Aramon Labs
Intentionally vulnerable machines and CTF challenges I build for Aramon, spanning web, forensics, reverse engineering, crypto, OSINT and pwn.
Overview#
Aramon Labs is where learners attack realistic, intentionally vulnerable environments: CTF challenges and full machines across web, forensics, reverse engineering, cryptography, OSINT and pwn.
What I built#
- Vulnerable environments and CTF challenges spanning multiple security domains.
- Multi-machine, black-box labs that simulate a real external engagement.
Architecture#
A representative lab runs as a set of Docker Compose services behind an nginx reverse proxy, exposing ports 9000-9010 (GitLab, support, auth and admin apps, dev / staging / production tiers, logging, monitoring, an internal API and a backup service). The services sit on internal Docker networks that are not directly reachable, so players attack only the exposed edge and pivot inward.