Operation Thin Partition

HOME LAB · LINUX · difficulty 5 · ~40 min · 18 steps

A doorbell camera reached the hypervisor's management interface. The VLAN was a label, not a wall.

Briefing

One Proxmox host runs the lot: eleven VMs, nine containers, the firewall, the NAS front end and everything the house depends on. The IoT devices live on VLAN 30 — that is what the network diagram says, and the diagram has been right for three years. At 23:40 the web interface logged eleven hundred failed logins and then one that succeeded. The source address was on VLAN 30. If the hypervisor falls, everything inside it falls with it. Work fast, and find out what the word 'isolated' actually meant on this box.

Objectives

Read the management interface's authentication history
Find what the intruder created for themselves
Prove how VLAN 30 reached the management plane
Contain the guest without destroying its memory
Make the separation real, then arm the host firewall

Return to the range lobby

shellDojo

THREAT FEED ▲ lateral movement via wmiexec up 18% ▲ new loader family 'GHOSTPULSE' staging via DLL search-order hijack ▲ prompt injection in support queues now routine ▲ cron persistence campaign targeting exposed SSH ▲ poisoned model weights on public hubs ▲ remember: trust nothing, hash everything ▲

operator@dojo:~$

No operation deployed. Open OPERATIONS and deploy one, or type start <id> at the prompt.

—

SITUATION

OBJECTIVES

CURRENT TASKING

booting range…

—SAFE

PERFORMANCE

ACCURACY—

ELAPSED0:00

VS PAR—

TYPING—

STREAK—

SCORE0

COMMAND BRIEF

Every command you are asked to type gets decoded here — what the binary is, what each flag does, and a hook to make it stick.

—

search ▸ —

Every command this range teaches, decoded. Pick one on the left, or search above.

OPERATOR

RECRUIT 0 XP

CAMPAIGN—

OPS CLEARED0

STEPS0

LIFETIME ACC—

DAY STREAK—

FLAGS—

FLAG WALLET

DEPLOY

ALL OPERATIONS

SHELL

TEXT SIZE 15

GUIDED MODE

Guided shows the next command as a ghost you can type over. Expert hides it — and expert clears earn their own flags.

FOCUS low & steady

SOUND

VOLUME

Steady, generated background beds — no streaming, no files, works offline. Keep it under the level where you notice it.

1–5 switch · esc close · / search manual

shellDojo range · operations · built by gary23w ▾

shellDojo

A blue team combat range. Every host, log, hash and IP address in here is fictional — nothing you type is executed anywhere.

shellDojo — defensive training only. Practising on systems you do not own is a crime. gary23w