Proving Grounds Writeups

110 writeups 44× Easy 4× Medium 8× Hard

Difficulty

Tag

Access

Sort

Tag: hardcoded-credentials Clear all

Showing 1–2 of 2

Intermediate Linux

BitForge Writeup - Proving Grounds

Intermediate Linux box where an exposed .git history leaks database credentials used to reset SOPlanning's admin hash, unlocking CVE-2024-27114 for a shell, then a leaky cron job and a writable sudo script give root.

hardcoded-credentials authentication-bypass file-upload cron-abuse +3

The Husky Hacker • Oct 8, 2026 • 3 min read

Intermediate Linux

Pwned1 Writeup - Proving Grounds

Intermediate Linux box where a disclosed web page leaks FTP credentials and an SSH private key, a sudo rule on a messenger script allows command injection as another user, and docker group membership gives root via a host filesystem mount.

information-disclosure hardcoded-credentials ftp sudo-misconfiguration +2

The Husky Hacker • Oct 8, 2026 • 1 min read

Other platforms

HackTheBox 92 TryHackMe 10 All writeups