Pentesting Lab Writeups

This repository contains my detailed writeups for lab machines on HackTheBox, HackMyVM, and VulNyx. They document the steps involved in enumerating each target, identifying and exploiting vulnerabilities, and escalating privileges where necessary.

The commands used are shown alongside their corresponding output, preserving both the actions taken and the results obtained at each stage. Readers can therefore follow and revisit the documented process without needing access to the target machine or having to reproduce every step.

These writeups help me consolidate what I learn, refine my methodology, and share practical examples with the community. I hope they serve as a useful reference for anyone developing their pentesting skills.

Machine Progress Tracker

Status	Count	Percentage
✔️ Completed	86	62.8%
🚧 In Progress	14	10.2%
❌ Not Started	37	27.0%
Total	137

████████████████████░░░░░░░

Machine List Breakdown

The Technique column highlights the key techniques documented in each writeup. The Technique Index organizes them into broader areas and optional sub-techniques, with concise context for each occurrence.

Status	Platform	Machine	OS	Technique	Difficulty	Certifications
✔️	VulNyx	Swamp		DNS Enumeration, Client-Side Code Analysis, Sudo Binary Abuse	🟩 Easy	CWES, CPTS
✔️	VulNyx	Bola		Rsync Module Enumeration, Object-Level Authorization Bypass, SOAPAction Spoofing	🟨 Medium	CWES, CPTS
✔️	VulNyx	Express		Authorization Bypass, Server-Side Request Forgery, Server-Side Template Injection	🟨 Medium	CWES, CPTS
✔️	VulNyx	Future		Server-Side Request Forgery, Local File Inclusion, Password Cracking, SUID Abuse	🟨 Medium	CWES, CPTS
✔️	VulNyx	JarJar		Username Enumeration, Authentication Bypass, Local File Inclusion, SUID Abuse, Password Cracking	🟨 Medium	CWES, CPTS
✔️	VulNyx	Gattaca		Default Credential Abuse, Login Brute Forcing, Command Injection, Authorization Bypass, Sudo Binary Abuse	🟥 Hard	CWES, CPTS
✔️	VulNyx	Jerry		File Upload, Sudo Binary Abuse	🟥 Hard	CWES, CPTS
✔️	VulNyx	Lost		Subdomain Enumeration, SQL Injection, Command Injection, Linux Privileged Group Abuse	🟥 Hard	CWES, CPTS
✔️	HackTheBox	ExpressWay		IPsec/IKE Enumeration, Authentication Secret Cracking, Sudo Vulnerability Exploitation	🟩 Easy (2.6)
✔️	HackTheBox	Return		Credential Capture, Windows Privileged Group Abuse	🟩 Easy (3.0)	CPTS, OSCP
🚧	HackTheBox	Editor		Web Application Enumeration, Credential Discovery, PATH Hijacking	🟩 Easy (3.4)
🚧	HackTheBox	Soulmate		Web Content Discovery, Virtual Host Enumeration, Authentication Bypass, File Upload, Credential Discovery, Privileged Service Abuse	🟩 Easy (3.7)
✔️	HackTheBox	Horizontall		Client-Side Code Analysis, Remote Code Execution, Port Forwarding	🟩 Easy (3.9)	CWES, CPTS
✔️	HackTheBox	Active		SMB Enumeration, GPP Credential Retrieval, Kerberoasting	🟩 Easy (4.0)	CPTS, OSCP
✔️	HackTheBox	BountyHunter		XML External Entity Injection, File Disclosure, Sudo Binary Abuse, Sudo Script Abuse	🟩 Easy (4.0)	CWES, CPTS
✔️	HackTheBox	Timelapse		SMB Enumeration, Credential Discovery, Protected File Cracking, LAPS Credential Retrieval	🟩 Easy (4.0)	OSCP
