Category
This was an intermediate Linux machine that required to identify a set of credentials hidden within an image file using the Piet programming language and exploiting a known remote code execution vulnerability in Nagios XI to escalate privileges to root.
Read moreThis was an intermediate Linux machine that involved capturing four flags by exploiting local file inclusion (through Apache log poisoning), the env binary with Sudo permissions enabled and a misconfigured cron job which allowed to escape the Docker container and access the underlying system.
Read moreThis was an intermediate Linux machine that involved exploiting a stored cross-site scripting and SQL injection vulnerability to gain initial access and misconfigured sudo rules to escalate privileges to Root.
Read moreThis was an easy Linux machine that involved chaining a path traversal and PHP remote code execution vulnerability affecting two web applications to gain initial access, and the Zip/Tar binaries with Sudo permissions enabled to escalate privileges to root.
Read moreThis was an easy Linux machine that involved exploiting a PHP bash shell to gain initial access, misconfigured Sudo rules to escalate to the “scriptmanager” user and a cron job to escalate to root.
Read moreThis was an intermediate Linux machine that required to exploit a remote code execution vulnerability in the DYN application and to exploit a vulnerable Bash script to escalate privileges to Root.
Read moreThis was a hard Linux machine that required to abuse local file inclusion to access and exploit a vulnerable Cacti web application in order to gain a foothold, leverage a deserialization vulnerability affecting Apache Ofbiz and breaking out of a docker container to obtain full access.
Read moreThis was an easy Linux machine that required to find clear-text credentials stored in a PCAP file to gain initial access and exploit Python with the cap_setuid capability enabled to escalate privileges to root.
Read moreThis was an intermediate Linux machine that required to enumerate SNMP in order to find and exploit a vulnerable SeedDMS instance to gain initial access and to exploit a misconfigured Bash script to elevate privileges to root.
Read moreThis was an intermediate OpenBSD machine that required to chain several Moodle vulnerabilities to escalate privileges to administrator and obtain initial access and exploit the PKG OpenBSD binary with Sudo permissions enabled to escalate privileges to root.
Read more