Proving Grounds Writeups

110 writeups 44× Easy 4× Medium 8× Hard

Difficulty

Tag

Access

Sort

Tag: token-impersonation Clear all

Showing 1–3 of 3

Intermediate Windows

Craft Writeup - Proving Grounds

Intermediate Windows box running XAMPP, where a LibreOffice macro embedded in an uploaded ODT file gives a shell, a PHP webshell dropped into the Apache web root lands execution as the Apache service account, and GodPotato abuses its SeImpersonatePrivilege for a SYSTEM shell.

file-upload webshell xampp privilege-escalation +2

The Husky Hacker • Oct 8, 2026 • 3 min read

Intermediate Windows

Jacko Writeup - Proving Grounds

Intermediate Windows box where an unauthenticated H2 database console gives remote code execution through a JNI DLL write, and SeImpersonatePrivilege is escalated to SYSTEM with GodPotato.

rce h2-database privilege-escalation token-impersonation

The Husky Hacker • Oct 8, 2026 • 4 min read

Easy Windows

Squid Writeup - Proving Grounds

Easy Windows box where an open Squid proxy exposes a loopback-only phpMyAdmin with default credentials, used to write a webshell via INTO OUTFILE, then a recovered SeImpersonatePrivilege and PrintSpoofer escalate to SYSTEM.

default-credentials webshell mysql privilege-escalation +1

The Husky Hacker • Oct 8, 2026 • 4 min read

Other platforms

HackTheBox 92 TryHackMe 10 All writeups