Machine walkthroughs — recon, foothold, and privilege escalation. Filter by track or source below.
SSTI to RCE, then a misconfigured sudo path to root.
Foothold via ADCS, Kerberoasting, then DCSync to Domain Admin.
Second-order SQLi found from source review to auth bypass.
OffSec Playground — NFS misconfiguration to credential theft.