WordPress Server — Attack Simulation

Single-server attack simulation: a LAMP-stack WordPress box exposed to the internet from 2018–2025. Watch bot scans, brute force, CVE exploits, SQL injection, DDoS, and database exfiltration in real time against configurable defensive controls.

Source: mr-r3b00t/org_cyber_attack_sim · WordPress scenario, fully client-side, MITRE ATT&CK tagged.

Single server

One LAMP box on the internet

2018–2025

7-year attack timeline

6 attack types

Scans, brute force, CVE, SQLi, DDoS, exfil

WordPress simulation runningOpen in new tab

Attack Types

Bot scan / recon

CVE exploit (RCE)

SQL injection

MySQL :3306 attack

Open-directory crawl

DDoS (huge volume)

Compromise

Defensive Controls (toggleable)

WAF / firewall

Auto-updates

DDoS protection

MySQL exposed

Open directory

Upstream

mr-r3b00t/org_cyber_attack_sim — live simulation
GitHub — source code