Proving Grounds Writeups

110 writeups 44× Easy 4× Medium 8× Hard

Difficulty

Tag

Access

Sort

Tag: redis Clear all

Showing 1–2 of 2

Intermediate Linux

Readys Writeup - Proving Grounds

Intermediate Linux box where a WordPress plugin LFI leaks a Redis password used to plant a webshell for a shell as alice, then escalated to root through a tar wildcard injection in a cron job.

lfi information-disclosure wildcard-injection privilege-escalation +2

The Husky Hacker • Oct 8, 2026 • 3 min read

Intermediate Linux

Sybaris Writeup - Proving Grounds

Intermediate Linux box where anonymous FTP write access and an unauthenticated Redis instance combine for code execution via Redis MODULE LOAD, then a shared-object hijack of a root cron job's LD_LIBRARY_PATH for root.

rce redis ftp cron-abuse +2

The Husky Hacker • Oct 8, 2026 • 4 min read

Other platforms

HackTheBox 92 TryHackMe 10 All writeups