New to this? Try a free practice lab — a scripted hacking challenge in your browser, no account needed.
What you'll do
In this lab, students will simulate a social engineering attack by performing actions as both the attacker and the victim to demonstrate how phishing attacks occur and how easily users can be deceived.
Using Cobalt Strike, students will create a listener, host a malicious payload on a web server, and craft a phishing email containing a malicious link that executes a Java payload when clicked.
The objective is to compromise the target system and ultimately escalate privileges to gain administrative access.
