GlassHeap - PHP2Shell 1

GlassHeap - PHP2Shell 1 is a blue team lab that falls under the Network Forensics category and will cover the following subjects: tshark, PowerShell, Notepad++, Wireshark, Reconnaissance, Resource Development, Initial Access, Command and Control.

Learning Objectives

Determine how the attacker exploited the web server by analyzing IDS alerts, network flow logs, and web server access logs. Identify the CVE exploited, the multi-phase attack methodology, and the post-exploitation infrastructure - distinguishing attacker activity from incident response artifacts.

Categories: Network Forensics.

MITRE ATT&CK Tactics: Reconnaissance, Resource Development, Initial Access, Command and Control.

Tools: tshark, PowerShell, Notepad++, Wireshark.

Difficulty: easy.