✔️	HackTheBox	Inject		Local File Inclusion, Remote Code Execution, Credential Discovery, Ansible Playbook Abuse	🟩 Easy (4.0)	CPTS, OSCP
✔️	HackTheBox	Access		Anonymous FTP Access, Microsoft Access Database Analysis, Email Archive Analysis, Credential Discovery, Saved Credential Abuse	🟩 Easy (4.1)	CPTS, OSCP
✔️	HackTheBox	Driver		Default Credential Abuse, Credential Capture, Password Cracking, Printer Driver Exploitation	🟩 Easy (4.1)	CPTS, OSCP
✔️	HackTheBox	Delivery		Identity Impersonation, Login Brute Forcing, Credential Discovery, Password Cracking	🟩 Easy (4.2)	CWES, CPTS
✔️	HackTheBox	Soccer		File Upload, WebSocket Enumeration, SQL Injection, Doas Binary Abuse	🟩 Easy (4.3)	CWES, CPTS, OSCP
✔️	HackTheBox	Trick		DNS Enumeration, SQL Injection, Local File Inclusion, Privileged Service Abuse	🟩 Easy (4.4)	CWES, CPTS
✔️	HackTheBox	Bastion		SMB Enumeration, Virtual Disk Analysis, Credential Dumping, Password Cracking, Credential Decryption	🟩 Easy (4.4)	CPTS, OSCP, OSEP
✔️	HackTheBox	Fluffy		AD Relationship Mapping, Credential Capture, Password Cracking, Active Directory ACL Abuse, Shadow Credentials, AD CS Abuse	🟩 Easy (4.5)	CAPE
✔️	HackTheBox	MetaTwo		Web Application Enumeration, SQL Injection, Password Cracking, XML External Entity Injection, Credential Discovery, Protected File Cracking	🟩 Easy (4.5)	CWES, CPTS
✔️	HackTheBox	Remote		NFS Enumeration, Credential Extraction, Password Cracking, Remote Code Execution, Service Permission Abuse	🟩 Easy (4.5)	CPTS, OSCP
✔️	HackTheBox	Sauna		Username Enumeration, AS-REP Roasting, Credential Discovery, Directory Replication Abuse, Pass-the-Hash	🟩 Easy (4.5)	OSCP
✔️	HackTheBox	Academy		Authorization Bypass, Object-Level Authorization Bypass, Unsafe Deserialization, Remote Code Execution, Credential Discovery, Sudo Binary Abuse	🟩 Easy (4.7)	CWES, CPTS
✔️	HackTheBox	Heist		Credential Decryption, RID Cycling, Password Spraying, Process Memory Credential Extraction	🟩 Easy (4.7)	OSCP
✔️	HackTheBox	Support		SMB Enumeration, Decompilation, Credential Discovery, Kerberos Delegation Abuse	🟩 Easy (4.7)	OSCP, OSEP
✔️	HackTheBox	Forest		AS-REP Roasting, AD Relationship Mapping, Directory Replication Abuse, Kerberos Ticket Forgery	🟩 Easy (4.8)	CPTS, OSCP, OSEP
✔️	HackTheBox	Administrator		Kerberoasting, Protected File Cracking	🟨 Medium (3.7)	CPTS, OSCP
✔️	HackTheBox	SolidState		Default Credential Abuse, Mail Server Administration Abuse, Mail Service Enumeration, Credential Disclosure, Restricted Shell Escape, Cron Job Abuse	🟨 Medium (4.0)	OSCP
✔️	HackTheBox	Shoppy		NoSQL Injection, Password Cracking, Subdomain Enumeration, Credential Discovery, Reverse Engineering, Linux Privileged Group Abuse	🟨 Medium (4.0)	CPTS, OSCP, CWEE
✔️	HackTheBox	Union		SQL Injection, Source Code Review, Command Injection, Sudo Binary Abuse	🟨 Medium (4.2)	CWES, CPTS
❌	HackTheBox	Aero			🟨 Medium (4.3)	OSCP
❌	HackTheBox	Forge			🟨 Medium (4.5)	CWES, CPTS, OSCP, OSEP
❌	HackTheBox	Lazy			🟨 Medium (4.5)	CWEE
❌	HackTheBox	Jeeves			🟨 Medium (4.5)	OSCP
