-
Capture!
Custom python script for brute forcing with username and password dictionaries
-
Mustacchio
XML external entity (XXE) injection and privilege escalation through a binary with a relative path
-
VulnNet: Node
NodeJS serialization exploit and privilege escalation through NPM and sudo on vulnnet-job service
-
Year Of The Rabbit
Web enumeration, FTP brute force with custom password list, decoding a Brainfuck script and privilege escalation with non root sudo permission on vi
-
Boiler CTF
sar2html Remote Code Execution on a Joomla site and find has an suid bit set
-
RootMe
Uploading a malicious PHP script and privileges escalation through Python with SUID permissions
-
Inclusion
LFI to get SSH credentials and escalating to root with socat
-
Pickle Rick
Basic web / linux enumeration
-
Overpass 2
Getting credentials from a pcap file and exploiting a bash binary with SUID permissions
-
Overpass
Exploiting client side "sessionToken" and exploting a cronjon and bad permissions on the hosts file