Proving Grounds Writeups

110 writeups 44× Easy 4× Medium 8× Hard

Difficulty

Tag

Access

Sort

Tag: suitecrm Clear all

Showing 1–1 of 1

Easy Linux

Crane Writeup - Proving Grounds

Easy Linux box running SuiteCRM with default admin credentials, exploited via CVE-2022-23940 for a www-data shell, then escalated to root through a sudo-allowed service binary with a GTFOBins path trick.

rce suitecrm privilege-escalation sudo-misconfiguration +3

The Husky Hacker • Oct 6, 2026 • 2 min read

Other platforms

HackTheBox 92 TryHackMe 10 All writeups