Academy easy linux ✓ ▶ Sudo abuse (root) Directory brute forcing Vhost and subdomain fuzzing Insecure deserialization Mass assignment Public CVE exploitation +5
Admirer easy linux ✓ ▶ Sudo abuse (root) Directory brute forcing Authentication bypass LFI / path traversal Credentials in files Library hijacking +1
Armageddon easy linux ✓ ▶ Sudo abuse (root) CMS exploitation Public CVE exploitation Credentials in files Hash cracking Sudo abuse
Backdoor easy linux ✓ ▶ Sudo abuse (root) CMS exploitation LFI / path traversal Public CVE exploitation Sudo abuse
Blocky easy linux ✓ ▶ Sudo abuse (root) Directory brute forcing CMS exploitation Credentials in files Reverse engineering Password reuse +2
BountyHunter easy linux ✓ ▶ Sudo abuse (root) Directory brute forcing LFI / path traversal XXE Credentials in files Password reuse +1
Broker easy linux ✓ ▶ Sudo abuse (root) Default credentials Public CVE exploitation SSH keys Sudo abuse
Busqueda easy linux ✓ ▶ Sudo abuse (root) Server-Side Template Injection Exposed .git repository Vhost and subdomain fuzzing Credentials in files Container escape +2
CodePartTwo easy linux ✓ ▶ Sudo abuse (root) Public CVE exploitation Credentials in files Sudo abuse Backups and archives
Codify easy linux ✓ ▶ Sudo abuse (root) Public CVE exploitation Hash cracking Authentication bypass Cron jobs and processes Sudo abuse
Conversor easy linux ✓ ▶ Sudo abuse (root) LFI / path traversal Cron jobs and processes Public CVE exploitation Sudo abuse
CozyHosting easy linux ✓ ▶ Sudo abuse (root) Directory brute forcing Authentication bypass Command injection Credentials in files Reverse engineering +2
Devvortex easy linux ✓ ▶ Sudo abuse (root) Vhost and subdomain fuzzing CMS exploitation Mass assignment Public CVE exploitation Hash cracking +1
Dog easy linux ✓ ▶ Sudo abuse (root) Exposed .git repository CMS exploitation Credentials in files Password reuse Sudo abuse
Facts easy linux ✓ ▶ Sudo abuse (root) CMS exploitation Mass assignment SSH keys Hash cracking Sudo abuse
Headless easy linux ✓ ▶ Sudo abuse (root) Command injection Cross-Site Scripting (XSS) PATH hijacking Sudo abuse
LinkVortex easy linux ✓ ▶ Sudo abuse (root) Exposed .git repository Vhost and subdomain fuzzing Public CVE exploitation LFI / path traversal Command injection +3
Networked easy linux ✓ ▶ Sudo abuse (root) Directory brute forcing Malicious file upload Backups and archives Command injection Cron jobs and processes +1
Nibbles easy linux ✓ ▶ Sudo abuse (root) Directory brute forcing CMS exploitation Malicious file upload Public CVE exploitation Sudo abuse
OpenAdmin easy linux ✓ ▶ Sudo abuse (root) Directory brute forcing Public CVE exploitation SSH keys Credentials in files Internal services and port forwarding +3
PermX easy linux ✓ ▶ Sudo abuse (root) Vhost and subdomain fuzzing Public CVE exploitation Credentials in files Password reuse Sudo abuse +1
Photobomb easy linux ✓ ▶ Sudo abuse (root) Command injection Credentials in files PATH hijacking Sudo abuse
Precious easy linux ✓ ▶ Sudo abuse (root) Metadata and OSINT Command injection Public CVE exploitation Credentials in files Insecure deserialization +1
Previse easy linux ✓ ▶ Sudo abuse (root) Directory brute forcing Authentication bypass Command injection Credentials in files Hash cracking +2
Soccer easy linux ✓ ▶ Sudo abuse (root) Directory brute forcing Default credentials Malicious file upload Vhost and subdomain fuzzing SQL injection +1
Swagshop easy linux ✓ ▶ Sudo abuse (root) CMS exploitation Insecure deserialization Public CVE exploitation SQL injection Sudo abuse
Traceback easy linux ✓ ▶ Sudo abuse (user) Directory brute forcing Default credentials SSH keys Sudo abuse Cron jobs and processes
Usage easy linux ✓ ▶ Sudo abuse (root) Malicious file upload SQL injection Hash cracking Sudo abuse Wildcard injection
Agile medium linux ✓ ▶ Sudo abuse (root) LFI / path traversal IDOR Credentials in files Internal services and port forwarding Public CVE exploitation +1
