Tag: reverse-shell (26)

TryHackMe > Windows Machines

AllSignsPoint2Pwnage

A room that contains a rushed Windows based Digital Sign system. Can you breach it?

windows ftp xampp php smb reverse-shell metasploit autologon av-evasion vnc rce
December 21, 2025 • September 4, 2025 • Medium
Icon
TryHackMe > Linux Machines

Year of the Pig

Some pigs do fly...

linux dictionary-attack custom-wordlist python php reverse-shell sudo sudoedit cve-2015-5602 bypass-filter crawling
December 21, 2025 • September 3, 2025 • Hard
Icon
TryHackMe > Windows Machines

Hack Smarter Security

Can you hack the hackers?

windows ftp cve-2020-5377 cve-2021-21514 file-read iis service-exploit binary-hijacking av-evasion reverse-shell hacksmarter
December 21, 2025 • September 1, 2025 • Medium
Icon
TryHackMe > Windows Machines

Weasel

I think the data science team has been a bit fast and loose with their project resources.

windows jupyter web-shell reverse-shell metasploit autologon rdp alwaysinstallelevated wsl smb python private-key-discovery
December 21, 2025 • September 1, 2025 • Medium
Icon
TryHackMe > Windows Machines

CyberLens

Can you exploit the CyberLens web server and discover the hidden flags?

windows apache-tika command-injection reverse-shell metasploit alwaysinstallelevated cve-2018-1335 hacksmarter rce
December 21, 2025 • August 30, 2025 • Easy
Icon
TryHackMe > Windows Machines

Blueprint

Hack into this Windows machine and escalate your privileges to Administrator.

windows smb oscommerce reverse-shell php mimikatz metasploit rce ntlm
December 21, 2025 • August 30, 2025 • Easy
Icon
TryHackMe > Linux Machines

Year of the Dog

Always so polite...

linux sql-injection file-read mysql sqlite3 php web-shell reverse-shell tunneling local-service gitea rce docker docker-breakout cve-2020-14144 sudo suid git cookie
December 21, 2025 • August 27, 2025 • Hard
Icon
TryHackMe > Linux Machines

Year of the Jellyfish

Some boxes sting...

linux picocms monitorr rce php web-shell reverse-shell jellyfin snapd cve-2019-7304-dirty-sock bypass-filter phtml python cookie subdomain
December 21, 2025 • August 27, 2025 • Hard
Icon
TryHackMe > Linux Machines

Silver Platter

Can you breach the server?

linux silverpeas cve-2024-36042 reverse-shell jsp idor adm-group log-file sudo hacksmarter subdomain
December 21, 2025 • August 21, 2025 • Easy
Icon
TryHackMe > Linux Machines

Zeno

Do you have the same patience as the great stoic philosopher Zeno? Try it out!

linux restaurent-management-system rce web-shell reverse-shell mariadb mysql service-exploit config-file sudo suid subdomain
December 21, 2025 • August 21, 2025 • Medium
Icon
TryHackMe > Linux Machines

CMesS

Can you root this Gila CMS box?

linux gila rce reverse-shell cronjob config-file mysql wildcard subdomain
December 21, 2025 • August 20, 2025 • Medium
Icon
TryHackMe > Linux Machines

LazyAdmin

Easy linux machine to practice your skills.

linux sweetrice mysql web-shell reverse-shell sudo cronjob
December 21, 2025 • August 19, 2025 • Easy
Icon
TryHackMe > Linux Machines

Thompson

boot2root machine for FIT and bsides guatemala CTF.

linux apache-tomcat reverse-shell cronjob suid metasploit
December 21, 2025 • August 19, 2025 • Easy
Icon
TryHackMe > Linux Machines

GoldenEye

Bond, James Bond. A guided CTF.

linux pop3 moodle image-file dictionary-attack rce cve-2013-3630 reverse-shell python kernel-exploit cve-2015-1328
December 21, 2025 • August 18, 2025 • Medium
Icon
TryHackMe > Linux Machines

Internal

Penetration Testing Challenge.

linux php wordpress rce dictionary-attack web-shell reverse-shell mysql jenkins local-service config-file tunneling groovy-script docker
December 21, 2025 • August 6, 2025 • Hard
Icon
TryHackMe > Windows Machines

Relevant

Penetration Testing Challenge.

windows iis smb rdp reverse-shell aspx token-impersonation sweet-potato rce
December 21, 2025 • August 6, 2025 • Medium
Icon
TryHackMe > Linux Machines

Daily Bugle

Compromise a Joomla CMS account via SQLi, practise cracking hashes and escalate your privileges by taking advantage of yum.

linux joomla mariadb sql-injection cve-2017-8917 sqlmap rce config-file reverse-shell php sudo
December 21, 2025 • August 5, 2025 • Hard
Icon
TryHackMe > Linux Machines

Skynet

A vulnerable Terminator themed Linux machine.

linux squirrelmail smb dictionary-attack log-file cuppa lfi rfi php web-shell reverse-shell rce cronjob wildcard
December 21, 2025 • August 4, 2025 • Easy
Icon
TryHackMe > Linux Machines

Game Zone

Learn to hack into this machine. Understand how to use SQLMap, crack some passwords, reveal services using a reverse SSH...

linux mysql sql-injection sqlmap local-service tunneling webmin cve-2012-2982 rce reverse-shell metasploit
December 21, 2025 • August 4, 2025 • Easy
Icon
HackTheBox > Machines > Linux

Nibbles

Nibbles is a fairly simple machine, however with the inclusion of a login blacklist, it is a fair bit more...

linux nibbleblog php rce cve-2015-6967 web-shell reverse-shell metasploit dictionary-attack sudo
December 21, 2025 • August 2, 2025 • Easy
Icon
TryHackMe > Windows Machines

HackPark

Bruteforce a websites login with Hydra, identify and use a public exploit then escalate your privileges on this Windows machine!

windows blogenginenet dictionary-attack rce cve-2019-6714 reverse-shell ascx autologon rdp service-exploit unquoted-service-path
December 21, 2025 • July 25, 2025 • Medium
Icon
TryHackMe > Windows Machines

Alfred

Exploit Jenkins to gain an initial shell, then escalate your privileges by exploiting Windows authentication tokens.

windows jenkins rce reverse-shell token-impersonation process-migration metasploit
December 21, 2025 • July 25, 2025 • Easy
Icon
TryHackMe > Windows Machines

Steel Mountain

Hack into a Mr. Robot themed Windows machine. Use metasploit for initial access, utilise powershell for Windows privilege escalation enumeration...

windows rejetto-hfs cve-2014-6287 rce reverse-shell service-exploit unquoted-service-path metasploit
December 21, 2025 • July 25, 2025 • Easy
Icon
TryHackMe > Linux Machines

Anonymous

Not the hacking group.

linux ftp cronjob rce log-file reverse-shell suid
December 21, 2025 • July 22, 2025 • Medium
Icon
TryHackMe > Linux Machines

0day

Exploit Ubuntu, like a Turtle in a Hurricane.

linux cve-2014-6271-shellshock rce cgi dictionary-attack reverse-shell kernel-exploit cve-2015-1328
December 21, 2025 • July 21, 2025 • Medium
Icon
TryHackMe > Linux Machines

Smol

Test your enumeration skills on this boot-to-root machine.

linux wordpress lfi file-read jsmol2wp cve-2018-20463 config-file mysql web-shell reverse-shell sudo private-key-discovery
December 21, 2025 • July 12, 2025 • Medium
Icon