Linux Machines

TryHackMe > Linux Machines

Rabbit Hole

It's easy to fall into rabbit holes.

linux sql-injection mariadb mysql information-schema-processlist xss python

December 21, 2025 • September 17, 2025 • Hard

TryHackMe > Linux Machines

TryHack3M: Subscribe

Can you help Hack3M reach 3M subscribers?

linux bypass-filter cookie mysql sql-injection splunk log-file forensic error-based-sql-injection

December 21, 2025 • September 7, 2025 • Medium

TryHackMe > Linux Machines

Year of the Pig

Some pigs do fly...

linux dictionary-attack custom-wordlist python php reverse-shell sudo sudoedit cve-2015-5602 bypass-filter crawling

December 21, 2025 • September 3, 2025 • Hard

TryHackMe > Linux Machines

Year of the Fox

Don't underestimate the sly old fox...

linux smb dictionary-attack bypass-filter command-injection sudo local-service tunneling decompiling binary-hijacking python

December 21, 2025 • September 2, 2025 • Hard

TryHackMe > Linux Machines

Year of the Rabbit

Time to enter the warren...

linux ftp image-file sudo exim cups cve-2019-14287 brainfuck dictionary-attack local-service tunneling cve-2016-1531 cve-2015-1158

December 21, 2025 • August 28, 2025 • Easy

TryHackMe > Linux Machines

Year of the Dog

Always so polite...

linux sql-injection file-read mysql sqlite3 php web-shell reverse-shell tunneling local-service gitea rce docker docker-breakout cve-2020-14144 sudo suid git cookie

December 21, 2025 • August 27, 2025 • Hard

TryHackMe > Linux Machines

Year of the Jellyfish

Some boxes sting...

linux picocms monitorr rce php web-shell reverse-shell jellyfin snapd cve-2019-7304-dirty-sock bypass-filter phtml python cookie subdomain

December 21, 2025 • August 27, 2025 • Hard

TryHackMe > Linux Machines

Silver Platter

Can you breach the server?

linux silverpeas cve-2024-36042 reverse-shell jsp idor adm-group log-file sudo hacksmarter subdomain

December 21, 2025 • August 21, 2025 • Easy

TryHackMe > Linux Machines

Zeno

Do you have the same patience as the great stoic philosopher Zeno? Try it out!

linux restaurent-management-system rce web-shell reverse-shell mariadb mysql service-exploit config-file sudo suid subdomain

December 21, 2025 • August 21, 2025 • Medium

TryHackMe > Linux Machines

CMesS

Can you root this Gila CMS box?

linux gila rce reverse-shell cronjob config-file mysql wildcard subdomain

December 21, 2025 • August 20, 2025 • Medium

TryHackMe > Linux Machines

tomghost

Identify recent vulnerabilities to try exploit the system or read files that you should not have access to.

linux apache-tomcat cve-2020-1938-ghostcat lfi file-read pgp sudo metasploit

December 21, 2025 • August 20, 2025 • Easy

TryHackMe > Linux Machines

LazyAdmin

Easy linux machine to practice your skills.

linux sweetrice mysql web-shell reverse-shell sudo cronjob

December 21, 2025 • August 19, 2025 • Easy

TryHackMe > Linux Machines

Thompson

boot2root machine for FIT and bsides guatemala CTF.

linux apache-tomcat reverse-shell cronjob suid metasploit

December 21, 2025 • August 19, 2025 • Easy

TryHackMe > Linux Machines

GoldenEye

Bond, James Bond. A guided CTF.

linux pop3 moodle image-file dictionary-attack rce cve-2013-3630 reverse-shell python kernel-exploit cve-2015-1328

December 21, 2025 • August 18, 2025 • Medium

TryHackMe > Linux Machines

dogcat

I made a website where you can look at pictures of dogs and/or cats! Exploit a PHP application via LFI...

linux lfi lfi2rce php php-filter log-poisoning rce sudo docker docker-breakout cronjob bypass-filter

