Ghost Operative Certificate

2026breachlab.org

Hands-on Linux exploitation and forensics.

About the Certificate

A hands-on certification track delivered as a CTF on live Linux instances. Unlike theoretical exams, the Ghost track requires operating directly within the shell on a real system to identify vulnerabilities, analyze configurations, and escalate privileges. This Foundation track consists of 22 levels that test offensive proficiency and system-level awareness.

Skills Acquired

  • Permission & File Analysis: Practical use of system permissions, SUID file analysis, and /proc structure inspection.
  • Networking & SSH: Service scanning with nmap, network reconnaissance, and secure access management via SSH keys.
  • Data Recovery & System Mechanisms: Utilizing Git history to find leaked data and auditing Cron jobs for potential vulnerabilities.
  • Encoding & Data Manipulation: Working with various encoding formats directly in the terminal (base64, xxd).

Related Links