OSCP · Practice machines

OSCP Practice Machines

Our curated list of machines that train the same skills as the OSCP syllabus, mapped to the module they fit best. Techniques are hidden behind spoilers, and machines whose platform forbids public solutions only show a name and link.

339 machines 38 with a HackIndex.io writeup

Has writeup

Done	Machine	OS	Difficulty	Module	Writeup
Mark Access as done	Access HackTheBox Show spoilers anonymous-ftp mdb-database-analysis zip-password-cracking pst-file-analysis telnet runas-savecred	Windows	Easy	Windows Privilege Escalation	0xdf.gitlab.io
Mark Active as done	Active HackTheBox Show spoilers smb-enumeration gpp-password kerberoasting	Windows	Easy	Active Directory Authentication Attacks	0xdf.gitlab.io
Mark Admirer as done	Admirer HackTheBox Show spoilers adminer-arbitrary-file-read rogue-mysql-server credential-harvesting python-library-hijacking sudo-setenv	Linux	Easy	Finding and Evaluating Public Exploits	0xdf.gitlab.io
Mark Blocky as done	Blocky HackTheBox Show spoilers wordpress-enumeration jar-decompilation hardcoded-credentials credential-reuse ssh sudo-misconfiguration	Linux	Easy	Linux Privilege Escalation	HackIndex.io
Mark Buff as done	Buff HackTheBox Show spoilers gym-management-rce file-upload webshell chisel-port-forwarding cloudme-buffer-overflow	Windows	Easy	Adapting Public Exploits	0xdf.gitlab.io
Mark Cascade as done	Cascade HackTheBox Show spoilers ldap-enumeration smb-enumeration tightvnc-password-decryption reverse-engineering aes-decryption ad-recycle-bin-abuse password-reuse	Windows	Medium	Active Directory Enumeration	0xdf.gitlab.io
Mark Forest as done	Forest HackTheBox Show spoilers rpc-enumeration as-rep-roasting winrm bloodhound acl-abuse dcsync	Windows	Easy	Active Directory Lateral Movement	0xdf.gitlab.io
Mark Nest as done	Nest HackTheBox Show spoilers smb-enumeration credential-hunting config-file-passwords alternate-data-streams dotnet-decompilation password-decryption	Windows	Easy	Active Information Gathering	0xdf.gitlab.io
Mark Hepet as done	Hepet Proving Grounds	Windows	Intermediate	Client-Side Attacks	Not allowed
Mark Alfred as done	Alfred TryHackMe Show spoilers jenkins default-credentials command-execution reverse-shell token-impersonation seimpersonateprivilege	Windows	Easy	Common Web Application Attacks	www.aldeid.com
Mark Game Zone as done	Game Zone TryHackMe Show spoilers sql-injection-login-bypass sqlmap hash-cracking ssh-port-forwarding webmin-cve-2019-15107	Linux	Easy	SQL Injection Attacks	–
Mark Alfa 1 as done	Alfa 1 Vulnhub Show spoilers anonymous-ftp brainfuck-decoding wordlist-generation ssh-brute-force ssh-tunneling vnc-authentication	Linux	Easy	Password Attacks	github.com
Mark Bastion as done	Bastion HackTheBox Show spoilers smb-enumeration vhd-mount sam-dump hash-cracking mremoteng-password-decryption	Windows	Easy	Windows Privilege Escalation	0xdf.gitlab.io
Mark Brainfuck as done	Brainfuck HackTheBox Show spoilers wordpress-plugin-exploit vigenere-cipher rsa-key-recovery email-enumeration ssh-key-recovery	Linux	Insane	Active Information Gathering	HackIndex.io
Mark Heist as done	Heist HackTheBox Show spoilers cisco-type7-cracking password-reuse firefox-credential-dump procdump-lsass evil-winrm	Windows	Easy	Active Directory Lateral Movement	0xdf.gitlab.io
Mark Ypuffy as done	Ypuffy HackTheBox Show spoilers ldap-enumeration ssh-key-authentication doas-abuse signify-signing	OpenBSD	Medium	Active Directory Enumeration	0xdf.gitlab.io
Mark Algernon as done	Algernon Proving Grounds	Windows	Easy	Common Web Application Attacks	Not allowed
Mark Agent Sudo as done	Agent Sudo TryHackMe Show spoilers user-agent-manipulation ftp-brute-force steganography password-cracking cve-2019-14287 sudo-misconfiguration	Linux	Easy	Finding and Evaluating Public Exploits	www.aldeid.com
Mark Anthem as done	Anthem TryHackMe Show spoilers web-enumeration osint credential-disclosure rdp hidden-files	Windows	Easy	Password Attacks	www.aldeid.com
Mark Brooklyn Nine Nine as done	Brooklyn Nine Nine TryHackMe Show spoilers ftp-anonymous ssh-brute-force steganography sudo-misconfiguration gtfobins-less	Linux	Easy	Linux Privilege Escalation	www.aldeid.com
Mark Buffer Overflow Prep (OSCP BOF room, Tib3rius) as done	Buffer Overflow Prep (OSCP BOF room, Tib3rius) TryHackMe Show spoilers buffer-overflow stack-based-buffer-overflow eip-overwrite bad-character-analysis jmp-esp shellcode-injection egg-hunter	Windows	Easy	Adapting Public Exploits	–
Mark Corp as done	Corp TryHackMe Show spoilers kerberoasting applocker-bypass hashcat powerup unattended-install-credentials	Windows	Easy	Active Directory Authentication Attacks	steflan-security.com
Mark Hackme 1 as done	Hackme 1 Vulnhub Show spoilers sql-injection hash-cracking file-upload suid	Linux	Easy	SQL Injection Attacks	www.hackingarticles.in
Mark Arctic as done	Arctic HackTheBox Show spoilers coldfusion directory-traversal hash-cracking jsp-webshell scheduled-task-abuse ms10-059 kernel-exploit	Windows	Easy	Common Web Application Attacks	0xdf.gitlab.io
Mark Armageddon as done	Armageddon HackTheBox Show spoilers drupalgeddon2 cve-2018-7600 hash-cracking snap-install dirty-sock sudo-misconfiguration	Linux	Easy	Finding and Evaluating Public Exploits	HackIndex.io
Mark Cicada as done	Cicada HackTheBox Show spoilers smb-guest-enumeration password-in-share rid-brute password-spray sebackupprivilege sam-hive-dump	Windows	Easy	Windows Privilege Escalation	0xdf.gitlab.io
Mark Delivery as done	Delivery HackTheBox Show spoilers osticket-abuse mattermost-registration credential-harvesting hash-cracking hashcat-rules password-reuse	Linux	Easy	Password Attacks	HackIndex.io
Mark Dog as done	Dog HackTheBox Show spoilers exposed-git-directory backdrop-cms-credentials authenticated-module-upload-rce sudo-bee-gtfobins	Linux	Easy	Adapting Public Exploits	0xdf.gitlab.io
Mark EscapeTwo as done	EscapeTwo HackTheBox Show spoilers mssql-access spreadsheet-credential-leak bloodhound writeowner-abuse adcs-esc4 certificate-abuse	Windows	Easy	Active Directory Authentication Attacks	0xdf.gitlab.io
Mark Object as done	Object HackTheBox Show spoilers jenkins-abuse firewall-bypass bloodhound forcechangepassword-acl writeowner-acl dpapi-credential-decrypt	Windows	Hard	Active Directory Enumeration	HackIndex.io
Mark Return as done	Return HackTheBox Show spoilers ldap-passback credential-capture winrm server-operators-group service-abuse	Windows	Easy	Active Directory Lateral Movement	0xdf.gitlab.io
Mark Hawat as done	Hawat Proving Grounds	Linux	Easy	SQL Injection Attacks	Not allowed
Mark Infosec Prep: OSCP Box as done	Infosec Prep: OSCP Box Vulnhub Show spoilers information-disclosure base64-decoding ssh-private-key suid-bash lxd-privilege-escalation	Linux	Easy	Linux Privilege Escalation	redteamtutorials.com
Mark Pikaboo as done	Pikaboo HackTheBox Show spoilers nginx-off-by-slash lfi log-poisoning ldap-enumeration perl-diamond-operator-injection cron-job	Linux	Hard	Active Directory Enumeration	0xdf.gitlab.io
Mark Sauna as done	Sauna HackTheBox Show spoilers user-enumeration as-rep-roasting autologon-credentials bloodhound dcsync	Windows	Easy	Active Directory Authentication Attacks	0xdf.gitlab.io
Mark Timelapse as done	Timelapse HackTheBox Show spoilers smb-enumeration zip-cracking pfx-cracking evil-winrm powershell-history laps	Windows	Easy	Active Directory Lateral Movement	0xdf.gitlab.io
Mark Astronaut as done	Astronaut Proving Grounds	Linux	Easy	Common Web Application Attacks	HackIndex.io
Mark Extplorer as done	Extplorer Proving Grounds	Linux	Intermediate	Password Attacks	Not allowed
Mark Squid as done	Squid Proving Grounds	Windows	Easy	Windows Privilege Escalation	Not allowed
Mark dostackbufferoverflowgood (Justin Steven) as done	dostackbufferoverflowgood (Justin Steven) Standalone Show spoilers buffer-overflow stack-based-buffer-overflow eip-overwrite jmp-esp shellcode-injection bad-character-analysis	Windows	Easy	Adapting Public Exploits	github.com
Mark Blaster as done	Blaster TryHackMe Show spoilers web-enumeration directory-fuzzing credential-discovery rdp-access cve-2019-1388 uac-bypass	Windows	Easy	Finding and Evaluating Public Exploits	www.aldeid.com
