Proving Grounds Writeups

110 writeups 44× Easy 4× Medium 8× Hard

Difficulty

Tag

Access

Sort

Tag: ssh Clear all

Showing 1–3 of 3

Intermediate Linux

Sorcerer Writeup - Proving Grounds

Intermediate Linux box where a public backup archive leaks an SSH key restricted by a forced command, bypassed via legacy SCP for a shell as max, then escalated to root through a SUID start-stop-daemon binary.

information-disclosure ssh privilege-escalation suid +1

The Husky Hacker • Oct 8, 2026 • 3 min read

Easy Linux

Geisha Writeup - Proving Grounds

Easy Linux box where the repeated hostname hints at the username geisha, whose SSH password is brute forced. A SUID base32 binary reads root's SSH private key, giving a root login.

brute-force ssh suid gtfobins +1

The Husky Hacker • Oct 7, 2026 • 2 min read

Easy Linux

LazySysAdmin Writeup - Proving Grounds

Easy Linux box where directory brute forcing reveals a WordPress user togie, whose weak SSH password is recovered by brute force. The account is in the sudo group, so sudo su gives root.

brute-force ssh sudo-misconfiguration privilege-escalation

The Husky Hacker • Oct 7, 2026 • 2 min read

Other platforms

HackTheBox 92 TryHackMe 10 All writeups