December 21, 2025 • August 14, 2025 • Medium

TryHackMe > Linux Machines

Boiler CTF

Intermediate level CTF.

linux ftp caesar rot13 joomla sar2html webmin rce log-file suid

December 21, 2025 • August 14, 2025 • Medium

TryHackMe > Linux Machines

Internal

Penetration Testing Challenge.

linux php wordpress rce dictionary-attack web-shell reverse-shell mysql jenkins local-service config-file tunneling groovy-script docker

December 21, 2025 • August 6, 2025 • Hard

TryHackMe > Linux Machines

Daily Bugle

Compromise a Joomla CMS account via SQLi, practise cracking hashes and escalate your privileges by taking advantage of yum.

linux joomla mariadb sql-injection cve-2017-8917 sqlmap rce config-file reverse-shell php sudo

December 21, 2025 • August 5, 2025 • Hard

TryHackMe > Linux Machines

Skynet

A vulnerable Terminator themed Linux machine.

linux squirrelmail smb dictionary-attack log-file cuppa lfi rfi php web-shell reverse-shell rce cronjob wildcard

December 21, 2025 • August 4, 2025 • Easy

TryHackMe > Linux Machines

Game Zone

Learn to hack into this machine. Understand how to use SQLMap, crack some passwords, reveal services using a reverse SSH...

linux mysql sql-injection sqlmap local-service tunneling webmin cve-2012-2982 rce reverse-shell metasploit

December 21, 2025 • August 4, 2025 • Easy

TryHackMe > Linux Machines

Kenobi

Walkthrough on exploiting a Linux machine. Enumerate Samba for shares, manipulate a vulnerable version of proftpd and escalate your privileges...

linux smb log-file rpc nfs ftp cve-2015-3306 suid binary-hijacking private-key-discovery

December 21, 2025 • July 25, 2025 • Easy

TryHackMe > Linux Machines

UltraTech

The basics of Penetration Testing, Enumeration, Privilege Escalation and WebApp testing.

linux command-injection rce sqlite3 docker docker-group bypass-filter

December 21, 2025 • July 22, 2025 • Medium

TryHackMe > Linux Machines

Anonymous

Not the hacking group.

linux ftp cronjob rce log-file reverse-shell suid

December 21, 2025 • July 22, 2025 • Medium

TryHackMe > Linux Machines

Cheese CTF

Inspired by the great cheese talk of THM!

linux lfi lfi2rce rce php php-filter mysql sudo service-exploit suid bypass-filter

December 21, 2025 • July 21, 2025 • Easy

TryHackMe > Linux Machines

0day

Exploit Ubuntu, like a Turtle in a Hurricane.

linux cve-2014-6271-shellshock rce cgi dictionary-attack reverse-shell kernel-exploit cve-2015-1328

December 21, 2025 • July 21, 2025 • Medium

TryHackMe > Linux Machines

Wonderland

Fall down the rabbit hole and enter wonderland.

linux sudo python library-hijacking capabilities binary-hijacking decompiling

December 21, 2025 • July 16, 2025 • Medium

TryHackMe > Linux Machines

TryHack3M: Bricks Heist

Crack the code, command the exploit! Dive into the heart of the system with just an RCE CVE as your...

linux wordpress bricks rce cve-2024-25600 service-exploit bitcoin forensic osint

December 21, 2025 • July 14, 2025 • Easy

TryHackMe > Linux Machines

Smol

Test your enumeration skills on this boot-to-root machine.

linux wordpress lfi file-read jsmol2wp cve-2018-20463 config-file mysql web-shell reverse-shell sudo private-key-discovery

December 21, 2025 • July 12, 2025 • Medium

TryHackMe > Linux Machines

Basic Pentesting

This is a machine that allows you to practise web app hacking and privilege escalation.

linux smb dictionary-attack private-key-discovery

December 21, 2025 • July 10, 2025 • Easy

There are 29 pages in this directory.