Linux

CCTV, an easy Linux machine that exposes a real-world camera management stack where default credentials open the door and a misconfigured service hands you root.

Interpreter, a medium level Linux machine where you exploit a known Mirth Connect RCE, crack hashes and abuse a SSTI vulnerability to reach root.

How I turned an old notebook into a home media server running Plex, qBittorrent and the full arr stack. Less of a tutorial, more of a documented mess that actually works.

Planning, an easy level Linux machine exploiting a Grafana RCE CVE, escaping Docker via leaked SSH creds, and abusing a cron web panel to execute commands as root.

Environment, a medium level Linux machine chaining a Laravel auth bypass CVE, a file upload filter bypass for RCE, and a BASH_ENV sudo misconfiguration to reach root.