✔️	HackTheBox	TombWatcher		AD Relationship Mapping, Kerberoasting, Active Directory ACL Abuse, gMSA Password Retrieval, AD Recycle Bin Access, AD CS Abuse	🟨 Medium (4.5)
✔️	HackTheBox	Escape		File Disclosure, MSSQL Authentication Coercion, Credential Capture, Password Cracking, Credential Discovery, AD CS Abuse, Kerberos Ticket Forgery	🟨 Medium (4.6)	OSCP, OSEP
✔️	HackTheBox	Resolute		LDAP Enumeration, Credential Discovery, Password Spraying, Credential Reuse, DnsAdmins Abuse	🟨 Medium (4.6)	OSCP, OSEP
🚧	HackTheBox	Imagery		Web Content Discovery, Cross-Site Scripting, Session Hijacking, Password Cracking, Image Processing Exploitation, Protected File Cracking, Credential Discovery, Credential Reuse, Cron Job Abuse	🟨 Medium (4.6)
🚧	HackTheBox	Previous		Authorization Bypass, API Enumeration, Local File Inclusion, Credential Discovery, Terraform Provider Override, SUID Abuse	🟨 Medium (4.6)
✔️	HackTheBox	Certified		Active Directory ACL Abuse, Shadow Credentials, UPN Manipulation, AD CS Abuse	🟨 Medium (4.7)	OSCP
✔️	HackTheBox	Monteverde		Password Spraying, Credential Reuse, MSSQL Enumeration, Azure AD Connect Credential Extraction	🟨 Medium (4.7)	OSCP, OSEP
✔️	HackTheBox	Puppy		AD Relationship Mapping, Active Directory ACL Abuse, Protected File Cracking, Credential Discovery, Credential Decryption, Directory Replication Abuse	🟨 Medium (4.7)	CPTS, OSCP
❌	HackTheBox	Tenet			🟨 Medium (4.7)	CWEE
❌	HackTheBox	Agile			🟨 Medium (4.8)	CWES, CPTS
❌	HackTheBox	Hospital			🟨 Medium (4.8)	CPTS, OSCP
❌	HackTheBox	SecNotes			🟨 Medium (4.8)	CWEE
✔️	HackTheBox	Manager		RID Cycling, Password Spraying, MSSQL File System Enumeration, Backup Disclosure, Credential Discovery, AD CS Abuse	🟨 Medium (4.9)	CPTS, OSCP
❌	HackTheBox	Noter			🟨 Medium (4.9)	CWEE
🚧	HackTheBox	Voleur		Kerberos Authentication, Credential Discovery, Kerberoasting, SMB Enumeration, WSL Lateral Movement, NTDS.dit Extraction, Pass-the-Hash	🟨 Medium (4.9)
✔️	HackTheBox	Intelligence		Metadata Analysis, Password Spraying, ADIDNS Spoofing, Credential Capture, Password Cracking, gMSA Password Retrieval, Kerberos Delegation Abuse	🟨 Medium (5.0)	OSCP, OSEP
❌	HackTheBox	LogForge			🟨 Medium (5.0)	CPTS, OSCP
✔️	HackTheBox	Meta		Subdomain Enumeration, Image Processing Exploitation, Sudo Environment Variable Abuse	🟨 Medium (5.0)	CWES, CPTS
❌	HackTheBox	Outdated			🟨 Medium (5.0)	CWES, CPTS, OSCP, OSEP
✔️	HackTheBox	Querier		Document Macro Analysis, MSSQL Authentication Coercion, Credential Capture, Password Cracking, GPP Credential Retrieval, Token Impersonation	🟨 Medium (5.0)	OSCP, OSEP
✔️	HackTheBox	Cascade		LDAP Enumeration, Credential Disclosure, Credential Decryption, Decompilation, AD Recycle Bin Access	🟨 Medium (5.1)	OSCP
❌	HackTheBox	Pov			🟨 Medium (5.1)	CWEE
❌	HackTheBox	Nineveh			🟨 Medium (5.2)	CWES, CPTS
❌	HackTheBox	Atom			🟨 Medium (5.2)	OSEP
✔️	HackTheBox	Signed		MSSQL Enumeration, Credential Capture, Password Cracking, Kerberos Ticket Forgery, MSSQL Command Execution, MSSQL Arbitrary File Read	🟨 Medium (5.2)	CPTS, OSCP
