Buff easy windows ✓ ▶ Stack buffer overflow (root) Public CVE exploitation Internal services and port forwarding Stack buffer overflow
Frolic easy linux ✓ ▶ Stack buffer overflow (root) Directory brute forcing Malicious file upload Public CVE exploitation Hash cracking SUID binaries ROP / ret2libc Stack buffer overflow
Chatterbox medium windows ✓ ▶ Stack buffer overflow (foothold) Public CVE exploitation Stack buffer overflow Credentials in the registry and history Password reuse
Enterprise medium linux ✓ ▶ Stack buffer overflow (root) CMS exploitation Public CVE exploitation SQL injection Container escape Reverse engineering Stack buffer overflow
October medium linux ✓ ▶ Stack buffer overflow (root) CMS exploitation Default credentials Malicious file upload SUID binaries ROP / ret2libc Stack buffer overflow
Retired medium linux ✓ ▶ Stack buffer overflow (foothold) Directory brute forcing LFI / path traversal Reverse engineering ROP / ret2libc Stack buffer overflow Cron jobs and processes SSH keys Symlink abuse Linux capabilities
Sneaky medium linux ✓ ▶ Stack buffer overflow (root) SNMP enumeration SQL injection SSH keys SUID binaries Stack buffer overflow
Hancliffe hard windows ✓ ▶ Stack buffer overflow (root) Directory brute forcing LFI / path traversal Server-Side Template Injection Public CVE exploitation Saved credentials / DPAPI Internal services and port forwarding Reverse engineering Stack buffer overflow Weak or homemade cryptography
BankRobber insane windows ✓ ▶ Stack buffer overflow (root) Command injection Cross-Site Scripting (XSS) SQL injection Internal services and port forwarding Stack buffer overflow
Bighead insane windows ✓ ▶ Stack buffer overflow (foothold) Vhost and subdomain fuzzing Stack buffer overflow Credentials in the registry and history Internal services and port forwarding LFI / path traversal Hash cracking