Proving Grounds Writeups

110 writeups 44× Easy 4× Medium 8× Hard

Difficulty

Tag

Access

Sort

Tag: phishing Clear all

Showing 1–2 of 2

Intermediate Windows

Hepet Writeup - Proving Grounds

Intermediate Windows box where a password leaked in an employee page's role field unlocks IMAP mail, a LibreOffice macro phishing email delivered over SMTP gives a user shell, and a writable VeyonService binary escalates to SYSTEM.

information-disclosure credential-reuse phishing smtp +2

The Husky Hacker • Oct 8, 2026 • 3 min read

Hard Linux

Postfish Writeup - Proving Grounds

Hard Linux mail server where a staff page and SMTP VRFY build a username list, a lazy POP3 password leaks an internal email that sets up a believable SMTP phishing attack against the sales manager, and his filter group membership plus a sudo mail rule lead to root.

phishing postfix default-credentials sudo-misconfiguration +1

The Husky Hacker • Oct 8, 2026 • 4 min read

Other platforms

HackTheBox 92 TryHackMe 10 All writeups