✔️	HackTheBox	Authority		Ansible Vault Cracking, Credential Capture, AD CS Abuse, MachineAccountQuota Abuse, Pass-the-Certificate, Kerberos Delegation Abuse, Directory Replication Abuse	🟨 Medium (5.4)	OSCP
🚧	HackTheBox	Era		Virtual Host Enumeration, Web Content Discovery, Object-Level Authorization Bypass, Backup Disclosure, SQLite Credential Extraction, Authentication Bypass, Password Cracking, FTP Enumeration, Source Code Review, PHP Stream Wrapper Abuse, Privileged Binary Replacement	🟨 Medium (5.4)
✔️	HackTheBox	Scrambled		Kerberoasting, Kerberos Ticket Forgery, MSSQL Credential Discovery, Unsafe Deserialization	🟨 Medium (5.7)	OSCP, OSEP
❌	HackTheBox	Sniper			🟨 Medium (5.7)	OSCP
🚧	HackTheBox	HackNet		Web Application Enumeration, Credential Discovery, Credential Reuse, Cache Poisoning, Unsafe Deserialization, Private Key Retrieval, Protected File Cracking, GPG Decryption, SQL Backup Credential Extraction	🟨 Medium (5.9)	CWEE
❌	HackTheBox	Book			🟨 Medium (6.1)	CWEE
❌	HackTheBox	Arkham			🟨 Medium (6.7)	OSEP
❌	HackTheBox	Pressed			🟥 Hard (5.1)	CPTS, OSCP
❌	HackTheBox	Mantis			🟥 Hard (5.6)	CPTS, OSCP
❌	HackTheBox	Reel			🟥 Hard (5.7)	OSEP
✔️	HackTheBox	Blackfield		SMB Enumeration, AS-REP Roasting, Active Directory ACL Abuse, Credential Dumping, Windows Privileged Group Abuse, NTDS.dit Extraction, Pass-the-Hash, Antivirus Evasion	🟥 Hard (5.9)	CPTS, OSCP, OSEP
✔️	HackTheBox	Conceal		SNMP Enumeration, IPsec/IKE Enumeration, IPsec Configuration, Anonymous FTP Access, File Upload, Token Impersonation	🟥 Hard (6.0)	OSCP
✔️	HackTheBox	Search		Kerberos User Enumeration, Kerberoasting, Password Spraying, SMB Enumeration, Protected File Cracking, AD Relationship Mapping, gMSA Password Retrieval, Active Directory ACL Abuse	🟥 Hard (6.0)	CPTS, OSCP
❌	HackTheBox	StreamIO			🟥 Hard (6.0)	OSCP, OSEP
🚧	HackTheBox	DarkZero		MSSQL Linked Server Abuse, MSSQL Command Execution, Local Vulnerability Exploitation, Credential Dumping, Network Pivoting, Domain Trust Enumeration, Kerberos Ticket Forgery, Authentication Coercion, Kerberos Ticket Capture, Directory Replication Abuse	🟥 Hard (6.1)	CPTS, OSCP
❌	HackTheBox	Falafel			🟥 Hard (6.1)	CWEE
❌	HackTheBox	Flight			🟥 Hard (6.1)	OSCP, OSEP
❌	HackTheBox	Analysis			🟥 Hard (6.3)	CWEE
🚧	HackTheBox	Guardian		Virtual Host Enumeration, Default Credential Abuse, Object-Level Authorization Bypass, Credential Disclosure, Git Service Enumeration, Python Module Hijacking, Sudo Binary Abuse, Apache Configuration Abuse, Shared Library Injection, SUID Abuse	🟥 Hard (6.3)
✔️	HackTheBox	Office		API Information Disclosure, Network Capture Analysis, AS-REP Roasting, Remote Code Execution, Network Pivoting, Malicious Document Macro, Macro Security Bypass, Alternate Credential Execution, Credential Decryption, GPO Abuse	🟥 Hard (6.4)	OSCP
❌	HackTheBox	RustyKey			🟥 Hard (6.5)
❌	HackTheBox	RE			🟥 Hard (6.6)	OSEP
❌	HackTheBox	Reel2			🟥 Hard (6.8)	OSEP
❌	HackTheBox	Cerberus			🟥 Hard (6.8)	OSEP
❌	HackTheBox	Vintage			🟥 Hard (6.9)	CPTS, OSCP
❌	HackTheBox	Rabbit			⬜ Insane (6.0)	OSEP
❌	HackTheBox	Bankrobber			⬜ Insane (6.3)	OSCP
❌	HackTheBox	PivotAPI			⬜ Insane (6.7)	OSEP
