Tag: reverse-shell (26)

TryHackMe > Windows Machines

AllSignsPoint2Pwnage

A room that contains a rushed Windows based Digital Sign system. Can you breach it?

windows ftp xampp php smb reverse-shell metasploit autologon av-evasion vnc rce

November 4, 2025 • September 4, 2025 • Medium

TryHackMe > Linux Machines

Year of the Pig

Some pigs do fly...

year-of-the linux dictionary-attack brute-force custom-wordlist python php reverse-shell sudo sudoedit cve-2015-5602 bypass-filter crawling

November 4, 2025 • September 3, 2025 • Hard

TryHackMe > Windows Machines

Hack Smarter Security

Can you hack the hackers?

windows ftp omsa cve-2020-5377 cve-2021-21514 file-read iis service-exploit binary-hijacking av-evasion reverse-shell hacksmarter

November 4, 2025 • September 1, 2025 • Medium

TryHackMe > Windows Machines

Weasel

I think the data science team has been a bit fast and loose with their project resources.

windows jupyter web-shell reverse-shell metasploit autologon rdp alwaysinstallelevated wsl smb python private-key-discovery

November 4, 2025 • September 1, 2025 • Medium

TryHackMe > Windows Machines

CyberLens

Can you exploit the CyberLens web server and discover the hidden flags?

windows apache-tika command-injection reverse-shell metasploit alwaysinstallelevated cve-2018-1335 hacksmarter rce

November 4, 2025 • August 30, 2025 • Easy

TryHackMe > Windows Machines

Blueprint

Hack into this Windows machine and escalate your privileges to Administrator.

windows smb oscommerce reverse-shell php mimikatz metasploit rce ntlm

November 4, 2025 • August 30, 2025 • Easy

TryHackMe > Linux Machines

Year of the Dog

Always so polite...

linux year-of-the sql-injection file-read mysql sqlite3 php web-shell reverse-shell tunneling local-service gitea rce docker docker-breakout cve-2020-14144 sudo suid git cookie

November 4, 2025 • August 27, 2025 • Hard

TryHackMe > Linux Machines

Year of the Jellyfish

Some boxes sting...

linux year-of-the picocms monitorr rce php web-shell reverse-shell jellyfin snapd cve-2019-7304-dirty-sock bypass-filter phtml python cookie subdomain

November 4, 2025 • August 27, 2025 • Hard

TryHackMe > Linux Machines

Silver Platter

Can you breach the server?

linux silverpeas cve-2024-36042 reverse-shell jsp idor adm-group log-file sudo hacksmarter subdomain

November 4, 2025 • August 21, 2025 • Easy

TryHackMe > Linux Machines

Zeno

Do you have the same patience as the great stoic philosopher Zeno? Try it out!

linux restaurent-management-system rce web-shell reverse-shell mariadb mysql service-exploit config-file sudo suid subdomain

November 4, 2025 • August 21, 2025 • Medium

TryHackMe > Linux Machines

CMesS

Can you root this Gila CMS box?

linux gila rce reverse-shell cronjob config-file mysql wildcard subdomain

November 4, 2025 • August 20, 2025 • Medium

TryHackMe > Linux Machines

LazyAdmin

Easy linux machine to practice your skills.

linux sweetrice mysql web-shell reverse-shell sudo cronjob

November 4, 2025 • August 19, 2025 • Easy

TryHackMe > Linux Machines

Thompson

boot2root machine for FIT and bsides guatemala CTF.

linux apache-tomcat reverse-shell cronjob suid metasploit

November 4, 2025 • August 19, 2025 • Easy

TryHackMe > Linux Machines

GoldenEye

Bond, James Bond. A guided CTF.

linux pop3 moodle image-file dictionary-attack rce cve-2013-3630 reverse-shell python kernel-exploit cve-2015-1328

November 4, 2025 • August 18, 2025 • Medium

TryHackMe > Linux Machines

Internal

Penetration Testing Challenge.

linux php wordpress rce dictionary-attack web-shell reverse-shell mysql jenkins local-service config-file tunneling groovy-script docker

November 4, 2025 • August 6, 2025 • Hard

TryHackMe > Windows Machines

Relevant

Penetration Testing Challenge.

windows iis smb rdp reverse-shell aspx token-impersonation sweet-potato rce

November 4, 2025 • August 6, 2025 • Medium

TryHackMe > Linux Machines

Daily Bugle

Compromise a Joomla CMS account via SQLi, practise cracking hashes and escalate your privileges by taking advantage of yum.

linux joomla mariadb sql-injection cve-2017-8917 sqlmap rce config-file reverse-shell php sudo

November 4, 2025 • August 5, 2025 • Hard

TryHackMe > Linux Machines

Skynet

A vulnerable Terminator themed Linux machine.

linux squirrelmail smb dictionary-attack log-file cuppa lfi rfi php web-shell reverse-shell rce cronjob wildcard

November 4, 2025 • August 4, 2025 • Easy

TryHackMe > Linux Machines

Game Zone

Learn to hack into this machine. Understand how to use SQLMap, crack some passwords, reveal services using a reverse SSH...

linux mysql sql-injection sqlmap local-service tunneling webmin cve-2012-2982 rce reverse-shell metasploit

November 4, 2025 • August 4, 2025 • Easy

HackTheBox > Machines > Linux

Nibbles

Nibbles is a fairly simple machine, however with the inclusion of a login blacklist, it is a fair bit more...

linux nibbleblog php rce cve-2015-6967 web-shell reverse-shell metasploit dictionary-attack sudo

November 4, 2025 • August 2, 2025 • Easy

TryHackMe > Windows Machines

HackPark

Bruteforce a websites login with Hydra, identify and use a public exploit then escalate your privileges on this Windows machine!

windows blogenginenet dictionary-attack rce cve-2019-6714 reverse-shell ascx autologon rdp service-exploit unquoted-service-path

November 4, 2025 • July 25, 2025 • Medium

TryHackMe > Windows Machines

Alfred

Exploit Jenkins to gain an initial shell, then escalate your privileges by exploiting Windows authentication tokens.

windows jenkins rce reverse-shell token-impersonation process-migration metasploit

November 4, 2025 • July 25, 2025 • Easy

TryHackMe > Windows Machines

Steel Mountain

Hack into a Mr. Robot themed Windows machine. Use metasploit for initial access, utilise powershell for Windows privilege escalation enumeration...

windows rejetto-hfs cve-2014-6287 rce reverse-shell service-exploit unquoted-service-path metasploit

November 4, 2025 • July 25, 2025 • Easy

TryHackMe > Linux Machines

Anonymous

Not the hacking group.

linux ftp cronjob rce log-file reverse-shell suid

November 4, 2025 • July 22, 2025 • Medium

TryHackMe > Linux Machines

0day

Exploit Ubuntu, like a Turtle in a Hurricane.

linux cve-2014-6271-shellshock rce cgi dictionary-attack reverse-shell kernel-exploit cve-2015-1328 youtube

November 4, 2025 • July 21, 2025 • Medium

TryHackMe > Linux Machines

Smol

Test your enumeration skills on this boot-to-root machine.

linux wordpress lfi file-read jsmol2wp cve-2018-20463 config-file mysql web-shell reverse-shell sudo youtube private-key-discovery

November 4, 2025 • July 12, 2025 • Medium