Proving Grounds Writeups

110 writeups 44× Easy 4× Medium 8× Hard

Difficulty

Tag

Access

Sort

Tag: service-hijacking Clear all

Showing 1–3 of 3

Intermediate Linux

Hetemit Writeup - Proving Grounds

Intermediate Linux box where a Werkzeug API's /verify endpoint evaluates raw Python for a shell as cmeeks, then a writable systemd service file combined with a passwordless sudo reboot rule respawns that shell as root.

command-injection privilege-escalation sudo-misconfiguration service-hijacking

The Husky Hacker • Oct 8, 2026 • 3 min read

Intermediate Windows

Hepet Writeup - Proving Grounds

Intermediate Windows box where a password leaked in an employee page's role field unlocks IMAP mail, a LibreOffice macro phishing email delivered over SMTP gives a user shell, and a writable VeyonService binary escalates to SYSTEM.

information-disclosure credential-reuse phishing smtp +2

The Husky Hacker • Oct 8, 2026 • 3 min read

Intermediate Windows

Medjed Writeup - Proving Grounds

Intermediate Windows box where a guessable password-reset reminder on a Rails quiz app leads to a SQL injection file write RCE, and insecure folder permissions in BarracudaDrive 6.5 escalate to SYSTEM.

sql-injection authentication-bypass webshell barracudadrive +2

The Husky Hacker • Oct 8, 2026 • 4 min read

Other platforms

HackTheBox 92 TryHackMe 10 All writeups