AirTouch medium linux ✓ ▶ Sudo abuse (root) SNMP enumeration Wi-Fi attacks Authentication bypass Malicious file upload Hash cracking +3
Backfire medium linux ✓ ▶ Sudo abuse (root) Public CVE exploitation SSRF Authentication bypass JWT attacks Internal services and port forwarding +2
Bitlab medium linux ✓ ▶ Sudo abuse (root) Directory brute forcing Malicious file upload Credentials in files Git history Reverse engineering +1
Blurry medium linux ✓ ▶ Sudo abuse (root) Vhost and subdomain fuzzing Insecure deserialization Public CVE exploitation SSH keys Sudo abuse
Canape medium linux ✓ ▶ Sudo abuse (root) Directory brute forcing Exposed .git repository Insecure deserialization Git history Public CVE exploitation +2
Dynstr medium linux ✓ ▶ Sudo abuse (root) Command injection Credentials in files SSH keys Sudo abuse SUID binaries +1
Environment medium linux ✓ ▶ Sudo abuse (root) Directory brute forcing Authentication bypass Malicious file upload Public CVE exploitation Credentials in files +1
Forge medium linux ✓ ▶ Sudo abuse (root) Directory brute forcing Vhost and subdomain fuzzing SSRF SSH keys Sudo abuse
Format medium linux ✓ ▶ Sudo abuse (root) LFI / path traversal Malicious file upload SSRF Credentials in files Sudo abuse +1
iClean medium linux ✓ ▶ Sudo abuse (root) Cross-Site Scripting (XSS) Server-Side Template Injection Credentials in files Hash cracking Sudo abuse
Inception medium linux ✓ ▶ Sudo abuse (user) LFI / path traversal Malicious file upload Credentials in files Sudo abuse Internal services and port forwarding +1
Investigation medium linux ✓ ▶ Sudo abuse (root) Directory brute forcing Malicious file upload Public CVE exploitation Log analysis Sudo abuse +2
Jarvis medium linux ✓ ▶ Sudo abuse (user) Directory brute forcing LFI / path traversal Public CVE exploitation SQL injection Hash cracking +3
LightWeight medium linux ✓ ▶ Sudo abuse (root) Directory brute forcing Linux capabilities Hash cracking Backups and archives Traffic analysis (pcap) +1
Meta medium linux ✓ ▶ Sudo abuse (root) Metadata and OSINT Vhost and subdomain fuzzing Malicious file upload Public CVE exploitation Cron jobs and processes +1
Obscurity medium linux ✓ ▶ Sudo abuse (root) Directory brute forcing Command injection LFI / path traversal Weak or homemade cryptography Sudo abuse +2
Ophiuchi medium linux ✓ ▶ Sudo abuse (root) Insecure deserialization Credentials in files Sudo abuse Reverse engineering
Seal medium linux ✓ ▶ Sudo abuse (root) Malicious file upload SSRF Git history Cron jobs and processes SSH keys +2
SmartHire medium linux ✓ ▶ Sudo abuse (root) Vhost and subdomain fuzzing Insecure deserialization Library hijacking Sudo abuse
SneakyMailer medium linux ✓ ▶ Sudo abuse (root) Directory brute forcing Vhost and subdomain fuzzing Cross-Site Scripting (XSS) Malicious file upload Hash cracking +1
Socket medium linux ✓ ▶ Sudo abuse (root) SQL injection Reverse engineering Traffic analysis (pcap) Password reuse Sudo abuse
Surveillance medium linux ✓ ▶ Sudo abuse (root) CMS exploitation Public CVE exploitation Internal services and port forwarding Hash cracking Backups and archives +3
Tartarsauce medium linux ✓ ▶ Sudo abuse (user) CMS exploitation Public CVE exploitation Remote file inclusion (RFI) Sudo abuse Cron jobs and processes +2
TheNotebook medium linux ✓ ▶ Sudo abuse (root) JWT attacks Malicious file upload SSH keys Backups and archives Public CVE exploitation +2
Trickster medium linux ✓ ▶ Sudo abuse (root) Directory brute forcing Exposed .git repository Vhost and subdomain fuzzing Cross-Site Scripting (XSS) CSRF +8
Unicode medium linux ✓ ▶ Sudo abuse (root) JWT attacks LFI / path traversal Credentials in files SSH keys Sudo abuse +1
VariaType medium linux ✓ ▶ Sudo abuse (root) Exposed .git repository LFI / path traversal Malicious file upload Public CVE exploitation Metadata and OSINT +2
Zipping medium linux ✓ ▶ Sudo abuse (root) LFI / path traversal Malicious file upload SQL injection Library hijacking Sudo abuse