Easy
Linux
Astronaut Writeup - Proving Grounds
Easy Linux box exploiting Grav CMS with CVE-2021-21425 for RCE, then leveraging a SUID `php7.4` binary for privilege escalation to root.