WHAT IS PROVING GROUNDS?
Offensive Security Proving Grounds (PG) Play and Practice is a modern network for practicing penetration testing skills on exploitable, real-world vectors. With PG Play, students will receive three daily hours of free, dedicated access to the VulnHub community generated Linux machines. A subscription to PG Practice includes all the features of PG Play plus additional Windows and Linux machines developed by OffSec experts with unlimited time on any targets.
SELECT A CONNECTION METHOD
There are two ways to connect to PG machines: in-browser Kali or VPN. By default, PG will connect through Kali. To change your connection to VPN, press the Connect through Kali dropdown and press VPN.
CONNECTING THROUGH KALI
STEP 1: START KALI LINUX AND A PG MACHINE
Select a machine from the list by hovering over the machine name. Machine details will be displayed, along with a play button. Click on the play button or machine name to start.
A new screen will be displayed while Kali Linux and your selected PG machine are loading. Once complete, in-browser Kali Linux will open and your selected machine name, along with the IP address, will be displayed in the upper toolbar.
Use the features in the upper toolbar to access additional actions. Add and edit notes by pressing the Notes button. Press the More button for the following features: Revert, Clipboard, Hints, Walkthrough, Rate difficulty, and Feedback.
STEP 2: COMPLETE A MACHINE
To complete a machine, you will need to find and submit one or two flags (depending on the machine). To submit a flag, select the Flags button in the upper toolbar, and submit the flag in the window.
STEP 3: OPEN A DIFFERENT MACHINE OR RETURN TO CONTROL PANEL
To open a different machine, press the machine name in the upper toolbar. Select your desired machine from the dropdown by hovering over the name and pressing the play button or machine name. To close Kali Linux and return to the control panel, press the X in the upper toolbar.
Note: You can find Kali's default credentials here.
CONNECTING THROUGH VPN
STEP 1: CONNECT TO A VPN
You need a VPN to access all PG machines. Start by downloading and installing your VPN connection pack by clicking the red button CONNECT TO VPN. If the button is grey, please refer back to Step 1.
Once your VPN pack is installed, copy and paste your credentials (username and password) and connect.
STEP 2: START A MACHINE
To access the machines, select the machine icon next to the VPN connection button. This will present the list of machines available for the selected product (PG Play or Practice).
To the right of each machine, you will find a set of commands. Press the start button to start a machine.
Once a machine is started, the IP address will appear next to the machine name, and the start button will change to a stop button. Use the IP address to access the machine.
If you need to revert a machine, use the revert command to the right of the start/ stop button. You can only revert a machine after you have started it.
STEP 3: COMPLETE A MACHINE
To complete a machine, you will need to find and submit one or two flags (depending on the machine). To submit a flag, select the third button in the list of commands, and submit the flag in the pop-up window.
Learn, have fun, and start sharpening your hacking skills today!