Photographer is a linux machine showcasing the exploitation of an authenticated file upload vulnerability.

Gaara is a linux machine that features the exploitation of SSH by brute forcing a user's password.

Sar is a linux machine showcasing the exploitation of remote code execution in Sar2Html, and abuse of a crobjob.

InfoSecPrep is a linux machine in which a ssh private key is disclosed in the web page.