Codify easy linux ✓ ▶ Cron jobs and processes (root) Public CVE exploitation Hash cracking Authentication bypass Cron jobs and processes Sudo abuse
Conversor easy linux ✓ ▶ Cron jobs and processes (foothold) LFI / path traversal Cron jobs and processes Public CVE exploitation Sudo abuse
Inject easy linux ✓ ▶ Cron jobs and processes (root) Directory brute forcing LFI / path traversal Public CVE exploitation Credentials in files Cron jobs and processes
LaCasaDePapel easy linux ✓ ▶ Cron jobs and processes (root) LFI / path traversal Public CVE exploitation Weak or homemade cryptography SSH keys Cron jobs and processes
Late easy linux ✓ ▶ Cron jobs and processes (root) Server-Side Template Injection SSH keys Cron jobs and processes
Networked easy linux ✓ ▶ Cron jobs and processes (user) Directory brute forcing Malicious file upload Backups and archives Command injection Cron jobs and processes Sudo abuse
OpenSource easy linux ✓ ▶ Cron jobs and processes (root) Exposed .git repository LFI / path traversal Container escape SSH keys Internal services and port forwarding Git history Cron jobs and processes
Planning easy linux ✓ ▶ Cron jobs and processes (root) Vhost and subdomain fuzzing Public CVE exploitation Credentials in files Cron jobs and processes Internal services and port forwarding
RedPanda easy linux ✓ ▶ Cron jobs and processes (root) Server-Side Template Injection Metadata and OSINT XXE Cron jobs and processes Reverse engineering Log analysis
Teacher easy linux ✓ ▶ Cron jobs and processes (root) Metadata and OSINT Public CVE exploitation Hash cracking Cron jobs and processes
Titanic easy linux ✓ ▶ Cron jobs and processes (root) Vhost and subdomain fuzzing LFI / path traversal Hash cracking Public CVE exploitation Cron jobs and processes
Topology easy linux ✓ ▶ Cron jobs and processes (root) Vhost and subdomain fuzzing LFI / path traversal Hash cracking Cron jobs and processes
Traceback easy linux ✓ ▶ Cron jobs and processes (root) Directory brute forcing Default credentials SSH keys Sudo abuse Cron jobs and processes
Writeup easy linux ✓ ▶ Cron jobs and processes (root) CMS exploitation Public CVE exploitation SQL injection Hash cracking Cron jobs and processes PATH hijacking Privileged groups
Aragog medium linux ✓ ▶ Cron jobs and processes (root) LFI / path traversal XXE SSH keys CMS exploitation Cron jobs and processes
Awkward medium linux ✓ ▶ Cron jobs and processes (root) API enumeration Vhost and subdomain fuzzing Authentication bypass JWT attacks LFI / path traversal SSRF Hash cracking Credentials in files Command injection Cron jobs and processes Symlink abuse
BroScience medium linux ✓ ▶ Cron jobs and processes (root) Insecure deserialization LFI / path traversal Weak or homemade cryptography Credentials in files Hash cracking Command injection Cron jobs and processes
Celestial medium linux ✓ ▶ Cron jobs and processes (root) Insecure deserialization Cron jobs and processes Log analysis
DevArea medium linux ✓ ▶ Cron jobs and processes (root) LFI / path traversal Public CVE exploitation Reverse engineering Command injection Cron jobs and processes Symlink abuse Internal services and port forwarding Cookie or session forging
Era medium linux ✓ ▶ Cron jobs and processes (root) Directory brute forcing Vhost and subdomain fuzzing Authentication bypass IDOR Backups and archives Cron jobs and processes Privileged groups
Europa medium linux ✓ ▶ Cron jobs and processes (root) Vhost and subdomain fuzzing Authentication bypass Command injection SQL injection Cron jobs and processes
Health medium linux ✓ ▶ Cron jobs and processes (root) Public CVE exploitation SQL injection SSRF Hash cracking LFI / path traversal Cron jobs and processes
Inception medium linux ✓ ▶ Cron jobs and processes (root) LFI / path traversal Malicious file upload Credentials in files Sudo abuse Internal services and port forwarding Cron jobs and processes
Interface medium linux ✓ ▶ Cron jobs and processes (root) API enumeration Metadata and OSINT Public CVE exploitation Command injection Cron jobs and processes
Meta medium linux ✓ ▶ Cron jobs and processes (user) Metadata and OSINT Vhost and subdomain fuzzing Malicious file upload Public CVE exploitation Cron jobs and processes Sudo abuse
Nineveh medium linux ✓ ▶ Cron jobs and processes (root) Directory brute forcing LFI / path traversal Public CVE exploitation Steganography Cron jobs and processes
Retired medium linux ✓ ▶ Cron jobs and processes (user) Directory brute forcing LFI / path traversal Reverse engineering ROP / ret2libc Stack buffer overflow Cron jobs and processes SSH keys Symlink abuse Linux capabilities
Sandworm medium linux ✓ ▶ Cron jobs and processes (user) Server-Side Template Injection Cron jobs and processes Library hijacking Credentials in files Public CVE exploitation
Seal medium linux ✓ ▶ Cron jobs and processes (user) Malicious file upload SSRF Git history Cron jobs and processes SSH keys Symlink abuse Sudo abuse
Shared medium linux ✓ ▶ Cron jobs and processes (user) Vhost and subdomain fuzzing SQL injection Public CVE exploitation Cron jobs and processes Hash cracking Credentials in files Reverse engineering
Tartarsauce medium linux ✓ ▶ Cron jobs and processes (root) CMS exploitation Public CVE exploitation Remote file inclusion (RFI) Sudo abuse Cron jobs and processes SUID binaries Symlink abuse