Mark Kenobi as done	Kenobi TryHackMe Show spoilers smb-enumeration proftpd-mod-copy nfs-mount ssh-private-key-theft suid path-hijacking	Linux	Easy	Linux Privilege Escalation	HackIndex.io
Mark Healthcare 1 as done	Healthcare 1 Vulnhub Show spoilers openemr-exploit sql-injection sqlmap webshell-upload suid path-hijacking	Linux	Easy	SQL Injection Attacks	www.hackingarticles.in
Mark Bank as done	Bank HackTheBox Show spoilers dns-vhost-enumeration htaccess-upload-filter-bypass php-webshell credentials-in-config suid-abuse	Linux	Easy	Common Web Application Attacks	HackIndex.io
Mark Blue as done	Blue HackTheBox Show spoilers smb-enumeration ms17-010 eternalblue smbv1-rce	Windows	Easy	Finding and Evaluating Public Exploits	0xdf.gitlab.io
Mark Frolic as done	Frolic HackTheBox Show spoilers robots-txt esoteric-encoding base64-decoding playsms-rce file-upload buffer-overflow	Linux	Easy	Adapting Public Exploits	HackIndex.io
Mark Help as done	Help HackTheBox Show spoilers graphql-enumeration helpdeskz-sqli arbitrary-file-upload kernel-exploit-privesc	Linux	Easy	SQL Injection Attacks	0xdf.gitlab.io
Mark Reel as done	Reel HackTheBox Show spoilers anonymous-ftp phishing cve-2017-0199 rtf-exploit bloodhound writeowner writedacl	Windows	Hard	Active Directory Enumeration	0xdf.gitlab.io
Mark Support as done	Support HackTheBox Show spoilers smb-enumeration reverse-engineering ldap-enumeration resource-based-constrained-delegation dcsync	Windows	Easy	Active Directory Authentication Attacks	HackIndex.io
Mark Hokkaido as done	Hokkaido Proving Grounds	Windows	Intermediate	Active Directory Lateral Movement	Not allowed
Mark Jacko as done	Jacko Proving Grounds	Windows	Intermediate	Windows Privilege Escalation	Not allowed
Mark Postfish as done	Postfish Proving Grounds	Linux	Intermediate	Password Attacks	Not allowed
Mark Lin.Security as done	Lin.Security Vulnhub Show spoilers sudo-misconfiguration gtfobins cron-job nfs-no-root-squash suid	Linux	Easy	Linux Privilege Escalation	in.security
Mark Atom as done	Atom HackTheBox Show spoilers electron-updater-abuse smb-writable-share malicious-update-payload redis portable-kanban-decryption credential-reuse	Windows	Medium	Password Attacks	0xdf.gitlab.io
Mark Bashed as done	Bashed HackTheBox Show spoilers directory-enumeration phpbash web-shell sudo-misconfiguration cron-job	Linux	Easy	Common Web Application Attacks	0xdf.gitlab.io
Mark Grandpa as done	Grandpa HackTheBox Show spoilers iis-webdav cve-2017-7269 buffer-overflow churrasco token-impersonation	Windows	Easy	Adapting Public Exploits	0xdf.gitlab.io
Mark Mirai as done	Mirai HackTheBox Show spoilers default-credentials ssh sudo-misconfiguration file-recovery forensics	Linux	Easy	Linux Privilege Escalation	0xdf.gitlab.io
Mark Tally as done	Tally HackTheBox Show spoilers sharepoint-enumeration keepass-cracking mssql-xp-cmdshell seimpersonate scheduled-task-abuse juicypotato	Windows	Hard	Windows Privilege Escalation	0xdf.gitlab.io
Mark Access as done	Access Proving Grounds	Windows	Intermediate	Active Directory Authentication Attacks	Not allowed
Mark Hutch as done	Hutch Proving Grounds	Windows	Intermediate	Active Directory Lateral Movement	Not allowed
Mark Blue as done	Blue TryHackMe Show spoilers eternalblue ms17-010 smb-exploitation metasploit hash-dumping password-cracking	Windows	Easy	Finding and Evaluating Public Exploits	steflan-security.com
Mark Kioptrix: Level 1.1 (#2) as done	Kioptrix: Level 1.1 (#2) Vulnhub Show spoilers sql-injection command-injection reverse-shell kernel-exploit privilege-escalation	Linux	Easy	SQL Injection Attacks	blog.g0tmi1k.com
Mark Administrator as done	Administrator HackTheBox Show spoilers bloodhound targeted-kerberoast dacl-abuse genericall password-safe-dump dcsync	Windows	Medium	Active Directory Authentication Attacks	0xdf.gitlab.io
Mark Beep as done	Beep HackTheBox Show spoilers lfi elastix cve-2012-4869 credential-disclosure password-reuse sudo-nmap	Linux	Easy	Common Web Application Attacks	HackIndex.io
Mark BoardLight as done	BoardLight HackTheBox Show spoilers dolibarr-cve-2023-30253 default-credentials config-credential-reuse enlightenment-cve-2022-37706-suid	Linux	Easy	Finding and Evaluating Public Exploits	0xdf.gitlab.io
Mark Fuse as done	Fuse HackTheBox Show spoilers print-job-enumeration wordlist-generation password-spray rpc-password-change seloaddriverprivilege	Windows	Medium	Password Attacks	0xdf.gitlab.io
Mark Vault as done	Vault Proving Grounds	Windows	Hard	Windows Privilege Escalation	Not allowed
Mark IMF as done	IMF Vulnhub Show spoilers information-disclosure php-type-juggling sql-injection file-upload htaccess-bypass buffer-overflow	Linux	Easy	Adapting Public Exploits	g0blin.co.uk
Mark Kioptrix: Level 1.2 (#3) as done	Kioptrix: Level 1.2 (#3) Vulnhub Show spoilers lotuscms-rce sql-injection password-cracking credential-reuse sudo-misconfiguration	Linux	Easy	SQL Injection Attacks	jhalon.github.io
Mark Lord of the Root 1.0.1 as done	Lord of the Root 1.0.1 Vulnhub Show spoilers port-knocking sql-injection sqlmap credential-dumping mysql-udf-exploit	Linux	Intermediate	Active Directory Lateral Movement	highon.coffee
Mark Mr-Robot 1 as done	Mr-Robot 1 Vulnhub Show spoilers wordpress-enumeration robots-txt password-brute-force reverse-shell hash-cracking nmap-suid	Linux	Easy	Linux Privilege Escalation	jhalon.github.io
Mark Authority as done	Authority HackTheBox Show spoilers ansible-vault-cracking pwm-ldap-abuse responder adcs-esc1 certificate-abuse	Windows	Medium	Active Directory Authentication Attacks	0xdf.gitlab.io
Mark Blunder as done	Blunder HackTheBox Show spoilers bludit-bruteforce-bypass bludit-file-upload-rce cve-2019-16113 password-cracking sudo-cve-2019-14287	Linux	Easy	Common Web Application Attacks	0xdf.gitlab.io
Mark Broker as done	Broker HackTheBox Show spoilers activemq-cve-2023-46604 rce sudo-nginx-privesc config-abuse	Linux	Easy	Finding and Evaluating Public Exploits	0xdf.gitlab.io
Mark Sunday as done	Sunday HackTheBox Show spoilers finger-user-enumeration ssh-brute-force password-cracking backup-file-disclosure sudo-wget sudo-misconfiguration	Solaris	Easy	Linux Privilege Escalation	0xdf.gitlab.io
Mark Kevin as done	Kevin Proving Grounds	Windows	Easy	Adapting Public Exploits	Not allowed
Mark Nickel as done	Nickel Proving Grounds	Windows	Intermediate	Active Directory Lateral Movement	Not allowed
Mark Kioptrix: Level 1.3 (#4) as done	Kioptrix: Level 1.3 (#4) Vulnhub Show spoilers smb-enumeration sql-injection authentication-bypass restricted-shell-escape mysql-udf	Linux	Easy	SQL Injection Attacks	jhalon.github.io
Mark Tommy Boy 1 as done	Tommy Boy 1 Vulnhub Show spoilers web-enumeration ftp-anonymous wordpress-enumeration steganography hash-cracking truecrypt	Linux	Medium	Password Attacks	g0blin.co.uk
Mark Intelligence as done	Intelligence HackTheBox Show spoilers pdf-metadata-enumeration password-spraying dns-record-injection responder-ntlm-capture gmsa-password-read constrained-delegation kerberos-s4u	Windows	Medium	Active Directory Authentication Attacks	HackIndex.io
Mark Resourced as done	Resourced Proving Grounds	Windows	Intermediate	Active Directory Lateral Movement	Not allowed
Mark Bob 1.0.1 as done	Bob 1.0.1 Vulnhub Show spoilers information-disclosure command-injection gpg-decryption password-cracking sudo	Linux	Easy	Common Web Application Attacks	github.com
Mark BSides Vancouver 2018 as done	BSides Vancouver 2018 Vulnhub Show spoilers anonymous-ftp robots-txt wordpress wpscan-brute-force plugin-edit-rce cron-job writable-script sudo-misconfiguration	Linux	Easy	Finding and Evaluating Public Exploits	github.com
Mark Kioptrix: Level 1 (#1) as done	Kioptrix: Level 1 (#1) Vulnhub Show spoilers smb-enumeration apache-mod-ssl-openfuck cve-2002-0082 samba-trans2open-overflow remote-buffer-overflow	Linux	Easy	Adapting Public Exploits	blog.g0tmi1k.com
Mark Moria as done	Moria Vulnhub Show spoilers directory-brute-force port-knocking ftp-enumeration salted-md5-cracking ssh-private-key	Linux	Hard	Password Attacks	github.com
