A comprehensive walk-through of the Vaultix-v6 machine from DockerLabs, detailing IPv6 neighbor discovery and enumeration, DNS zone transfer (AXFR), exploitation of a CI/CD pipeline via a malicious Debian package, lateral movement through SSH key extraction and tar wildcard injection, and root privilege escalation via SUID PATH hijacking.

A comprehensive walk-through of the Hannah Coffee machine from DockerLabs, detailing parameter fuzzing to uncover Local File Inclusion (LFI), gaining Remote Code Execution via PHP filter chain generator, pivoting to user hannah using debugfs sudo privileges, and escalating to root via Linux capabilities (cap_setuid).

A comprehensive write-up of the Volt machine from Vulnyx, covering port scanning, web admin login brute-forcing, credential discovery in application config files, and full root escalation via sudo.

A comprehensive walkthrough of the SuraxCorp machine on TheHackersLabs, covering IPv6 enumeration, unauthorized rsync file harvesting, user enumeration and type juggling authentication bypass on secure-suraxcorp.thl, binary analysis of a custom Debian package, command injection exploitation, reverse tunneling via Chisel, Flask Server-Side Template Injection (SSTI), and privilege escalation through sudo telnet.

A detailed write-up of the Network machine on Vulnyx, showcasing command injection on a custom service running ipcalc, shell stabilization, and privilege escalation via sudo ip netns.

A comprehensive walk-through of the Method machine on Vulnyx, detailing WebDAV enumeration and exploitation to gain initial access, followed by privilege escalation via tar wildcard injection.

A comprehensive walk-through of the Helix machine on HackMyVM, detailing SNMP enumeration to extract SSH credentials and privilege escalation via a custom SUID bash binary.

A comprehensive walk-through of the Banco machine, detailing the exploitation of a Local File Inclusion (LFI) vulnerability in a PDF downloader, database credentials harvesting, and privilege escalation using SUID chattr and mutable script manipulation.

A comprehensive analysis of the Nordcrypt machine, detailing the supply chain compromise, KeePass extraction, and SUID service manager command injection.

A technical analysis of the ElNinja machine, outlining the vulnerabilities identified and the steps taken to achieve root.