Armageddon easy linux ✓ ▶ CMS exploitation (foothold) CMS exploitation Public CVE exploitation Credentials in files Hash cracking Sudo abuse
Backdoor easy linux ✓ ▶ CMS exploitation (foothold) CMS exploitation LFI / path traversal Public CVE exploitation Sudo abuse
Blocky easy linux ✓ ▶ CMS exploitation (foothold) Directory brute forcing CMS exploitation Credentials in files Reverse engineering Password reuse Kernel or system exploit Sudo abuse
Devvortex easy linux ✓ ▶ CMS exploitation (foothold) Vhost and subdomain fuzzing CMS exploitation Mass assignment Public CVE exploitation Hash cracking Sudo abuse
Dog easy linux ✓ ▶ CMS exploitation (foothold) Exposed .git repository CMS exploitation Credentials in files Password reuse Sudo abuse
Facts easy linux ✓ ▶ CMS exploitation (foothold) CMS exploitation Mass assignment SSH keys Hash cracking Sudo abuse
Greenhorn easy linux ✓ ▶ CMS exploitation (foothold) CMS exploitation Malicious file upload Credentials in files Password reuse
Nibbles easy linux ✓ ▶ CMS exploitation (foothold) Directory brute forcing CMS exploitation Malicious file upload Public CVE exploitation Sudo abuse
Remote easy windows ✓ ▶ CMS exploitation (foothold) SMB/NFS enumeration CMS exploitation Public CVE exploitation Credentials in files Misconfigured services SeImpersonate / Potatoes
Sea easy linux ✓ ▶ CMS exploitation (foothold) Directory brute forcing CMS exploitation Cross-Site Scripting (XSS) Public CVE exploitation Hash cracking Command injection Internal services and port forwarding
Swagshop easy linux ✓ ▶ CMS exploitation (foothold) CMS exploitation Insecure deserialization Public CVE exploitation SQL injection Sudo abuse
Writeup easy linux ✓ ▶ CMS exploitation (foothold) CMS exploitation Public CVE exploitation SQL injection Hash cracking Cron jobs and processes PATH hijacking Privileged groups
Aragog medium linux ✓ ▶ CMS exploitation (root) LFI / path traversal XXE SSH keys CMS exploitation Cron jobs and processes
Chaos medium linux ✓ ▶ CMS exploitation (foothold) Directory brute forcing CMS exploitation Command injection Credentials in files Weak or homemade cryptography Password reuse
Enterprise medium linux ✓ ▶ CMS exploitation (foothold) CMS exploitation Public CVE exploitation SQL injection Container escape Reverse engineering Stack buffer overflow
Hawk medium linux ✓ ▶ CMS exploitation (foothold) CMS exploitation Weak or homemade cryptography Credentials in files Public CVE exploitation Internal services and port forwarding
October medium linux ✓ ▶ CMS exploitation (foothold) CMS exploitation Default credentials Malicious file upload SUID binaries ROP / ret2libc Stack buffer overflow
Surveillance medium linux ✓ ▶ CMS exploitation (foothold) CMS exploitation Public CVE exploitation Internal services and port forwarding Hash cracking Backups and archives Command injection Library hijacking Sudo abuse
Tartarsauce medium linux ✓ ▶ CMS exploitation (foothold) CMS exploitation Public CVE exploitation Remote file inclusion (RFI) Sudo abuse Cron jobs and processes SUID binaries Symlink abuse
Office hard windows ✓ ▶ CMS exploitation (foothold) CMS exploitation Public CVE exploitation Password spraying and valid users Hash cracking Traffic analysis (pcap) Phishing and malicious documents Internal services and port forwarding Saved credentials / DPAPI GPP and GPO abuse
Tally hard windows ✓ ▶ CMS exploitation (foothold) CMS exploitation Credentials in files Hash cracking SMB/NFS enumeration MSSQL abuse Scheduled tasks and admin scripts SeImpersonate / Potatoes Windows exploits AV and EDR evasion
Rabbit insane windows ✓ ▶ CMS exploitation (foothold) CMS exploitation SQL injection Phishing and malicious documents Scheduled tasks and admin scripts