
03medium
04hard
05insane
ready?

The exam rewards one thing: a working exploit. Go build one.