Home

Shocker is an easy machine on HackTheBox where you can exploit the shellshock vulnerability.

Nunchucks is an easy machine on HackTheBox which uses an SSTI exploit to gain access.

Photobomb is an easy machine on HackTheBox which looks at command injection.

Devel is an easy difficulty retired machine on HackTheBox.

LazyAdmin is a fun and easy machine on TryHackMe.

Jarvis is a medium difficulty CTF on HackTheBox. This box consists of some SQL injection to gain initial access, then exploitation of a python script to get user access and ends by exploiting a Linux service.