Hard
Linux
InsanityHosting Writeup - Proving Grounds
Compromise a Linux machine via LFI to log poisoning through SSH, escalate using MySQL running as root to write a SUID shell.