Academy easy linux ✓ ▶ Sudo abuse (root) Directory brute forcing Vhost and subdomain fuzzing Insecure deserialization Mass assignment Public CVE exploitation Privileged groups Credentials in files Password reuse Log analysis Sudo abuse
Admirer easy linux ✓ ▶ Sudo abuse (root) Directory brute forcing Authentication bypass LFI / path traversal Credentials in files Library hijacking Sudo abuse
Armageddon easy linux ✓ ▶ Sudo abuse (root) CMS exploitation Public CVE exploitation Credentials in files Hash cracking Sudo abuse
Backdoor easy linux ✓ ▶ Sudo abuse (root) CMS exploitation LFI / path traversal Public CVE exploitation Sudo abuse
Blocky easy linux ✓ ▶ Sudo abuse (root) Directory brute forcing CMS exploitation Credentials in files Reverse engineering Password reuse Kernel or system exploit Sudo abuse
BountyHunter easy linux ✓ ▶ Sudo abuse (root) Directory brute forcing LFI / path traversal XXE Credentials in files Password reuse Sudo abuse
Broker easy linux ✓ ▶ Sudo abuse (root) Default credentials Public CVE exploitation SSH keys Sudo abuse
Busqueda easy linux ✓ ▶ Sudo abuse (root) Server-Side Template Injection Exposed .git repository Vhost and subdomain fuzzing Credentials in files Container escape PATH hijacking Sudo abuse
CodePartTwo easy linux ✓ ▶ Sudo abuse (root) Public CVE exploitation Credentials in files Sudo abuse Backups and archives
Codify easy linux ✓ ▶ Sudo abuse (root) Public CVE exploitation Hash cracking Authentication bypass Cron jobs and processes Sudo abuse
Conversor easy linux ✓ ▶ Sudo abuse (root) LFI / path traversal Cron jobs and processes Public CVE exploitation Sudo abuse
CozyHosting easy linux ✓ ▶ Sudo abuse (root) Directory brute forcing Authentication bypass Command injection Credentials in files Reverse engineering Hash cracking Sudo abuse
Devvortex easy linux ✓ ▶ Sudo abuse (root) Vhost and subdomain fuzzing CMS exploitation Mass assignment Public CVE exploitation Hash cracking Sudo abuse
Dog easy linux ✓ ▶ Sudo abuse (root) Exposed .git repository CMS exploitation Credentials in files Password reuse Sudo abuse
Facts easy linux ✓ ▶ Sudo abuse (root) CMS exploitation Mass assignment SSH keys Hash cracking Sudo abuse
Headless easy linux ✓ ▶ Sudo abuse (root) Command injection Cross-Site Scripting (XSS) PATH hijacking Sudo abuse
LinkVortex easy linux ✓ ▶ Sudo abuse (root) Exposed .git repository Vhost and subdomain fuzzing Public CVE exploitation LFI / path traversal Command injection Sudo abuse Symlink abuse Race condition
Networked easy linux ✓ ▶ Sudo abuse (root) Directory brute forcing Malicious file upload Backups and archives Command injection Cron jobs and processes Sudo abuse
Nibbles easy linux ✓ ▶ Sudo abuse (root) Directory brute forcing CMS exploitation Malicious file upload Public CVE exploitation Sudo abuse
OpenAdmin easy linux ✓ ▶ Sudo abuse (root) Directory brute forcing Public CVE exploitation SSH keys Credentials in files Internal services and port forwarding Password reuse Hash cracking Sudo abuse
PermX easy linux ✓ ▶ Sudo abuse (root) Vhost and subdomain fuzzing Public CVE exploitation Credentials in files Password reuse Sudo abuse Symlink abuse
Photobomb easy linux ✓ ▶ Sudo abuse (root) Command injection Credentials in files PATH hijacking Sudo abuse
Precious easy linux ✓ ▶ Sudo abuse (root) Metadata and OSINT Command injection Public CVE exploitation Credentials in files Insecure deserialization Sudo abuse
Previse easy linux ✓ ▶ Sudo abuse (root) Directory brute forcing Authentication bypass Command injection Credentials in files Hash cracking PATH hijacking Sudo abuse
Soccer easy linux ✓ ▶ Sudo abuse (root) Directory brute forcing Default credentials Malicious file upload Vhost and subdomain fuzzing SQL injection Sudo abuse
Swagshop easy linux ✓ ▶ Sudo abuse (root) CMS exploitation Insecure deserialization Public CVE exploitation SQL injection Sudo abuse
Traceback easy linux ✓ ▶ Sudo abuse (user) Directory brute forcing Default credentials SSH keys Sudo abuse Cron jobs and processes
Usage easy linux ✓ ▶ Sudo abuse (root) Malicious file upload SQL injection Hash cracking Sudo abuse Wildcard injection
Agile medium linux ✓ ▶ Sudo abuse (root) LFI / path traversal IDOR Credentials in files Internal services and port forwarding Public CVE exploitation Sudo abuse
AirTouch medium linux ✓ ▶ Sudo abuse (root) SNMP enumeration Wi-Fi attacks Authentication bypass Malicious file upload Hash cracking Traffic analysis (pcap) Sudo abuse Credentials in files
