Proving Grounds Writeups

110 writeups 44× Easy 4× Medium 8× Hard

Difficulty

Tag

Access

Sort

Tag: group-membership-abuse Clear all

Showing 1–1 of 1

Intermediate Linux

Fanatastic Writeup - Proving Grounds

Intermediate Linux box using Grafana's CVE-2021-43798 directory traversal to leak and decrypt a Prometheus data source password for SSH access, then abusing disk group membership to read root's SSH key off the raw block device.

path-traversal information-disclosure group-membership-abuse privilege-escalation +2

The Husky Hacker • Oct 8, 2026 • 2 min read

Other platforms

HackTheBox 92 TryHackMe 10 All writeups