Proving Grounds Writeups

110 writeups 44× Easy 4× Medium 8× Hard

Intermediate Linux

LaVita Writeup - Proving Grounds

Intermediate Linux box running Laravel 8.4.0 with open registration, exploited by enabling debug mode and firing the CVE-2021-3129 Ignition log-poisoning RCE for a www-data shell, then escalated through a cron-executed artisan file and a scoped sudo Composer rule to root.

deserialization laravel cron-abuse sudo-misconfiguration +2

The Husky Hacker • Oct 8, 2026 • 4 min read