germarr93/cybersecurity-pentest-labCVE-2004-2687 (Distcc 3.2.1) exploitation, methodology & remediation — Metasploitable2 lab
Personal penetration testing lab notes — hands-on exploitation, post-exploitation, and remediation write-ups against intentionally vulnerable machines (Metasploitable 2, DockerLabs), done in isolated local environments as part of ongoing cybersecurity training.
Educational/academic exercises only. All targets are private, isolated lab machines (RFC1918 addresses or local Docker containers), never production systems.
| Lab | Vulnerability | CVE | Severity | Status |
|---|---|---|---|---|
| Distcc 3.2.1 RCE | Unauthenticated remote code execution | CVE-2004-2687 | Critical | ✅ Complete, with screenshots |
| SQLi Login Bypass + Privesc | SQL injection → auth bypass → SUID privesc to root | — | Critical | ✅ Complete, with screenshots |
| Who I Am — WordPress Privilege Escalation | Exposed backup → admin creds → malicious plugin upload → chained sudo privesc to root | — | Critical | ✅ Complete, with screenshots |
| vsftpd 2.3.4 Backdoor | Backdoored FTP daemon → root shell | CVE-2011-2523 | Critical (CVSS 10.0) | ✅ Complete, no screenshots |
Each lab folder contains a full write-up (scope, methodology, evidence, impact, and remediation) and its own screenshots/ folder.
I work in cybersecurity and IT platform support — 4+ years in L2/L3 production support and incident management (Azure, Linux, ServiceNow, REST APIs), and currently building offensive security skills through hands-on penetration testing training.
This repository is where I document that practice: full exploitation chains against intentionally vulnerable machines, written up the way I'd report a real finding — root cause, evidence, impact, and remediation.