Mark NullByte as done	NullByte Vulnhub Show spoilers steganography directory-bruteforce hydra-bruteforce sql-injection hash-cracking suid path-hijacking	Linux	Easy	SQL Injection Attacks	g0blin.co.uk
Mark Toppo 1 as done	Toppo 1 Vulnhub Show spoilers directory-enumeration information-disclosure weak-credentials suid python-suid mawk-suid	Linux	Easy	Linux Privilege Escalation	www.hackingarticles.in
Mark Bounty as done	Bounty HackTheBox Show spoilers file-upload web-config-upload asp-code-execution seimpersonateprivilege juicy-potato token-impersonation	Windows	Easy	Common Web Application Attacks	HackIndex.io
Mark Curling as done	Curling HackTheBox Show spoilers joomla-admin-access template-php-backdoor password-reuse cron-abuse tar-wildcard-injection curl-config-file-abuse	Linux	Easy	Finding and Evaluating Public Exploits	0xdf.gitlab.io
Mark Legacy as done	Legacy HackTheBox Show spoilers smb-enumeration ms08-067 ms17-010 eternalblue buffer-overflow	Windows	Easy	Adapting Public Exploits	HackIndex.io
Mark Manager as done	Manager HackTheBox Show spoilers ad-user-enumeration mssql-access backup-zip-disclosure web-config-credentials adcs-esc7	Windows	Medium	Active Directory Authentication Attacks	0xdf.gitlab.io
Mark Pandora as done	Pandora HackTheBox Show spoilers snmp-enumeration credential-harvesting sql-injection pandora-fms file-upload suid path-hijacking	Linux	Easy	SQL Injection Attacks	0xdf.gitlab.io
Mark Attacktive Directory as done	Attacktive Directory TryHackMe Show spoilers kerberos-username-enumeration as-rep-roasting hashcat smb-enumeration credential-disclosure dcsync pass-the-hash	Windows	Medium	Active Directory Lateral Movement	steflan-security.com
Mark Tr0ll 1 as done	Tr0ll 1 Vulnhub Show spoilers anonymous-ftp pcap-analysis ssh-brute-force cron-job writable-script kernel-exploit	Linux	Easy	Linux Privilege Escalation	highon.coffee
Mark Certified as done	Certified HackTheBox Show spoilers bloodhound-enumeration acl-abuse writeowner genericwrite shadow-credentials adcs-esc9 pass-the-hash	Windows	Medium	Active Directory Lateral Movement	0xdf.gitlab.io
Mark Horizontall as done	Horizontall HackTheBox Show spoilers strapi-cve-2019-18818 strapi-rce-cve-2019-19609 port-forwarding laravel-ignition-rce cve-2021-3129	Linux	Easy	Finding and Evaluating Public Exploits	HackIndex.io
Mark Querier as done	Querier HackTheBox Show spoilers smb-enumeration macro-analysis mssql-enumeration xp-dirtree-ntlm-capture responder hash-cracking xp-cmdshell gpp-password	Windows	Medium	Active Directory Authentication Attacks	0xdf.gitlab.io
Mark Safe as done	Safe HackTheBox Show spoilers buffer-overflow return-oriented-programming ret2system keepass-cracking password-cracking	Linux	Easy	Adapting Public Exploits	0xdf.gitlab.io
Mark Soccer as done	Soccer HackTheBox Show spoilers tiny-file-manager-default-creds file-upload-webshell websocket-sql-injection doas-dstat-privesc	Linux	Easy	SQL Injection Attacks	0xdf.gitlab.io
Mark Bratarina as done	Bratarina Proving Grounds	Linux	Easy	Common Web Application Attacks	Not allowed
Mark Tr0ll 3 as done	Tr0ll 3 Vulnhub Show spoilers wpa-handshake-cracking password-reuse sudo-service-abuse user-agent-filter-bypass ssh-private-key viminfo-credentials sudo-binary-replacement	Linux	Easy	Linux Privilege Escalation	www.codewrecks.com
Mark Busqueda as done	Busqueda HackTheBox Show spoilers searchor-command-injection-cve-2023-43364 git-config-credentials docker-enumeration sudo-script-path-hijack	Linux	Easy	Common Web Application Attacks	0xdf.gitlab.io
Mark Escape as done	Escape HackTheBox Show spoilers smb-enumeration mssql xp-dirtree net-ntlmv2-capture password-cracking adcs-esc1 pass-the-hash	Windows	Medium	Active Directory Lateral Movement	0xdf.gitlab.io
Mark StreamIO as done	StreamIO HackTheBox Show spoilers sql-injection password-cracking lfi rfi firefox-credential-theft acl-abuse laps	Windows	Medium	Active Directory Authentication Attacks	0xdf.gitlab.io
Mark Swagshop as done	Swagshop HackTheBox Show spoilers magento-exploit sql-injection php-object-injection remote-code-execution sudo-misconfiguration gtfobins	Linux	Easy	SQL Injection Attacks	0xdf.gitlab.io
Mark Ice as done	Ice TryHackMe Show spoilers icecast-exploit cve-2004-1561 metasploit insecure-service-permissions service-binary-hijack hash-dumping	Windows	Easy	Finding and Evaluating Public Exploits	HackIndex.io
Mark Billy Madison as done	Billy Madison Vulnhub Show spoilers port-knocking smb-enumeration packet-capture-analysis wpa-cracking password-brute-force suid cron-job	Linux	Intermediate	Linux Privilege Escalation	g0blin.co.uk
Mark Brainpan 1 as done	Brainpan 1 Vulnhub Show spoilers buffer-overflow fuzzing jmp-esp reverse-shell sudo-misconfiguration man-pager-escape	Linux	Medium	Adapting Public Exploits	github.com
Mark Blackfield as done	Blackfield HackTheBox Show spoilers smb-enumeration as-rep-roasting password-cracking rpc-password-reset lsass-dump ntds-dit-extraction sebackupprivilege	Windows	Hard	Active Directory Authentication Attacks	HackIndex.io
Mark Titanic as done	Titanic HackTheBox Show spoilers local-file-inclusion gitea-config-disclosure sqlite-database-dump hash-cracking imagemagick-cve-2024-41817	Linux	Easy	SQL Injection Attacks	0xdf.gitlab.io
Mark ClamAV as done	ClamAV Proving Grounds	Linux	Easy	Common Web Application Attacks	Not allowed
Mark Fail as done	Fail Proving Grounds	Linux	Intermediate	Linux Privilege Escalation	Not allowed
Mark Brainstorm as done	Brainstorm TryHackMe Show spoilers ftp-anonymous-access reverse-engineering buffer-overflow stack-based-buffer-overflow jmp-esp shellcode-injection	Windows	Medium	Adapting Public Exploits	steflan-security.com
Mark Gatekeeper as done	Gatekeeper TryHackMe Show spoilers smb-enumeration buffer-overflow stack-based-buffer-overflow jmp-esp firefox-credential-dumping password-decryption	Windows	Medium	Active Directory Lateral Movement	steflan-security.com
Mark Ignite as done	Ignite TryHackMe Show spoilers web-enumeration fuel-cms-rce cve-2018-16763 remote-code-execution cleartext-credentials credential-reuse	Linux	Easy	Finding and Evaluating Public Exploits	HackIndex.io
Mark Chatterbox as done	Chatterbox HackTheBox Show spoilers achat-exploit seh-buffer-overflow public-exploit-modification credential-reuse registry-autologon-creds	Windows	Medium	Adapting Public Exploits	HackIndex.io
Mark CozyHosting as done	CozyHosting HackTheBox Show spoilers spring-boot-actuator session-hijack command-injection postgresql-credential-dump hash-cracking ssh-sudo-gtfobins	Linux	Easy	Common Web Application Attacks	0xdf.gitlab.io
Mark Flight as done	Flight HackTheBox Show spoilers lfi-vhost responder-ntlm-capture password-spray kerberoast iis-webshell dll-hijack	Windows	Hard	Active Directory Authentication Attacks	0xdf.gitlab.io
Mark Giddy as done	Giddy HackTheBox Show spoilers sql-injection net-ntlmv2-capture responder hash-cracking winrm unifi-video-privesc	Windows	Medium	Active Directory Lateral Movement	0xdf.gitlab.io
Mark Internal as done	Internal Proving Grounds	Windows	Easy	Finding and Evaluating Public Exploits	Not allowed
Mark HackLAB: Vulnix as done	HackLAB: Vulnix Vulnhub Show spoilers smtp-user-enumeration ssh-brute-force nfs-misconfiguration sudo-misconfiguration	Linux	Intermediate	Linux Privilege Escalation	www.abatchy.com
Mark VulnOS 2 as done	VulnOS 2 Vulnhub Show spoilers sql-injection credential-disclosure password-cracking kernel-exploit	Linux	Easy	SQL Injection Attacks	g0blin.co.uk
Mark Irked as done	Irked HackTheBox Show spoilers unrealircd-backdoor cve-2010-2075 steganography password-reuse suid	Linux	Easy	Finding and Evaluating Public Exploits	0xdf.gitlab.io
Mark Jeeves as done	Jeeves HackTheBox Show spoilers jenkins-script-console groovy-rce keepass-cracking pass-the-hash juicypotato token-impersonation alternate-data-streams	Windows	Medium	Active Directory Lateral Movement	0xdf.gitlab.io
Mark Mantis as done	Mantis HackTheBox Show spoilers port-enumeration mssql-enumeration credential-disclosure ms14-068 kerberos-ticket-forgery goldenpac	Windows	Hard	Active Directory Authentication Attacks	0xdf.gitlab.io
