BPFDoor - StraitsTelecom Lab

Investigate a two-host Linux intrusion using live triage collections and a network capture: analyse authentication, audit and login records, detect a backdoor that never opens a port, statically analyse a stripped ELF implant, and recover data from an encrypted command-and-control channel.

Category:

Endpoint Forensics

Tactics:

Persistence Privilege Escalation Stealth Credential Access Discovery Lateral Movement Collection Command and Control Exfiltration

Tools:

tshark ausearch utmpdump CyberChef Wireshark Ghidra Strings

medium

1hr 30mins

Sign in to Download Lab Files

Unlock Your Full Learning Experience with CyberRange Labs

Sign up to track your progress, unlock exclusive labs, and showcase your achievements—begin your journey now!