✔️	HackTheBox	Sizzle		SMB Authentication Coercion, Credential Capture, Password Cracking, SMB Relay, Certificate-Based Authentication, Application Allowlisting Bypass, Kerberoasting, Directory Replication Abuse	⬜ Insane (7.1)	OSCP, OSEP
❌	HackTheBox	APT			⬜ Insane (7.2)	OSEP
❌	HackTheBox	Sekhmet			⬜ Insane (7.3)	CPTS, OSCP, OSEP
✔️	HackTheBox	Hathor		Default Credential Abuse, File Upload, Application Allowlisting Analysis, Kerberos Authentication, DLL Hijacking, Code Signing Abuse, Directory Replication Abuse	⬜ Insane (7.5)	OSCP, OSEP
❌	HackTheBox	Multimaster			⬜ Insane (7.6)	OSEP
🚧	HackTheBox	Absolute		Metadata Analysis, AS-REP Roasting, Kerberos Authentication, Credential Discovery, Active Directory ACL Abuse, Shadow Credentials, Kerberos Relaying	⬜ Insane (7.6)	OSCP, OSEP
❌	HackTheBox	Reddish			⬜ Insane (7.9)	CPTS, OSCP, OSEP
❌	HackTheBox	Hackback			⬜ Insane (8.6)	OSEP
🚧	HackTheBox	Hercules		DNS Enumeration, Web Content Discovery, Kerberos User Enumeration, LDAP Enumeration	⬜ Insane (8.9)
✔️	HackMyVM	Art		Web Parameter Fuzzing, Steganalysis, Credential Discovery, Sudo Binary Abuse	🟩 Easy
✔️	HackMyVM	Crack		Anonymous FTP Access, Arbitrary File Read, Web Terminal Enumeration, Sudo Binary Abuse, HTTP Data Exfiltration, Private Key Retrieval	🟩 Easy
✔️	HackMyVM	DC01		SMB Enumeration, RID Cycling, Username-as-Password Testing, Kerberoasting, Credential Discovery, NTDS.dit Extraction, Pass-the-Hash	🟩 Easy
✔️	HackMyVM	Dejavu		File Upload, PHP Execution Restriction Bypass, Traffic Sniffing, Image Processing Exploitation, Sudo Binary Abuse	🟩 Easy
✔️	HackMyVM	Doll		Docker Registry Exposure, Container Image Analysis, Private Key Retrieval, Port Forwarding, Sudo Binary Abuse, SUID Abuse	🟩 Easy
✔️	HackMyVM	Hannah		Ident Enumeration, Login Brute Forcing, Cron Job Abuse	🟩 Easy
✔️	HackMyVM	Icecream		SMB Enumeration, Administrative API Abuse, File Upload, Sudo Binary Abuse, Sudoers File Overwrite	🟩 Easy
✔️	HackMyVM	Liar		SMB Enumeration, Username Enumeration, RID Cycling, Login Brute Forcing, Credential Reuse, Alternate Credential Execution	🟩 Easy
✔️	HackMyVM	Luz		SQL Injection, Password Cracking, File Upload, SUID Abuse	🟩 Easy
✔️	HackMyVM	Observer		Username Enumeration, Arbitrary File Read, Private Key Retrieval, Symbolic Link Traversal, Credential Discovery	🟩 Easy
✔️	HackMyVM	Oliva		Protected File Cracking, Encrypted Filesystem Analysis, Linux Capabilities Abuse, Credential Disclosure, MySQL Credential Discovery	🟩 Easy
✔️	HackMyVM	RoosterRun		SQL Injection, Password Cracking, Unsafe Deserialization, Cron Job Abuse, Filesystem ACL Abuse	🟩 Easy
🚧	HackMyVM	Runas		SMB Enumeration, Web Application Enumeration, Local File Inclusion, File Disclosure, Web Log Enumeration, Configuration Disclosure	🟩 Easy
✔️	HackMyVM	Simple		SMB Enumeration, Username Enumeration, Weak Credential Testing, Credential Disclosure, Web Root Write Abuse, File Upload, Token Impersonation	🟩 Easy
✔️	HackMyVM	Translator		Command Injection, Cipher Decoding, Credential Discovery, Sudo Binary Abuse, Pager Escape	🟩 Easy