Mark Node as done	Node HackTheBox Show spoilers api-enumeration information-disclosure password-cracking mongodb buffer-overflow	Linux	Medium	Adapting Public Exploits	0xdf.gitlab.io
Mark Hetemit as done	Hetemit Proving Grounds	Linux	Intermediate	Linux Privilege Escalation	Not allowed
Mark /dev/random: scream as done	/dev/random: scream Vulnhub Show spoilers anonymous-ftp freesshd-authentication-bypass sql-injection file-upload web-shell	Windows XP	Intermediate	SQL Injection Attacks	rgolebiowski.blogspot.com
Mark DC 6 as done	DC 6 Vulnhub Show spoilers wordpress-enumeration wpscan password-bruteforce command-injection plaintext-credentials sudo-misconfiguration nmap-gtfobins	Linux	Easy	Common Web Application Attacks	www.aldeid.com
Mark Keeper as done	Keeper HackTheBox Show spoilers request-tracker-default-creds keepass-dump-cve-2023-32784 putty-key-conversion ssh-key-auth	Linux	Easy	Finding and Evaluating Public Exploits	0xdf.gitlab.io
Mark Monteverde as done	Monteverde HackTheBox Show spoilers user-enumeration password-spraying smb-enumeration credentials-in-share winrm azure-ad-connect-abuse dcsync	Windows	Medium	Active Directory Lateral Movement	0xdf.gitlab.io
Mark October as done	October HackTheBox Show spoilers file-upload blacklist-bypass webshell buffer-overflow suid	Linux	Medium	Adapting Public Exploits	0xdf.gitlab.io
Mark Search as done	Search HackTheBox Show spoilers credential-disclosure kerberoasting password-spraying gmsa-abuse acl-abuse pfx-certificate-auth powershell-web-access	Windows	Hard	Active Directory Authentication Attacks	0xdf.gitlab.io
Mark Hunit as done	Hunit Proving Grounds	Linux	Intermediate	Linux Privilege Escalation	Not allowed
Mark Breach 3.0.1 as done	Breach 3.0.1 Vulnhub Show spoilers web-enumeration sql-injection shellshock port-knocking sudo-misconfiguration pivoting	Linux	Intermediate	SQL Injection Attacks	–
Mark DEFCON Toronto Galahad as done	DEFCON Toronto Galahad Vulnhub Show spoilers javascript-deobfuscation robots-txt steganography http-header-spoofing python-bytecode-decompilation port-knocking	Linux	Easy	Common Web Application Attacks	github.com
Mark APT as done	APT HackTheBox Show spoilers ipv6-enumeration ms-rpc-registry-dump ntlm-hash-cracking responder ntlm-relay	Windows	Insane	Active Directory Authentication Attacks	HackIndex.io
Mark Knife as done	Knife HackTheBox Show spoilers php-8.1.0-dev-backdoor user-agentt-header-rce reverse-shell sudo-misconfiguration chef-knife-privesc	Linux	Easy	Finding and Evaluating Public Exploits	0xdf.gitlab.io
Mark Resolute as done	Resolute HackTheBox Show spoilers rpc-enumeration password-spraying winrm powershell-transcript dnsadmins-abuse dll-injection	Windows	Medium	Active Directory Lateral Movement	0xdf.gitlab.io
Mark Sneaky as done	Sneaky HackTheBox Show spoilers sql-injection snmp-enumeration ipv6-pivot suid-buffer-overflow	Linux	Medium	Adapting Public Exploits	0xdf.gitlab.io
Mark Cockpit as done	Cockpit Proving Grounds	Linux	Intermediate	SQL Injection Attacks	Not allowed
Mark Sorcerer as done	Sorcerer Proving Grounds	Linux	Intermediate	Linux Privilege Escalation	Not allowed
Mark DerpNStink 1 as done	DerpNStink 1 Vulnhub Show spoilers wordpress-enumeration default-credentials plugin-file-upload hash-cracking pcap-analysis sudo-wildcard privilege-escalation	Linux	Easy	Common Web Application Attacks	–
Mark Devel as done	Devel HackTheBox Show spoilers anonymous-ftp file-upload aspx-webshell kernel-exploit ms11-046	Windows	Easy	Common Web Application Attacks	HackIndex.io
Mark Laboratory as done	Laboratory HackTheBox Show spoilers gitlab-cve-2020-10977 arbitrary-file-read-to-rce path-hijack suid-abuse docker	Linux	Easy	Finding and Evaluating Public Exploits	0xdf.gitlab.io
Mark Multimaster as done	Multimaster HackTheBox Show spoilers sql-injection waf-bypass password-cracking vscode-cef-debug dll-reversing as-rep-roasting generic-write-abuse server-operators-abuse	Windows	Insane	Active Directory Authentication Attacks	0xdf.gitlab.io
Mark Scrambled as done	Scrambled HackTheBox Show spoilers kerberos-only-auth kerberoasting silver-ticket mssql reverse-engineering dotnet-deserialization	Windows	Medium	Active Directory Lateral Movement	0xdf.gitlab.io
Mark Pebbles as done	Pebbles Proving Grounds	Linux	Intermediate	SQL Injection Attacks	Not allowed
Mark Tr0ll 2 as done	Tr0ll 2 Vulnhub Show spoilers anonymous-ftp steganography zip-password-cracking rbash-escape buffer-overflow suid	Linux	Medium	Adapting Public Exploits	highon.coffee
Mark W34kn3ss 1 as done	W34kn3ss 1 Vulnhub Show spoilers ssl-certificate-enumeration weak-openssl-key ssh-key-cracking python-decompilation hardcoded-credentials sudo	Linux	Intermediate	Linux Privilege Escalation	www.hackingarticles.in
Mark Doctor as done	Doctor HackTheBox Show spoilers ssti jinja2-template-injection log-analysis splunk-universal-forwarder splunkwhisperer2	Linux	Easy	Common Web Application Attacks	HackIndex.io
Mark Silo as done	Silo HackTheBox Show spoilers oracle-tns-enumeration sid-guessing credential-bruteforce odat-webshell-upload memory-dump-analysis pass-the-hash	Windows	Medium	Active Directory Lateral Movement	HackIndex.io
Mark Sizzle as done	Sizzle HackTheBox Show spoilers smb-enumeration scf-file-attack responder-ntlm-capture adcs-certificate-abuse kerberoasting applocker-bypass dcsync	Windows	Insane	Active Directory Authentication Attacks	0xdf.gitlab.io
Mark Levram as done	Levram Proving Grounds	Linux	Easy	Finding and Evaluating Public Exploits	Not allowed
Mark Brainpan as done	Brainpan Vulnhub Show spoilers buffer-overflow stack-based-buffer-overflow jmp-esp wine sudo-misconfiguration shell-escape gtfobins	Linux	Hard	Adapting Public Exploits	steflan-security.com
Mark Digitalworld.local (Development) as done	Digitalworld.local (Development) Vulnhub Show spoilers web-enumeration exposed-credentials hash-cracking lshell-escape password-reuse sudo-vim gtfobins	Linux	Medium	Linux Privilege Escalation	benheater.com
Mark pWnOS 2.0 as done	pWnOS 2.0 Vulnhub Show spoilers sql-injection union-based-sql-injection into-outfile-webshell php-reverse-shell credential-reuse	Linux	Intermediate	SQL Injection Attacks	blog.g0tmi1k.com
Mark Editorial as done	Editorial HackTheBox Show spoilers ssrf-image-upload internal-api-leak git-log-credential-hunt python-library-hijack sudo-git-abuse	Linux	Easy	Common Web Application Attacks	0xdf.gitlab.io
Mark Ellingson as done	Ellingson HackTheBox Show spoilers python-debug-console-rce hash-cracking suid-buffer-overflow rop-exploitation aslr-bypass	Linux	Hard	Adapting Public Exploits	0xdf.gitlab.io
Mark Lightweight as done	Lightweight HackTheBox Show spoilers ldap-sniffing packet-capture password-cracking linux-capabilities credential-harvesting	Linux	Medium	Linux Privilege Escalation	0xdf.gitlab.io
Mark LinkVortex as done	LinkVortex HackTheBox Show spoilers exposed-git-directory ghost-cms-cve-2023-40028 symlink-arbitrary-file-read sudo-script-symlink-abuse	Linux	Easy	Finding and Evaluating Public Exploits	0xdf.gitlab.io
Mark Craft as done	Craft Proving Grounds	Windows	Hard	Active Directory Lateral Movement	Not allowed
Mark QuackerJack as done	QuackerJack Proving Grounds	Linux	Intermediate	SQL Injection Attacks	Not allowed
Mark Omni as done	Omni HackTheBox Show spoilers windows-iot-core sirep-rat remote-code-execution registry-dump windows-device-portal powershell-credential-decryption	Windows	Easy	Finding and Evaluating Public Exploits	0xdf.gitlab.io
Mark Heist as done	Heist Proving Grounds	Windows	Hard	Active Directory Lateral Movement	Not allowed
Mark EVM 1 as done	EVM 1 Vulnhub Show spoilers wordpress-enumeration wpscan password-bruteforce wp-admin-shell-upload credential-disclosure password-reuse	Linux	Easy	Common Web Application Attacks	www.hackingarticles.in
Mark Node 1 as done	Node 1 Vulnhub Show spoilers exposed-api information-disclosure hash-cracking zip-password-cracking source-code-review suid-binary-abuse kernel-exploit	Linux	Medium	Linux Privilege Escalation	maysec.github.io
