HackIndex.io
Language
Showing 1–17 of 17
Hard Windows box involving complex exploitation chain with service enumeration, privilege escalation, and advanced attack techniques to achieve full system compromise.
Insane Windows box involving SSRF, certificate services abuse, ADCS ESC1, and Shadow Credentials to escalate through Active Directory.
Insane Windows box involving IPv6 enumeration, RPC abuse, dumping AD secrets via NTDS, and leveraging historical credential reuse to gain SYSTEM.
Exploit SQL injection and LFI on a Linux web server, upload a malicious file for RCE, then escalate privileges to root via SUID binary abuse.
Active Directory box involving PDF metadata extraction, LDAP enumeration, DNS poisoning, and Kerberos abuse to escalate privileges on a Windows domain.
Exploit Jenkins via firewall bypass, extract credentials, abuse Active Directory delegation and ACL misconfigurations to escalate privileges on Windows.
Active Directory exploitation via AS-REP roasting, SMB enumeration, BloodHound analysis, ForceChangePassword abuse, and SeBackupPrivilege for NTDS.dit extraction.
Hard Windows box involving advanced exploitation techniques, privilege escalation, and lateral movement through a complex Windows environment.
Exploit a Windows machine by chaining LDAP enumeration, Kerberoasting, and ACL abuse to escalate privileges and capture the flag.
Hard Windows box involving advanced exploitation techniques, privilege escalation, and lateral movement through a complex Active Directory or web application environment.
Windows medium box involving checkpoint security mechanisms, requiring careful enumeration, privilege escalation, and bypassing security controls to gain root access.
Insane Windows box exploiting a ping command injection vulnerability, chaining SSRF and lateral movement techniques to achieve full system compromise.
Windows medium box involving log analysis and exploitation of logging mechanisms to gain foothold and escalate privileges through misconfigured services.
Easy Windows box involving LDAP enumeration, custom binary reverse engineering to extract credentials, and Kerberos resource-based constrained delegation abuse for SYSTEM.
Hard Windows box involving pirate-themed exploitation chain with privilege escalation techniques targeting Windows services and misconfigurations.
Exploit a vulnerable web app on a Windows box by discovering hidden endpoints, leveraging SQL injection, and escalating privileges to root via misconfigured services.
Other platforms
We use cookies to improve your browsing experience, analyze site traffic, and personalize content. By clicking "Accept All", you consent to our use of cookies. Privacy Policy.