Skip to content
Pluralsight Logo
  • Pluralsight
  • Skills
  • Flow
  • Blog
    • Sign in to

      Sign in to Pluralsight Skills
    • Sign in to

      Sign in to Pluralsight Flow
Logo for Pluralsight Skills
Pluralsight Logo
  • Sign in
  • Menu
  • Sign in to Pluralsight Skills

    Sign in to Skills

  • Sign in to Pluralsight Flow

    Sign in to Flow

  • Pluralsight
  • Skills
  • Flow
  • Blog
  • Why Skills?
    • Ways to upskill
    • Icon for Courses Courses
    • Icon for Skills assessments Skill assessments
    • Icon for Labs Labs
    • Icon for Hands-on learning Hands-on learning
    • Icon for Certification prep Certification prep
    • See our entire course library
    • Skills for
    • Icon for Software development Software development
    • Icon for IT ops IT Ops
    • Icon for Info & cyber security Info & cybersecurity
    • Icon for Cloud computing Cloud computing
    • Icon for Machine learning Machine learning
    • Icon for Data professional Data professional
    • For individuals
    • Top trending paths
    • Microsoft Azure Deployment
      Microsoft Azure
    • Cleaning Data with R
      Cleaning data with R
    • Ruby Language Fundamentals
      Ruby Language Fundamentals
    • AWS Operations
      AWS Operations
    • Core Python
      Core Python
  • View plans
  • For individuals
  • Contact Sales
  • Try for free

Contact Sales

1020 Redirect Link
Thank you!
Our team will be in touch shortly.

Loading form...

If this message remains, it may be due to cookies being disabled or to an ad blocker.

Close button
✖
Pluralsight Skills
Pluralsight Skills

50% off

50% off

Annual Standard and Premium plans

Annual Standard and Premium plans

For a limited time

For a limited time

Save now
Save now
Pluralsight Skills
Pluralsight Skills

50% off

50% off

Annual Standard and Premium plans

Annual Standard and Premium plans

For a limited time

For a limited time

Save now
Save now
pluralsight skills logo

50% off

Annual Standard and Premium plans

For a limited time

Save now
✖
Pluralsight Skills
Pluralsight Skills

50% off

50% off

Annual Standard and Premium plans

Annual Standard and Premium plans

For a limited time

For a limited time

Save now
Save now
Pluralsight Skills
Pluralsight Skills

50% off

50% off

Annual Standard and Premium plans

Annual Standard and Premium plans

For a limited time

For a limited time

Save now
Save now
pluralsight skills logo

50% off

Annual Standard and Premium plans

For a limited time

Save now
×
AWS Labs
Labs badge iconLAB

CVE-2022-26134 Confluence: Emulation and Detection

In this lab, you’ll practice verifying vulnerabilities and implementing protective security controls. When you’re finished with this lab, you’ll have a basic understanding of protecting Confluence servers against CVE-2022-26134.

* Our Labs are Available for Enterprise and Professional plans only.
Terms and conditions apply.
Contact sales
Labs - CVE-2022-26134 Confluence: Emulation and Detection

Lab info

Level
Beginner
Duration
50m
Released
Jan 12, 2023

Lab author

Lab Author: Krysta Coble
Krysta Coble
Krysta Coble is a new Pluralsight author focusing on red teaming, penetration testing, and hacking all the things. She graduated from Rochester Institute of Technology in Rochester, NY with a Bachelor’s in Information Security and Forensics and Master’s degree in Information Assurance and Computing Security. Krysta has worked for several government and military entities to include, the Department of Defense, Department of Justice, and Department of Homeland Security. She was a founding board mem... moreber of the non-profit Women’s Society of Cyberjutsu and is passionate about cultivating creative communities for women and girls to learn and thrive. She is currently a cyber warfare officer in the Air National Guard 166th Cyberspace Operations Squadron and the global red team talent development lead for a large financial firm. When Krysta is not building or playing in Capture the Flag events, she can be found spending time with family and friends.
  • Table of contents
  • What's a lab?
  • Prerequisites
Challenge

Getting Started in the Lab Environment

Here are the initial instructions and explanation of the lab environment. Read this while your environment is busy creating itself from nothing. Yes, this violates physics; we know. How fun!