Mark Pinkys Palace v1 as done	Pinkys Palace v1 Vulnhub Show spoilers squid-proxy-pivoting sql-injection hash-cracking ssh-private-key suid buffer-overflow	Linux	Hard	Adapting Public Exploits	www.hackingarticles.in
Mark SkyTower 1 as done	SkyTower 1 Vulnhub Show spoilers sql-injection waf-bypass squid-proxy-pivot credentials-in-config sudo-misconfiguration	Linux	Intermediate	SQL Injection Attacks	highon.coffee
Mark Cache as done	Cache HackTheBox Show spoilers openemr-sqli auth-bypass-rce memcached-credential-dump docker-group-privesc	Linux	Medium	SQL Injection Attacks	0xdf.gitlab.io
Mark OpenAdmin as done	OpenAdmin HackTheBox Show spoilers opennetadmin-rce credential-reuse ssh-key-cracking sudo-nano gtfobins	Linux	Easy	Finding and Evaluating Public Exploits	HackIndex.io
Mark Exfiltrated as done	Exfiltrated Proving Grounds	Linux	Easy	Common Web Application Attacks	HackIndex.io
Mark Nagoya as done	Nagoya Proving Grounds	Windows	Hard	Active Directory Lateral Movement	Not allowed
Mark Shrek as done	Shrek TryHackMe Show spoilers king-of-the-hill robots-txt-disclosure ssh-private-key information-disclosure sgid-binary gdb-exploitation	Linux	Medium	Linux Privilege Escalation	oscp.cyberdefendersprogram.com
Mark Pinkys Palace v2 as done	Pinkys Palace v2 Vulnhub Show spoilers port-knocking sql-injection lfi credential-cracking buffer-overflow suid	Linux	Hard	Adapting Public Exploits	www.infosecinstitute.com
Mark Cronos as done	Cronos HackTheBox Show spoilers dns-zone-transfer vhost-enumeration sql-injection command-injection cron-job	Linux	Medium	SQL Injection Attacks	0xdf.gitlab.io
Mark Optimum as done	Optimum HackTheBox Show spoilers hfs-rce cve-2014-6287 kernel-exploit ms16-032 token-impersonation	Windows	Easy	Finding and Evaluating Public Exploits	0xdf.gitlab.io
Mark SolidState as done	SolidState HackTheBox Show spoilers apache-james-exploit default-credentials pop3-enumeration rbash-escape cron-job	Linux	Medium	Linux Privilege Escalation	0xdf.gitlab.io
Mark Fanatastic as done	Fanatastic Proving Grounds	Linux	Easy	Common Web Application Attacks	Not allowed
Mark Pinkys Palace v4 as done	Pinkys Palace v4 Vulnhub Show spoilers information-disclosure directory-traversal buffer-overflow ret2libc rop-chain kernel-module-exploitation	Linux	Hard	Adapting Public Exploits	devl00p.github.io
Mark Bankrobber as done	Bankrobber HackTheBox Show spoilers xss sql-injection cookie-theft command-injection port-forwarding buffer-overflow	Windows	Insane	Adapting Public Exploits	0xdf.gitlab.io
Mark FriendZone as done	FriendZone HackTheBox Show spoilers dns-zone-transfer smb-enumeration local-file-inclusion credential-reuse python-library-hijacking cron-job	Linux	Easy	Common Web Application Attacks	HackIndex.io
Mark Postman as done	Postman HackTheBox Show spoilers redis-exploitation ssh-key-injection ssh-key-cracking webmin-rce cve-2019-12840 password-reuse	Linux	Easy	Finding and Evaluating Public Exploits	0xdf.gitlab.io
Mark UpDown as done	UpDown HackTheBox Show spoilers exposed-git-directory dev-vhost-discovery php-filter-wrapper special-test-header-bypass easy_install-sudo-gtfobins suid-abuse	Linux	Medium	Linux Privilege Escalation	0xdf.gitlab.io
Mark DC 9 as done	DC 9 Vulnhub Show spoilers sql-injection hash-cracking local-file-inclusion port-knocking ssh-bruteforce sudo-misconfiguration etc-passwd-write	Linux	Medium	SQL Injection Attacks	www.hackingarticles.in
Mark Jail as done	Jail HackTheBox Show spoilers buffer-overflow selinux-sandbox-escape nfs-no-root-squash rvim-escape rar-cracking rsa-key-recovery	Linux	Insane	Adapting Public Exploits	0xdf.gitlab.io
Mark Remote as done	Remote HackTheBox Show spoilers nfs-mount hash-cracking umbraco-rce teamviewer-password-decryption	Windows	Easy	Finding and Evaluating Public Exploits	0xdf.gitlab.io
Mark Peppo as done	Peppo Proving Grounds	Linux	Hard	Linux Privilege Escalation	Not allowed
Mark DevGuru 1 as done	DevGuru 1 Vulnhub Show spoilers git-source-disclosure october-cms-rce database-credential-reuse gitea-git-hooks-rce cve-2019-14287 sudo-sqlite3	Linux	Medium	SQL Injection Attacks	www.hackingarticles.in
Mark FristiLeaks 1.3 as done	FristiLeaks 1.3 Vulnhub Show spoilers directory-enumeration base64-decoding file-upload cron-job sudo-misconfiguration	Linux	Easy	Common Web Application Attacks	www.hackingarticles.in
Mark Granny as done	Granny HackTheBox Show spoilers iis-webdav webdav-put http-move aspx-webshell churrasco token-impersonation	Windows	Easy	Common Web Application Attacks	0xdf.gitlab.io
Mark Jarvis as done	Jarvis HackTheBox Show spoilers sql-injection waf-bypass phpmyadmin-rce command-injection sudo-misconfiguration systemctl-gtfobins	Linux	Medium	SQL Injection Attacks	HackIndex.io
Mark Shocker as done	Shocker HackTheBox Show spoilers directory-enumeration cgi-bin shellshock cve-2014-6271 sudo-perl	Linux	Easy	Finding and Evaluating Public Exploits	0xdf.gitlab.io
Mark Magic as done	Magic HackTheBox Show spoilers sql-injection file-upload php-webshell credential-reuse path-hijacking suid	Linux	Medium	SQL Injection Attacks	HackIndex.io
Mark Tomghost as done	Tomghost TryHackMe Show spoilers ghostcat-cve-2020-1938 tomcat-file-read credential-disclosure gpg-decryption sudo-zip-gtfobins	Linux	Easy	Finding and Evaluating Public Exploits	–
Mark Hack Me Please as done	Hack Me Please Vulnhub Show spoilers seeddms-exploitation config-file-disclosure mysql-enumeration file-upload credential-reuse sudo-misconfiguration	Linux	Easy	Common Web Application Attacks	github.com
Mark Mango as done	Mango HackTheBox Show spoilers nosql-injection mongodb credential-extraction password-reuse jjs-suid	Linux	Medium	SQL Injection Attacks	HackIndex.io
Mark Traverxec as done	Traverxec HackTheBox Show spoilers nostromo-rce cve-2019-16278 ssh-key-cracking sudo-journalctl gtfobins privilege-escalation	Linux	Easy	Finding and Evaluating Public Exploits	0xdf.gitlab.io
Mark Helpdesk as done	Helpdesk Proving Grounds	Windows	Easy	Common Web Application Attacks	Not allowed
Mark Jerry as done	Jerry HackTheBox Show spoilers tomcat-manager default-credentials war-file-upload reverse-shell	Windows	Easy	Common Web Application Attacks	HackIndex.io
Mark Monitored as done	Monitored HackTheBox Show spoilers snmp-credential-leak nagios-xi-api-abuse sql-injection sudo-service-privesc	Linux	Medium	SQL Injection Attacks	0xdf.gitlab.io
Mark Twiggy as done	Twiggy Proving Grounds	Linux	Easy	Finding and Evaluating Public Exploits	HackIndex.io
Mark Lame as done	Lame HackTheBox Show spoilers smb-enumeration cve-2007-2447 samba-usermap-script command-injection distcc	Linux	Easy	Common Web Application Attacks	0xdf.gitlab.io
Mark Valentine as done	Valentine HackTheBox Show spoilers heartbleed cve-2014-0160 ssh-key tmux-hijack dirtycow	Linux	Easy	Finding and Evaluating Public Exploits	0xdf.gitlab.io
Mark OZ as done	OZ Vulnhub Show spoilers sql-injection hash-cracking server-side-template-injection port-knocking portainer-abuse docker-escape	Linux	Medium	SQL Injection Attacks	maysec.github.io
Mark Wombo as done	Wombo Proving Grounds	Linux	Easy	Finding and Evaluating Public Exploits	Not allowed
Mark LemonSqueezy as done	LemonSqueezy Vulnhub Show spoilers wordpress-enumeration password-brute-force phpmyadmin-rce webshell-upload cron-job writable-file	Linux	Easy	Common Web Application Attacks	www.hackingarticles.in
Mark Readme 1 as done	Readme 1 Vulnhub Show spoilers adminer-file-read cve-2021-43008 mysql-load-data-local sql-injection credential-disclosure sudo-misconfiguration	Linux	Medium	SQL Injection Attacks	github.com
Mark Love as done	Love HackTheBox Show spoilers ssrf voting-system-rce file-upload alwaysinstallelevated malicious-msi	Windows	Easy	Common Web Application Attacks	HackIndex.io
Mark SecNotes as done	SecNotes HackTheBox Show spoilers second-order-sql-injection csrf smb-share-write php-webshell credential-reuse wsl-bash-history	Windows	Medium	SQL Injection Attacks	HackIndex.io
Mark Year of the Rabbit as done	Year of the Rabbit TryHackMe Show spoilers ftp-enumeration steganography brainfuck-decoding sudo-vi-version-bypass sudo-cve-2019-14287	Linux	Easy	Finding and Evaluating Public Exploits	–
