Laboratory Enviroment: Walking Dead from dockerlabs.es

Penetration tester: Komronbek Jumanazarov

Given the Target ip: 172.0.0.2

Date: May 12, 2026

Methodology: PTES / OWASP / Manual

1. Executive Summary

The main purpose: To identify “Walking Dead” machine’s vulnerabilities and get to reach full compromise through them.

The main result: The lab’s machine was fully compromised through a three-stage privilege escalation chain: www-data ⇒ rick ⇒ root. All attack steps were thoroughly documented

Risk assessment:Critic

Any types of person can repeat this steps to do themselves and will be root at the end.

1. Scope

• 22/tcp ⇒ SSH (status:open)
• 80/tcp ⇒ HTTP (status:open)

1. Toolset

• nmap ⇒ to scan availability ports and services
• feroxbuster ⇒ brute-force directory
• rlwrap nc ⇒ to connect reverse shell
• python3.8 SUID ⇒ privilege escalation