Proving Grounds Writeups

110 writeups 44× Easy 4× Medium 8× Hard

Difficulty

Tag

Access

Sort

Tag: pdfkit Clear all

Showing 1–1 of 1

Easy Linux

RubyDome Writeup - Proving Grounds

Easy Linux box running a Ruby HTML-to-PDF app that uses the vulnerable PDFKit gem, exploited via CVE-2022-25765 command injection for a shell as andrew, then escalated to root through a NOPASSWD sudo rule on a writable Ruby script.

command-injection rce pdfkit sudo-misconfiguration +2

The Husky Hacker • Oct 7, 2026 • 2 min read

Other platforms

HackTheBox 92 TryHackMe 10 All writeups