CCTV - HTB
Easy Linux CCTV machine abusing ZoneMinder and MotionEye flaws through SQL injection and escalation. [Unintended]
Pirate - HTB
Windows Active Directory challenge centered on delegation, Kerberos, and privilege escalation workflows.
Valid User (No Password)
Valid User (No Password) techniques and commands for Active Directory security assessment.
Trusts
Trusts techniques and commands for Active Directory security assessment.
Soulmate - HTB
Easy Linux machine using CrushFTP auth bypass for admin access, webshell upload, leaked Erlang creds, and an Erlang SSH service to read root files.
HackNet - HTB
Medium Linux machine with Django SSTI in a social feed, cache deserialization abuse, GPG passphrase cracking, and DB backup recovery for root.
WhiteRabbit - HTB
Multi-service Linux target featuring vhost discovery, a signed webhook path into a backend database, and a backup/credential recovery chain that unlocks SSH access and privileged tooling.
Giveback - HTB
Medium Linux box chaining a GiveWP deserialization RCE with container pivoting, PHP-CGI injection, Kubernetes secret theft, and runc debug abuse for root.