SUDO

HTB: SmartHire

SmartHire is a Medium-rated Linux machine that chains MLflow unsafe deserialization (CVE-2024-37054) to pivot from an unauthenticated web portal into a foothold …

May 17, 2026 · 2117 words · 10 min

Medium Linux Season 11 Season of the Punk MLflow CVE-2024-37054 RCE SUDO SUID

VULNLAB: Down

Down is an easy-rated Linux machine that involves exploiting an arbitrary file read by bypassing a protocol-based filter to discover the source code of the …

September 20, 2024 · 3965 words · 19 min

Easy Linux cURL Arbitrary file read PHP RCE PSWM Sudo

VULNLAB: Manage

Manage is an easy Linux machine that features an exposed Java RMI service. Exploiting the underlying vulnerable JMX service leads to remote code execution and …

June 28, 2024 · 2591 words · 13 min

Easy Linux Java RMI JMX Google Authenticator OTP Sudo

VULNLAB: Tengu

Tengu is a medium-rated chained machine on VulnLab, features a mixed environment with two Windows hosts and one Linux host. Exploiting Node-RED on Linux (with …

March 28, 2024 · 8124 words · 39 min

Medium Windows Node-RED Credential harvesting MSSQL SUDO NTLM hash gMSA Code execution DPAPI

VULNLAB: Reset

Reset is an Easy difficulty Linux machine which showcases abusing a password reset functionality in a web application following a log poisoning attack, to …

February 7, 2024 · 1646 words · 8 min

Easy Linux LFI Log poisoning RCE Rlogin Tmux hijack Sudo

No posts match this tag.