Challenge

Setup: Configure A Test Confluence Server

You will finalize the configuration of a test Confluence Server to validate exploitation of the CVE-2022-26134 vulnerability.

Challenge

Emulation: Verify Confluence Server Vulnerability to CVE-2022-26134

In this challenge, you'll review the bug bounty hunter’s report verifying legitimacy and existence of the critical vulnerability. You’ll learn how to identify an Object-Graph Navigation Language (OGNL) injection and use the attack technique to gain access to the host operating system.

Challenge

Detection: Find Indicators of Attempted CVE-2022-26134 Exploitation

In this challenge, you’ll review the Confluence server application logs and packet capture to understand what (if any) indicators of compromise are created by abusing the vulnerability identified in the previous challenge.

Challenge

Protection: Alert on CVE-2022-26134 Attack Attempts

In this challenge, you’ll use knowledge gained in the two previous challenges to make a risk-based decision on how to best mitigate the vulnerability. You’ll assume that a patch is not currently available, and the application cannot be turned off as it’s hosting a necessary business function.

Challenge

Bonus: Taking It One Step Further

Welcome to the final challenge! This is your last chance to experiment in the environment. Clicking Finish Lab will end this little world that flittered into existence just for you.

Labs - code icon

Provided environment for hands-on practice

We will provide the credentials and environment necessary for you to practice right within your browser.

Labs - list icon

Guided walkthrough

Follow along with the author’s guided walkthrough and build something new in your provided environment!

Labs - analytic icon

Did you know?

On average, you retain 75% more of your learning if you get time for practice.

Recommended prerequisites

  • Linux Network and Host Security
  • Network Security Monitoring with Suricata
  • Java Web Fundamentals

Start learning by doing today

Contact sales

Contact Sales

1020 Redirect Link
Thank you!
Our team will be in touch shortly.

Loading form...

If this message remains, it may be due to cookies being disabled or to an ad blocker.

Close button

Ready to skill up
your entire team?

10
Subscriptions
Need more subscriptions? Contact sales.
Continue to checkout Continue to checkout
Cancel

With your Pluralsight plan, you can:

With your 30-day pilot, you can:

  • Access thousands of videos to develop critical skills
  • Give up to 10 users access to thousands of video courses
  • Practice and apply skills with interactive courses and projects
  • See skills, usage, and trend data for your teams
  • Prepare for certifications with industry-leading practice exams
  • Measure proficiency across skills and roles
  • Align learning to your goals with paths and channels

Ready to skill up
your entire team?

10
Subscriptions
Need more subscriptions? Contact sales.
Continue to checkout
Cancel

With your Pluralsight plan, you can:

With your 30-day pilot, you can:

  • Access thousands of videos to develop critical skills
  • Give up to 10 users access to thousands of video courses
  • Practice and apply skills with interactive courses and projects
  • See skills, usage, and trend data for your teams
  • Prepare for certifications with industry-leading practice exams
  • Measure proficiency across skills and roles
  • Align learning to your goals with paths and channels
  • Support

    • Contact
    • Help Center
    • IP Allowlist
    • Site Map
    • Download Pluralsight
    • Skills Plans
    • Flow Plans
  • Community

    • Guides
    • Teach
    • Partner with Pluralsight
    • Affiliate Partners
    • Pluralsight One
    • Authors
  • Company

    • About Us
    • Careers
    • Newsroom
    • Resources
  • Industries

    • Public Sector
    • Non-Profit

Newsletter

Sign up with your email to join our mailing list.

1041 Redirect Link Form Submitted Successfully!

Loading form...

If this message remains, it may be due to cookies being disabled or to an ad blocker.

  • Facebook Logo Icon
  • Twitter Logo Icon
  • Instagram Logo Icon
  • LinkedIn Logo Icon
  • Youtube Logo Icon
Pluralsight Logo Copyright © 2004 - 2023 Pluralsight LLC. All rights reserved
  • Terms of Use
  • Privacy Notice
  • Modern Slavery Statement