Mark Luanne as done	Luanne HackTheBox Show spoilers lua-command-injection os-command-injection ssh-key-access doas-privesc netpgp-decryption backup-file-cracking	NetBSD	Easy	Common Web Application Attacks	0xdf.gitlab.io
Mark Unattended as done	Unattended HackTheBox Show spoilers nginx-sql-injection local-file-inclusion php-session-poisoning initramfs-privesc	Linux	Medium	SQL Injection Attacks	0xdf.gitlab.io
Mark Billyboss as done	Billyboss Proving Grounds	Windows	Intermediate	Finding and Evaluating Public Exploits	Not allowed
Mark Writer as done	Writer HackTheBox Show spoilers sql-injection authentication-bypass command-injection hash-cracking postfix-filter-injection apt-config-injection	Linux	Medium	SQL Injection Attacks	0xdf.gitlab.io
Mark Bullybox as done	Bullybox Proving Grounds	Linux	Intermediate	Finding and Evaluating Public Exploits	Not allowed
Mark Misdirection 1 as done	Misdirection 1 Vulnhub Show spoilers directory-bruteforce web-shell sudo-misconfiguration writable-etc-passwd privilege-escalation	Linux	Easy	Common Web Application Attacks	www.hackingarticles.in
Mark Breadcrumbs as done	Breadcrumbs HackTheBox Show spoilers directory-traversal cookie-forgery jwt-forgery file-upload sql-injection sticky-notes-decryption credential-hunting	Windows	Hard	SQL Injection Attacks	0xdf.gitlab.io
Mark Netmon as done	Netmon HackTheBox Show spoilers ftp-anonymous prtg-network-monitor credential-reuse command-injection	Windows	Easy	Common Web Application Attacks	0xdf.gitlab.io
Mark Flu as done	Flu Proving Grounds	Linux	Intermediate	Finding and Evaluating Public Exploits	Not allowed
Mark Control as done	Control HackTheBox Show spoilers http-header-spoofing sql-injection webshell-upload hash-cracking weak-service-permissions service-registry-abuse	Windows	Hard	SQL Injection Attacks	0xdf.gitlab.io
Mark Networked as done	Networked HackTheBox Show spoilers file-upload-bypass double-extension command-injection cron-job sudo-misconfiguration ifcfg-injection	Linux	Easy	Common Web Application Attacks	0xdf.gitlab.io
Mark LaVita as done	LaVita Proving Grounds	Linux	Intermediate	Finding and Evaluating Public Exploits	Not allowed
Mark Nibbles as done	Nibbles HackTheBox Show spoilers nibbleblog default-credentials file-upload cve-2015-6967 sudo-misconfiguration	Linux	Easy	Common Web Application Attacks	0xdf.gitlab.io
Mark Marketing as done	Marketing Proving Grounds	Linux	Intermediate	Finding and Evaluating Public Exploits	Not allowed
Mark Daily Bugle as done	Daily Bugle TryHackMe Show spoilers joomla-sqli-cve-2017-8917 hash-cracking password-reuse yum-sudo-gtfobins	Linux	Hard	SQL Injection Attacks	–
Mark Falafel as done	Falafel HackTheBox Show spoilers sql-injection php-type-juggling file-upload video-group-framebuffer disk-group-abuse	Linux	Hard	SQL Injection Attacks	0xdf.gitlab.io
Mark Paper as done	Paper HackTheBox Show spoilers wordpress-secret-disclosure cve-2019-17671 rocketchat-bot path-traversal polkit-cve-2021-3560	Linux	Easy	Common Web Application Attacks	0xdf.gitlab.io
Mark Metasploitable 3 as done	Metasploitable 3 Vulnhub Show spoilers elasticsearch-rce jenkins-script-console-rce glassfish-war-deployment weak-credentials wordpress-exploitation token-impersonation	Windows	Intermediate	Finding and Evaluating Public Exploits	github.com
Mark Monitors as done	Monitors HackTheBox Show spoilers wordpress-plugin-lfi cacti-sql-injection cacti-rce apache-solr-rce privileged-container-escape kernel-module-loading	Linux	Hard	SQL Injection Attacks	0xdf.gitlab.io
Mark PyLoader as done	PyLoader Proving Grounds	Linux	Intermediate	Finding and Evaluating Public Exploits	Not allowed
Mark Photographer 1 as done	Photographer 1 Vulnhub Show spoilers smb-enumeration koken-cms-file-upload webshell-upload suid gtfobins-php	Linux	Easy	Common Web Application Attacks	www.hackingarticles.in
Mark Previse as done	Previse HackTheBox Show spoilers broken-access-control execute-after-redirect command-injection password-cracking path-hijacking sudo-misconfiguration	Linux	Easy	Common Web Application Attacks	0xdf.gitlab.io
Mark Seventeen as done	Seventeen HackTheBox Show spoilers boolean-based-sql-injection vhost-enumeration file-upload-rce roundcube-lfi npm-registry-credentials malicious-npm-package sudo-misconfiguration	Linux	Hard	SQL Injection Attacks	0xdf.gitlab.io
Mark Sybaris as done	Sybaris Proving Grounds	Linux	Intermediate	Finding and Evaluating Public Exploits	Not allowed
Mark ZenPhoto as done	ZenPhoto Proving Grounds	Linux	Intermediate	Finding and Evaluating Public Exploits	Not allowed
Mark RickdiculouslyEasy 1 as done	RickdiculouslyEasy 1 Vulnhub Show spoilers ftp-anonymous information-disclosure command-injection zip-password-cracking ssh sudo-privilege-escalation	Linux	Easy	Common Web Application Attacks	–
Mark Bastard as done	Bastard HackTheBox Show spoilers drupal-enumeration drupalgeddon2 cve-2018-7600 unauthenticated-rce ms15-051 kernel-exploit	Windows	Medium	Finding and Evaluating Public Exploits	HackIndex.io
Mark Sar 1 as done	Sar 1 Vulnhub Show spoilers directory-enumeration sar2html-rce command-injection cron-job writable-script	Linux	Easy	Common Web Application Attacks	www.hackingarticles.in
Mark Builder as done	Builder HackTheBox Show spoilers jenkins-cve-2024-23897 arbitrary-file-read jenkins-credential-decrypt ssh-key-abuse	Linux	Medium	Finding and Evaluating Public Exploits	0xdf.gitlab.io
Mark Sau as done	Sau HackTheBox Show spoilers request-baskets-ssrf-cve-2023-27163 maltrail-command-injection systemctl-sudo-gtfobins	Linux	Easy	Common Web Application Attacks	0xdf.gitlab.io
Mark ScriptKiddie as done	ScriptKiddie HackTheBox Show spoilers msfvenom-apk-template-injection cve-2020-7384 command-injection sudo-msfconsole sudo-misconfiguration	Linux	Easy	Common Web Application Attacks	0xdf.gitlab.io
Mark Election 1 as done	Election 1 Vulnhub Show spoilers web-enumeration directory-brute-force log-file-credential-leak ssh-login suid cve-2019-12181	Linux	Medium	Finding and Evaluating Public Exploits	www.hackingarticles.in
Mark Hawk as done	Hawk HackTheBox Show spoilers anonymous-ftp openssl-decryption drupal password-reuse h2-database-rce	Linux	Medium	Finding and Evaluating Public Exploits	0xdf.gitlab.io
Mark Sense as done	Sense HackTheBox Show spoilers directory-enumeration default-credentials pfsense command-injection cve-2014-4688	FreeBSD	Easy	Common Web Application Attacks	0xdf.gitlab.io
Mark Meta as done	Meta HackTheBox Show spoilers exiftool-rce imagemagick-exploit cron-job-abuse sudo-env-keep neofetch-privesc	Linux	Medium	Finding and Evaluating Public Exploits	0xdf.gitlab.io
Mark Servmon as done	Servmon HackTheBox Show spoilers ftp-anonymous nvms-1000-lfi directory-traversal ssh port-forwarding nsclient-privilege-escalation	Windows	Easy	Common Web Application Attacks	0xdf.gitlab.io
Mark Shibboleth as done	Shibboleth HackTheBox Show spoilers ipmi-enumeration ipmi-hash-dump hash-cracking zabbix-agent-rce password-reuse mariadb-udf-privesc	Linux	Medium	Finding and Evaluating Public Exploits	0xdf.gitlab.io
Mark Tabby as done	Tabby HackTheBox Show spoilers lfi tomcat-manager-upload war-deployment zip-password-cracking lxd-privilege-escalation	Linux	Easy	Common Web Application Attacks	0xdf.gitlab.io
Mark Steel Mountain as done	Steel Mountain TryHackMe Show spoilers osint rejetto-hfs cve-2014-6287 unquoted-service-path powerup service-exploitation	Windows	Medium	Finding and Evaluating Public Exploits	www.aldeid.com
Mark Thompson as done	Thompson TryHackMe Show spoilers tomcat-manager default-credentials war-file-upload reverse-shell cron-job writable-script	Linux	Easy	Common Web Application Attacks	www.aldeid.com
Mark Teacher as done	Teacher HackTheBox Show spoilers moodle-rce-cve-2018-1133 mysql-credential-dump hash-cracking cron-backup-abuse	Linux	Medium	Finding and Evaluating Public Exploits	0xdf.gitlab.io
Mark Tiki 1 as done	Tiki 1 Vulnhub Show spoilers tikiwiki-cms cve-2020-15906 authentication-bypass information-disclosure sudo-misconfiguration	Linux	Easy	Common Web Application Attacks	github.com