Backfire medium linux ✓ ▶ Sudo abuse (root) Public CVE exploitation SSRF Authentication bypass JWT attacks Internal services and port forwarding SSH keys Sudo abuse
Bitlab medium linux ✓ ▶ Sudo abuse (root) Directory brute forcing Malicious file upload Credentials in files Git history Reverse engineering Sudo abuse
Blurry medium linux ✓ ▶ Sudo abuse (root) Vhost and subdomain fuzzing Insecure deserialization Public CVE exploitation SSH keys Sudo abuse
Canape medium linux ✓ ▶ Sudo abuse (root) Directory brute forcing Exposed .git repository Insecure deserialization Git history Public CVE exploitation Credentials in files Sudo abuse
Dynstr medium linux ✓ ▶ Sudo abuse (root) Command injection Credentials in files SSH keys Sudo abuse SUID binaries Wildcard injection
Environment medium linux ✓ ▶ Sudo abuse (root) Directory brute forcing Authentication bypass Malicious file upload Public CVE exploitation Credentials in files Sudo abuse
Forge medium linux ✓ ▶ Sudo abuse (root) Directory brute forcing Vhost and subdomain fuzzing SSRF SSH keys Sudo abuse
Format medium linux ✓ ▶ Sudo abuse (root) LFI / path traversal Malicious file upload SSRF Credentials in files Sudo abuse Format string
iClean medium linux ✓ ▶ Sudo abuse (root) Cross-Site Scripting (XSS) Server-Side Template Injection Credentials in files Hash cracking Sudo abuse
Inception medium linux ✓ ▶ Sudo abuse (user) LFI / path traversal Malicious file upload Credentials in files Sudo abuse Internal services and port forwarding Cron jobs and processes
Investigation medium linux ✓ ▶ Sudo abuse (root) Directory brute forcing Malicious file upload Public CVE exploitation Log analysis Sudo abuse Race condition Reverse engineering
Jarvis medium linux ✓ ▶ Sudo abuse (user) Directory brute forcing LFI / path traversal Public CVE exploitation SQL injection Hash cracking Command injection Sudo abuse SUID binaries
LightWeight medium linux ✓ ▶ Sudo abuse (root) Directory brute forcing Linux capabilities Hash cracking Backups and archives Traffic analysis (pcap) Sudo abuse
Meta medium linux ✓ ▶ Sudo abuse (root) Metadata and OSINT Vhost and subdomain fuzzing Malicious file upload Public CVE exploitation Cron jobs and processes Sudo abuse
Obscurity medium linux ✓ ▶ Sudo abuse (root) Directory brute forcing Command injection LFI / path traversal Weak or homemade cryptography Sudo abuse Race condition Hash cracking
Ophiuchi medium linux ✓ ▶ Sudo abuse (root) Insecure deserialization Credentials in files Sudo abuse Reverse engineering
Seal medium linux ✓ ▶ Sudo abuse (root) Malicious file upload SSRF Git history Cron jobs and processes SSH keys Symlink abuse Sudo abuse
SmartHire medium linux ✓ ▶ Sudo abuse (root) Vhost and subdomain fuzzing Insecure deserialization Library hijacking Sudo abuse
SneakyMailer medium linux ✓ ▶ Sudo abuse (root) Directory brute forcing Vhost and subdomain fuzzing Cross-Site Scripting (XSS) Malicious file upload Hash cracking Sudo abuse
Socket medium linux ✓ ▶ Sudo abuse (root) SQL injection Reverse engineering Traffic analysis (pcap) Password reuse Sudo abuse
Surveillance medium linux ✓ ▶ Sudo abuse (root) CMS exploitation Public CVE exploitation Internal services and port forwarding Hash cracking Backups and archives Command injection Library hijacking Sudo abuse
Tartarsauce medium linux ✓ ▶ Sudo abuse (user) CMS exploitation Public CVE exploitation Remote file inclusion (RFI) Sudo abuse Cron jobs and processes SUID binaries Symlink abuse
TheNotebook medium linux ✓ ▶ Sudo abuse (root) JWT attacks Malicious file upload SSH keys Backups and archives Public CVE exploitation Container escape Sudo abuse
Trickster medium linux ✓ ▶ Sudo abuse (root) Directory brute forcing Exposed .git repository Vhost and subdomain fuzzing Cross-Site Scripting (XSS) CSRF Public CVE exploitation Server-Side Template Injection Container escape Credentials in files Internal services and port forwarding Hash cracking Backups and archives Sudo abuse
Unicode medium linux ✓ ▶ Sudo abuse (root) JWT attacks LFI / path traversal Credentials in files SSH keys Sudo abuse Reverse engineering
VariaType medium linux ✓ ▶ Sudo abuse (root) Exposed .git repository LFI / path traversal Malicious file upload Public CVE exploitation Metadata and OSINT SSH keys Sudo abuse
Zipping medium linux ✓ ▶ Sudo abuse (root) LFI / path traversal Malicious file upload SQL injection Library hijacking Sudo abuse