Proving Grounds Writeups

110 writeups 44× Easy 4× Medium 8× Hard

Difficulty

Tag

Access

Sort

Tag: zoneminder Clear all

Showing 1–1 of 1

Easy Linux

Pebbles Writeup - Proving Grounds

Easy Linux box running ZoneMinder v1.29.0, exploited through a SQL injection in the limit parameter. The database runs as root, so sqlmap's os-shell injects a UDF and executes commands as root directly, with no separate privilege escalation.

sql-injection zoneminder mysql rce +1

The Husky Hacker • Oct 7, 2026 • 2 min read

Other platforms

HackTheBox 92 TryHackMe 10 All writeups