Mark Vulnversity as done	Vulnversity TryHackMe Show spoilers directory-brute-force file-upload-bypass php-reverse-shell suid systemctl-privesc	Linux	Easy	Common Web Application Attacks	www.aldeid.com
Mark Vulnerable Docker 1 as done	Vulnerable Docker 1 Vulnhub Show spoilers shellshock wordpress-rce exposed-docker-api docker-socket-mount chroot-escape container-escape	Linux	Medium	Finding and Evaluating Public Exploits	www.notsosecure.com
Mark Apex as done	Apex Proving Grounds	Linux	Intermediate	Common Web Application Attacks	Not allowed
Mark Web Developer 1 as done	Web Developer 1 Vulnhub Show spoilers pcap-analysis wordpress theme-editor-rce credential-reuse tcpdump-sudo sudo-misconfiguration	Linux	Medium	Finding and Evaluating Public Exploits	–
Mark AuthBy as done	AuthBy Proving Grounds	Windows	Intermediate	Common Web Application Attacks	Not allowed
Mark Internal as done	Internal TryHackMe Show spoilers wordpress-brute-force wp-admin-theme-rce jenkins-pivot ssh-tunneling docker-privesc	Linux	Hard	Finding and Evaluating Public Exploits	–
Mark Boolean as done	Boolean Proving Grounds	Linux	Intermediate	Common Web Application Attacks	Not allowed
Mark Pinkys Palace v3 as done	Pinkys Palace v3 Vulnhub Show spoilers drupalgeddon2 bind-shell hydra-bruteforce port-knocking suid-binary tar-wildcard-injection cron-job	Linux	Hard	Finding and Evaluating Public Exploits	devl00p.github.io
Mark Quick as done	Quick HackTheBox Show spoilers http3-quic esi-injection xslt-rce symlink-race-condition credential-reuse	Linux	Hard	Finding and Evaluating Public Exploits	0xdf.gitlab.io
Mark Breach 2.1 as done	Breach 2.1 Vulnhub Show spoilers stored-xss browser-exploitation ssh-forcecommand-bypass local-file-inclusion sudo-misconfiguration tcpdump-privilege-escalation	Linux	Intermediate	Common Web Application Attacks	g0blin.co.uk
Mark DVR4 as done	DVR4 Proving Grounds	Windows	Intermediate	Common Web Application Attacks	Not allowed
Mark Retro as done	Retro TryHackMe Show spoilers wordpress-enumeration hidden-directory rdp-access cve-2017-0213-com-elevation credential-reuse	Windows	Hard	Finding and Evaluating Public Exploits	–
Mark GoldenEye 1 as done	GoldenEye 1 Vulnhub Show spoilers pop3-enumeration hydra-bruteforce credential-decoding moodle-rce aspell-command-injection steganography kernel-exploit	Linux	Intermediate	Common Web Application Attacks	motasem-notes.net
Mark Kioptrix: 2014 as done	Kioptrix: 2014 Vulnhub Show spoilers pchart-path-traversal user-agent-bypass phptax-rce kernel-exploit	FreeBSD	Intermediate	Common Web Application Attacks	jhalon.github.io
Mark Marshalled as done	Marshalled Proving Grounds	Linux	Intermediate	Common Web Application Attacks	Not allowed
Mark MedJed as done	MedJed Proving Grounds	Windows	Intermediate	Common Web Application Attacks	Not allowed
Mark Mzeeav as done	Mzeeav Proving Grounds	Linux	Intermediate	Common Web Application Attacks	Not allowed
Mark Nibbles as done	Nibbles Proving Grounds	Linux	Intermediate	Common Web Application Attacks	Not allowed
Mark Nukem as done	Nukem Proving Grounds	Linux	Intermediate	Common Web Application Attacks	Not allowed
Mark Ochima as done	Ochima Proving Grounds	Linux	Intermediate	Common Web Application Attacks	Not allowed
Mark Payday as done	Payday Proving Grounds	Linux	Intermediate	Common Web Application Attacks	Not allowed
Mark PC as done	PC Proving Grounds	Linux	Intermediate	Common Web Application Attacks	Not allowed
Mark Pelican as done	Pelican Proving Grounds	Linux	Intermediate	Common Web Application Attacks	HackIndex.io
Mark PwnLab: init as done	PwnLab: init Vulnhub Show spoilers lfi php-filter file-upload credentials-in-config path-hijacking command-injection	Linux	Intermediate	Common Web Application Attacks	www.abatchy.com
Mark Readys as done	Readys Proving Grounds	Linux	Intermediate	Common Web Application Attacks	Not allowed
Mark Roquefort as done	Roquefort Proving Grounds	Linux	Intermediate	Common Web Application Attacks	Not allowed
Mark Shenzi as done	Shenzi Proving Grounds	Windows	Intermediate	Common Web Application Attacks	Not allowed
Mark SickOs 1.2 as done	SickOs 1.2 Vulnhub Show spoilers http-put-method webshell-upload cron-job chkrootkit-exploit	Linux	Intermediate	Common Web Application Attacks	–
Mark Slort as done	Slort Proving Grounds	Windows	Intermediate	Common Web Application Attacks	Not allowed
Mark Snookums as done	Snookums Proving Grounds	Linux	Intermediate	Common Web Application Attacks	Not allowed
Mark Spydersec as done	Spydersec Vulnhub Show spoilers web-recon cookie-manipulation steganography exif-metadata base64-decoding truecrypt-volume-decryption	Linux	Intermediate	Common Web Application Attacks	research.g0blin.co.uk
Mark Stapler 1 as done	Stapler 1 Vulnhub Show spoilers smb-enumeration wordpress-enumeration lfi credential-disclosure sudo-misconfiguration	Linux	Intermediate	Common Web Application Attacks	jhalon.github.io
Mark Temple of Doom as done	Temple of Doom Vulnhub Show spoilers insecure-deserialization nodejs-rce reverse-shell credential-reuse sudo-misconfiguration tcpdump-privesc	Linux	Intermediate	Common Web Application Attacks	www.infosecinstitute.com
Mark Walla as done	Walla Proving Grounds	Linux	Intermediate	Common Web Application Attacks	Not allowed
Mark Wallaby's Nightmare as done	Wallaby's Nightmare Vulnhub Show spoilers command-injection php-reverse-shell sudo-vim irc-bot-abuse iptables-manipulation sudo-misconfiguration	Linux	Intermediate	Common Web Application Attacks	www.abatchy.com
Mark Xposedapi as done	Xposedapi Proving Grounds	Linux	Intermediate	Common Web Application Attacks	Not allowed
Mark Zino as done	Zino Proving Grounds	Linux	Intermediate	Common Web Application Attacks	Not allowed
Mark Bart as done	Bart HackTheBox Show spoilers vhost-enumeration username-enumeration password-brute-force log-poisoning lfi autologon-credentials	Windows	Medium	Common Web Application Attacks	0xdf.gitlab.io
Mark Bitlab as done	Bitlab HackTheBox Show spoilers gitlab-enumeration javascript-deobfuscation webshell-deploy postgresql-credential-dump git-hook-abuse sudo-git-pull	Linux	Medium	Common Web Application Attacks	0xdf.gitlab.io
Mark Book as done	Book HackTheBox Show spoilers sql-truncation stored-xss local-file-read ssh-key-abuse logrotten cron-job	Linux	Medium	Common Web Application Attacks	0xdf.gitlab.io
Mark Breach 1 as done	Breach 1 Vulnhub Show spoilers information-disclosure ssl-decryption pcap-analysis keystore-cracking tomcat-war-upload metadata-analysis cron-job sudo-misconfiguration	Linux	Medium	Common Web Application Attacks	www.hackingarticles.in
Mark Celestial as done	Celestial HackTheBox Show spoilers nodejs-deserialization cookie-tampering-rce cron-abuse	Linux	Medium	Common Web Application Attacks	0xdf.gitlab.io
Mark Conceal as done	Conceal HackTheBox Show spoilers snmp-enumeration ipsec-vpn ike-scan ftp-upload asp-webshell juicypotato	Windows	Medium	Common Web Application Attacks	HackIndex.io
Mark DevOops as done	DevOops HackTheBox Show spoilers xxe file-upload ssh-key-abuse git-history information-disclosure	Linux	Medium	Common Web Application Attacks	0xdf.gitlab.io
Mark Digitalworld.local (Bravery) as done	Digitalworld.local (Bravery) Vulnhub Show spoilers nfs-enumeration smb-enumeration cuppa-cms remote-file-inclusion php-reverse-shell suid-cp etc-passwd-write	Linux	Medium	Common Web Application Attacks	www.hackingarticles.in
Mark Digitalworld.local (FALL) as done	Digitalworld.local (FALL) Vulnhub Show spoilers web-enumeration parameter-fuzzing local-file-inclusion ssh-private-key bash-history credential-reuse sudo-misconfiguration	Linux	Medium	Common Web Application Attacks	www.hackingarticles.in
Mark Digitalworld.local (JOY) as done	Digitalworld.local (JOY) Vulnhub Show spoilers anonymous-ftp proftpd-mod-copy ftp-upload credential-harvesting sudo-misconfiguration script-abuse	Linux	Medium	Common Web Application Attacks	www.hackingarticles.in
Mark Digitalworld.local (Mercy v2) as done	Digitalworld.local (Mercy v2) Vulnhub Show spoilers smb-enumeration port-knocking local-file-inclusion tomcat-manager war-upload writable-cron weak-credentials	Linux	Medium	Common Web Application Attacks	www.hackingarticles.in
