Proving Grounds Writeups

110 writeups 44× Easy 4× Medium 8× Hard

Difficulty

Tag

Access

Sort

Tag: directory-traversal Clear all

Showing 1–3 of 3

Intermediate Linux

Clue Writeup - Proving Grounds

Intermediate Linux box where a null-auth SMB share and the Cassandra Web directory traversal (EDB-49362) leak a FreeSWITCH event socket password and a reused credential, chained into FreeSWITCH command execution (EDB-47799) and SSH, then a sudo rule that reruns Cassandra Web as root leads to an SSH key and root.

directory-traversal rce freeswitch sudo-misconfiguration +2

The Husky Hacker • Oct 8, 2026 • 4 min read

Intermediate Windows

DVR4 Writeup - Proving Grounds

Intermediate Windows box where an unauthenticated directory traversal in Argus Surveillance DVR leaks an SSH private key for initial access, then the same traversal exposes a custom-encoded Administrator password that is decoded and reused via runas for an Administrator shell.

directory-traversal information-disclosure argus-surveillance-dvr credential-reuse +1

The Husky Hacker • Oct 8, 2026 • 4 min read

Intermediate Windows

Fish Writeup - Proving Grounds

Intermediate Windows box where a GlassFish directory traversal leaks SynaMan SMTP credentials reused for RDP access, then a TotalAV antivirus quarantine bypass using a directory junction plants a malicious DLL for a SYSTEM shell.

directory-traversal information-disclosure glassfish synaman +3

The Husky Hacker • Oct 8, 2026 • 5 min read

Other platforms

HackTheBox 92 TryHackMe 10 All writeups