UpDown — Web Logic to SSH Attack Chain on Linux
UpDown is a medium difficulty Linux machine with SSH and Apache servers exposed. On the Apache server a web application is featured that allows users to check if a webpage is up.
RhHmz4
Photographer - Exploiting Koken CMS upload feature
Photographer is a linux machine showcasing the exploitation of an authenticated file upload vulnerability.
Gaara - Brute forcing SSH password
Gaara is a linux machine that features the exploitation of SSH by brute forcing a user's password.
Sar - Exploiting Sar2Html and abusing cronjobs
Sar is a linux machine showcasing the exploitation of remote code execution in Sar2Html, and abuse of a crobjob.
InfoSecPrep - Leaked SSH private key to root access
InfoSecPrep is a linux machine in which a ssh private key is disclosed in the web page.