Proving Grounds Writeups

110 writeups 44× Easy 4× Medium 8× Hard

Difficulty

Tag

Access

Sort

Tag: reverse-engineering Clear all

Showing 1–2 of 2

Intermediate Linux

Cockpit Writeup - Proving Grounds

Intermediate Linux box exploiting a UNION-based SQL injection to dump credentials, reused against the Cockpit panel on port 9090 for a shell as james, then abusing a wildcard cp bug in a custom SUID binary to copy a setuid bash and gain root.

sql-injection authentication-bypass reverse-engineering cockpit +4

The Husky Hacker • Oct 6, 2026 • 4 min read

Medium Linux

DC-9 Writeup - Proving Grounds

SQL injection reveals creds, port knocking opens SSH, password spraying via knockd leads to root through sudo abuse on a Linux target.

sql-injection lfi reverse-engineering privilege-escalation +2

Joshua • Feb 23, 2026 • 5 min read

Other platforms

HackTheBox 92 TryHackMe 10 All writeups