https://wearethebug.dev/tags/cve-2023-32749/Recent content on WE ARE THE BUGTradecraften-usFri, 21 Jul 2023 00:00:00 +0000https://wearethebug.dev/posts/vl-control/Fri, 21 Jul 2023 00:00:00 +0000https://wearethebug.dev/posts/vl-control/Control is a Hard-rated chains focus on a small multi-host Linux environment that simulates a realistic internal network and endpoint-management infrastructure. The lab contains two primary hosts (os.control.vl and intra.control.vl) and a variety of services (web apps, OSCTRL/osquery, SSH, nginx, Docker) that chain together to a full domain compromise. It focuses on exploiting web applications, abusing management tooling (OSCTRL / osquery), and leveraging operational misconfigurations to move from an initial foothold to full root on multiple hosts.