Linux+ labs
Every hands-on lab that maps to the CompTIA Linux+ (XK0-005) certification. This is the full lab package for that certification.
Certification: CompTIA › Linux+ XK0-005 clear · browse all certifications
3 labs
Intermediate
Detection Engineering & Incident Response: CVE-2025-32463
Respond to a sudo --chroot local-privilege-escalation compromise (CVE-2025-32463). Reconstruct the timeline from the sudo auth and activity logs, see how --chroot loaded an attacker nsswitch.conf as root, find the SUID-root backdoor persistence, engineer a detection rule for the chroot option, then contain, eradicate, upgrade, verify and report.
Intermediate
Detection Engineering & Incident Response: CVE-2026-31431
Respond to a local privilege-escalation compromise on a shared Linux host (CVE-2026-31431). Reconstruct the timeline from auth and audit logs, find the attacker's sudoers persistence, engineer and tune a behavioral detection rule, then contain, eradicate, patch, verify and report.
Intermediate
Detection Engineering & Incident Response: CVE-2026-43284 & CVE-2026-43500
Respond to a local privilege-escalation compromise on a host exposed to two related kernel bugs (CVE-2026-43284 and CVE-2026-43500). Reconstruct the timeline, find the attacker's persistence, engineer one detection rule covering both vulnerable subsystems, then contain, eradicate, patch both with one update, verify and report.