Mark Djinn 1 as done	Djinn 1 Vulnhub Show spoilers ftp-anonymous command-injection sudo-misconfiguration python-eval-injection environment-variable-injection privilege-escalation	Linux	Medium	Common Web Application Attacks	–
Mark Dynstr as done	Dynstr HackTheBox Show spoilers command-injection dns-manipulation ssh-key-abuse wildcard-injection information-disclosure	Linux	Medium	Common Web Application Attacks	0xdf.gitlab.io
Mark Escalate_Linux 1 as done	Escalate_Linux 1 Vulnhub Show spoilers command-injection suid sudo-misconfiguration cron-job path-hijacking writable-passwd ld-preload	Linux	Medium	Common Web Application Attacks	www.hackingarticles.in
Mark Forge as done	Forge HackTheBox Show spoilers ssrf ssrf-filter-bypass open-redirect ftp-via-ssrf ssh-key-theft python-pdb-abuse sudo-misconfiguration	Linux	Medium	Common Web Application Attacks	0xdf.gitlab.io
Mark Glasgow Smile 1.1 as done	Glasgow Smile 1.1 Vulnhub Show spoilers joomla-enumeration cewl-brute-force template-webshell-rce credential-decoding zip-password-cracking cron-job	Linux	Medium	Common Web Application Attacks	www.hackingarticles.in
Mark Hacker Kid 1.0.1 as done	Hacker Kid 1.0.1 Vulnhub Show spoilers dns-zone-transfer xxe-injection ssrf server-side-template-injection linux-capabilities cap-setuid	Linux	Medium	Common Web Application Attacks	–
Mark HackPark as done	HackPark TryHackMe Show spoilers brute-force blogengine-rce cve-2019-6714 file-upload insecure-service-permissions winpeas	Windows	Medium	Common Web Application Attacks	steflan-security.com
Mark Haircut as done	Haircut HackTheBox Show spoilers command-injection argument-injection php-webshell suid screen-exploit	Linux	Medium	Common Web Application Attacks	0xdf.gitlab.io
Mark Json as done	Json HackTheBox Show spoilers dotnet-json-deserialization bearer-token-abuse juicypotato seimpersonateprivilege	Windows	Medium	Common Web Application Attacks	0xdf.gitlab.io
Mark LaCasaDePapel as done	LaCasaDePapel HackTheBox Show spoilers vsftpd-backdoor php-code-execution client-certificate-forgery path-traversal ssh-key-abuse	Linux	Medium	Common Web Application Attacks	0xdf.gitlab.io
Mark Nineveh as done	Nineveh HackTheBox Show spoilers vhost-enumeration credential-bruteforce phpliteadmin-rce local-file-inclusion port-knocking chkrootkit-exploit	Linux	Medium	Common Web Application Attacks	0xdf.gitlab.io
Mark OpenKeyS as done	OpenKeyS HackTheBox Show spoilers local-file-inclusion openbsd-auth-bypass-cve-2019-19521 auth-userokay-abuse suid-privesc	OpenBSD	Medium	Common Web Application Attacks	0xdf.gitlab.io
Mark Ophiuchi as done	Ophiuchi HackTheBox Show spoilers yaml-deserialization snakeyaml tomcat sudo-misconfiguration webassembly relative-path-hijack	Linux	Medium	Common Web Application Attacks	HackIndex.io
Mark Overpass 2 - Hacked as done	Overpass 2 - Hacked TryHackMe Show spoilers pcap-analysis wireshark insecure-file-upload reverse-shell hash-cracking ssh-backdoor suid-binary	Linux	Medium	Common Web Application Attacks	steflan-security.com
Mark Passage as done	Passage HackTheBox Show spoilers cutenews-rce file-upload php-webshell password-cracking ssh-key-reuse usbcreator-dbus	Linux	Medium	Common Web Application Attacks	0xdf.gitlab.io
Mark Pit as done	Pit HackTheBox Show spoilers snmp-enumeration seeddms-authenticated-upload webshell credential-reuse cockpit-access snmp-extend-privesc	Linux	Medium	Common Web Application Attacks	HackIndex.io
Mark Poison as done	Poison HackTheBox Show spoilers local-file-inclusion log-poisoning webshell password-decryption vnc-exploitation port-forwarding	FreeBSD	Medium	Common Web Application Attacks	0xdf.gitlab.io
Mark Popcorn as done	Popcorn HackTheBox Show spoilers directory-bruteforce file-upload-bypass webshell cve-2010-0832 kernel-exploit	Linux	Medium	Common Web Application Attacks	0xdf.gitlab.io
Mark Prime 1 as done	Prime 1 Vulnhub Show spoilers directory-enumeration local-file-inclusion wordpress wpscan php-injection theme-editor kernel-exploit	Linux	Medium	Common Web Application Attacks	www.hackingarticles.in
Mark Ready as done	Ready HackTheBox Show spoilers gitlab-rce ssrf cve-2018-19571 password-reuse docker-privileged-escape	Linux	Medium	Common Web Application Attacks	0xdf.gitlab.io
Mark Relevant as done	Relevant TryHackMe Show spoilers smb-enumeration credential-disclosure web-shell-upload seimpersonateprivilege printspoofer eternalblue	Windows	Medium	Common Web Application Attacks	steflan-security.com
Mark Seal as done	Seal HackTheBox Show spoilers gitbucket-enumeration git-credential-leak nginx-path-normalization tomcat-manager-war-upload ansible-symlink-abuse sudo-ansible-playbook	Linux	Medium	Common Web Application Attacks	0xdf.gitlab.io
Mark Skynet as done	Skynet TryHackMe Show spoilers smb-enumeration brute-force remote-file-inclusion cuppa-cms cron-job tar-wildcard-injection	Linux	Medium	Common Web Application Attacks	steflan-security.com
Mark SneakyMailer as done	SneakyMailer HackTheBox Show spoilers phishing smtp-enumeration imap-access ftp-upload php-webshell pypi-package sudo-pip	Linux	Medium	Common Web Application Attacks	0xdf.gitlab.io
Mark Sniper as done	Sniper HackTheBox Show spoilers lfi rfi webshell credential-reuse malicious-chm phishing	Windows	Medium	Common Web Application Attacks	0xdf.gitlab.io
Mark TartarSauce as done	TartarSauce HackTheBox Show spoilers wordpress-plugin-rfi remote-file-inclusion sudo-tar gtfobins cron-job	Linux	Medium	Common Web Application Attacks	0xdf.gitlab.io
Mark Time as done	Time HackTheBox Show spoilers java-deserialization jackson-databind cve-2019-12384 systemd-timer writable-script	Linux	Medium	Common Web Application Attacks	0xdf.gitlab.io
Mark Vault as done	Vault HackTheBox Show spoilers file-upload-webshell network-pivoting dns-tunneling ssh-port-forwarding gpg-decryption	Linux	Medium	Common Web Application Attacks	0xdf.gitlab.io
Mark Worker as done	Worker HackTheBox Show spoilers svn-enumeration credential-leak azure-devops webshell-upload ci-cd-pipeline-abuse	Windows	Medium	Common Web Application Attacks	0xdf.gitlab.io
Mark Zico2 as done	Zico2 Vulnhub Show spoilers local-file-inclusion phpliteadmin-rce default-credentials password-reuse sudo-tar gtfobins	Linux	Medium	Common Web Application Attacks	download.vulnhub.com
Mark Clue as done	Clue Proving Grounds	Linux	Hard	Common Web Application Attacks	Not allowed
Mark Kotarak as done	Kotarak HackTheBox Show spoilers ssrf tomcat-war-deployment ntds-dit-extraction hash-cracking wget-cve-2016-4971	Linux	Hard	Common Web Application Attacks	0xdf.gitlab.io
Mark Talkative as done	Talkative HackTheBox Show spoilers jamovi-rce bolt-cms template-injection mongodb-abuse rocketchat-webhook docker-pivoting ssh-pivoting	Linux	Hard	Common Web Application Attacks	0xdf.gitlab.io
Mark Vault as done	Vault TryHackMe Show spoilers file-upload-bypass web-shell ssh-tunneling openvpn-config-abuse gpg-decryption firewall-evasion	Linux	Hard	Common Web Application Attacks	0xdf.gitlab.io
Mark Wintermute as done	Wintermute Vulnhub Show spoilers haraka-smtp-rce screen-privilege-escalation pivoting port-forwarding log-poisoning local-file-inclusion	Linux	Hard	Common Web Application Attacks	–
Mark Wreath as done	Wreath TryHackMe Show spoilers webmin-rce pivoting port-forwarding gitstack-rce file-upload antivirus-evasion insecure-service-permissions	Linux/Windows (network)	Hard	Common Web Application Attacks	–
Mark Zipper as done	Zipper Proving Grounds	Linux	Hard	Common Web Application Attacks	Not allowed
Mark Stacked as done	Stacked HackTheBox Show spoilers stored-xss aws-localstack-abuse lambda-command-injection command-injection docker-escape	Linux	Insane	Common Web Application Attacks	0xdf.gitlab.io

HackIndex is independent study material, not affiliated with, endorsed by, or sponsored by OffSec. OSCP® and OffSec® are registered trademarks of OffSec Services Limited. PEN-200 is an OffSec course designation. This study path uses only original HackIndex content and links to OffSec's official pages as the authoritative source.