Exploiting Vulnerable Web Services

intermediate Hands-on lab 50 min 3 tasksSubscription

Identify outdated middleware and server-side CVEs, then exploit Log4Shell (CVE-2021-44228) via a JNDI lookup to gain remote code execution on a Java web service.

This lab is available with a Purple Edge subscription. Sign in to view the full overview and start the lab.

Part of these paths

Unlock this lab

Launch the lab in your browser. Real Kali, Ubuntu and Windows targets, guided step by step. No setup, no VM downloads.

Updated 2026-06-15