Documented CTFs
Reconnaissance, exploitation, and lessons learned in controlled environments.
Blueprint
Remote code execution in osCommerce 2.3.4 on Windows and NTLM hash extraction.
TryHackMe · Easy · WindowsRelevant
A writable SMB share and Windows privilege escalation through token impersonation.
TryHackMe · Medium · WindowsAgent Sudo
Web enumeration, FTP brute force, steganography, and privilege escalation through sudo.
TryHackMe · Easy · LinuxFowsniff CTF
OSINT, hash cracking, POP3 email access, and privilege escalation through vulnerable MOTD scripts.
TryHackMe · Easy · LinuxLookup
Brute forcing with ffuf, elFinder exploitation, PATH hijacking, and privilege escalation.
TryHackMe · Easy · LinuxTomghost
Ghostcat exploitation, SSH access, PGP key cracking, and sudo abuse through zip.
TryHackMe · Easy · LinuxCrack the Hash
Hash identification and cracking with HashID, Hashcat, John the Ripper, and CrackStation.
TryHackMe · Medium · OtherSimple CTF
Anonymous FTP, SQL injection in CMS Made Simple, SSH access, and escalation with vim.
TryHackMe · Easy · LinuxLazyAdmin
Sweet Rice CMS enumeration, credentials exposed in a backup, a reverse shell, and privilege escalation.
TryHackMe · Easy · LinuxChocolate Factory
Command injection, a PHP reverse shell, SSH access, and privilege escalation with vi.
TryHackMe · Easy · LinuxNo write-ups match the selected filters.