bara
NanoCorp is a hard difficulty Windows Active Directory machine focused on abusing insecure file extraction behavior, Active Directory ACL misconfigurations, Kerberos authentication quirks, and local privilege escalation through a vulnerable Checkmk agent installation.
Read →
VulnCicada is a Medium Windows Active Directory machine that involves discovering a password inside an image on a public share.
Read →
Data is an Easy Linux machine that involves exploiting https://nvd.nist.gov/vuln/detail/CVE-2021-43798, an arbitrary file read via path traversal in Grafana.
Read →
Retro is an Easy Windows machine that showcases an Active Directory Domain Controller.
Read →
Down is an easy-rated Linux machine that involves exploiting an arbitrary file read by bypassing a protocol-based filter to discover the source code of the running PHP web app, eventually, a remote code execution to gain an initial foothold.
Read →