Pentest

CCTV, an easy Linux machine that exposes a real-world camera management stack where default credentials open the door and a misconfigured service hands you root.

Pirate, a hard level Windows machine that throws you into a multi-segment Active Directory environment where every step forward requires digging deeper into how Windows authentication actually works and how to break it.

Interpreter, a medium level Linux machine where you exploit a known Mirth Connect RCE, crack hashes and abuse a SSTI vulnerability to reach root.

Planning, an easy level Linux machine exploiting a Grafana RCE CVE, escaping Docker via leaked SSH creds, and abusing a cron web panel to execute commands as root.

Scepter, a hard level Windows machine where two chained ADCS misconfigurations are the heart of the box, with some certificate cracking and BloodHound enumeration to set the stage.

Environment, a medium level Linux machine chaining a Laravel auth bypass CVE, a file upload filter bypass for RCE, and a BASH_ENV sudo misconfiguration to reach root.