Tag: dictionary-attack (11)

Year of the Pig

Some pigs do fly...

year-of-the linux dictionary-attack brute-force custom-wordlist python php reverse-shell sudo sudoedit cve-2015-5602 bypass-filter crawling

November 4, 2025 • September 3, 2025 • Hard

TryHackMe > Linux Machines

Year of the Fox

Don't underestimate the sly old fox...

year-of-the linux smb dictionary-attack bypass-filter command-injection sudo local-service tunneling decompiling binary-hijacking python

November 4, 2025 • September 2, 2025 • Hard

TryHackMe > Windows Machines

Year of the Owl

The foolish owl sits on his throne...

windows year-of-the snmp dictionary-attack smb pass-the-hash sam ntlm recycle-bin winrm

November 4, 2025 • August 29, 2025 • Hard

TryHackMe > Linux Machines

Year of the Rabbit

Time to enter the warren...

linux year-of-the ftp image-file sudo exim cups cve-2019-14287 brainfuck dictionary-attack local-service tunneling cve-2016-1531 cve-2015-1158

November 4, 2025 • August 28, 2025 • Easy

TryHackMe > Linux Machines

GoldenEye

Bond, James Bond. A guided CTF.

linux pop3 moodle image-file dictionary-attack rce cve-2013-3630 reverse-shell python kernel-exploit cve-2015-1328

November 4, 2025 • August 18, 2025 • Medium

TryHackMe > Linux Machines

Internal

Penetration Testing Challenge.

linux php wordpress rce dictionary-attack web-shell reverse-shell mysql jenkins local-service config-file tunneling groovy-script docker

November 4, 2025 • August 6, 2025 • Hard

TryHackMe > Linux Machines

Skynet

A vulnerable Terminator themed Linux machine.

linux squirrelmail smb dictionary-attack log-file cuppa lfi rfi php web-shell reverse-shell rce cronjob wildcard

November 4, 2025 • August 4, 2025 • Easy

HackTheBox > Machines > Linux

Nibbles

Nibbles is a fairly simple machine, however with the inclusion of a login blacklist, it is a fair bit more...

linux nibbleblog php rce cve-2015-6967 web-shell reverse-shell metasploit dictionary-attack sudo

November 4, 2025 • August 2, 2025 • Easy

TryHackMe > Windows Machines

HackPark

Bruteforce a websites login with Hydra, identify and use a public exploit then escalate your privileges on this Windows machine!

windows blogenginenet dictionary-attack rce cve-2019-6714 reverse-shell ascx autologon rdp service-exploit unquoted-service-path

November 4, 2025 • July 25, 2025 • Medium

TryHackMe > Linux Machines

0day

Exploit Ubuntu, like a Turtle in a Hurricane.

linux cve-2014-6271-shellshock rce cgi dictionary-attack reverse-shell kernel-exploit cve-2015-1328 youtube

November 4, 2025 • July 21, 2025 • Medium

TryHackMe > Linux Machines

Basic Pentesting

This is a machine that allows you to practise web app hacking and privilege escalation.

linux smb dictionary-attack youtube private-key-discovery

November 4, 2025 • July 10, 2025 • Easy