✔️	HackMyVM	TriplAdvisor		SMB Enumeration, Web Application Enumeration, Local File Inclusion, Log Poisoning, Remote Code Execution, Token Impersonation, Credential Dumping	🟩 Easy
✔️	HackMyVM	Uvalde		Anonymous FTP Access, Web Content Discovery, Terminal Output Disclosure, Predictable Password Generation, Login Brute Forcing, Credential Reuse, Sudo Script Abuse	🟩 Easy
✔️	HackMyVM	Zero		SMB Enumeration, SMB Remote Code Execution, Zerologon, Directory Replication Abuse, Pass-the-Hash	🟩 Easy
✔️	HackMyVM	Bounty		Arbitrary File Write, Remote Code Execution, Sudo User Switching, Private Key Retrieval	🟨 Medium
✔️	HackMyVM	Casino		Server-Side Request Forgery, Private Key Retrieval, Reverse Engineering, Symbolic Execution, Open File Descriptor Credential Recovery	🟨 Medium
✔️	HackMyVM	Colors		Anonymous FTP Access, Steganalysis, Data Encoding and Decoding, Authorized Key Injection, IPv6 Enumeration, Sudo Binary Abuse, Binary Patching, Network Spoofing, Name Resolution Poisoning	🟨 Medium
✔️	HackMyVM	Comet		Login Brute Forcing, Reverse Engineering, Password Cracking, Username Enumeration, Hash Collision, Sudo Script Abuse	🟨 Medium
✔️	HackMyVM	DC02		Kerberos User Enumeration, Username-as-Password Testing, RID Cycling, AS-REP Roasting, Windows Privileged Group Abuse, Credential Dumping, Machine Account Credential Extraction, Directory Replication Abuse, Pass-the-Hash	🟨 Medium
✔️	HackMyVM	DC03		Name Resolution Poisoning, Credential Capture, Password Cracking, Active Directory ACL Abuse	🟨 Medium
✔️	HackMyVM	Factorspace		Web Content Discovery, CAPTCHA Bypass, Login Brute Forcing, XPath Injection, Credential Extraction, UDP Service Enumeration, Traffic Sniffing, Private Key Retrieval	🟨 Medium
✔️	HackMyVM	HackingToys		Server-Side Template Injection, Remote Code Execution, Port Forwarding, Credential Reuse, Privileged Binary Replacement	🟨 Medium
✔️	HackMyVM	JO2024		Unsafe Deserialization, Race Condition, Session Credential Theft, X11 Session Hijacking, Client-Side Access Control Bypass, Credential Reuse	🟨 Medium
✔️	HackMyVM	Lookup		Username Enumeration, Login Brute Forcing, Virtual Host Enumeration, Command Injection, PATH Hijacking, Credential Extraction, Sudo File Read, Private Key Retrieval	🟨 Medium
✔️	HackMyVM	Minimal		Source Code Disclosure, Password Reset Token Prediction, File Upload, PHP Execution Restriction Bypass, Reverse Engineering, Stack Buffer Overflow, Return-Oriented Programming	🟨 Medium
🚧	HackMyVM	Pyrat		Custom Service Enumeration, Arbitrary Code Execution, Credential Discovery, Credential Reuse, Git Repository Analysis, Process Monitoring, Privileged Service Abuse	🟨 Medium
✔️	HackMyVM	Wave		Backup Disclosure, Backdoor Analysis, Data Encoding and Decoding, Port Forwarding, File Upload, Authorized Key Injection, Pager Escape	🟨 Medium
✔️	HackMyVM	Zurrak		SMB Enumeration, Web Content Discovery, Credential Disclosure, Authentication Secret Cracking, JWT Forgery, Steganalysis, Reverse Engineering, Login Brute Forcing, Virtual Disk Analysis, Password Cracking, PostgreSQL Command Execution, Credential Discovery, Samba Magic Script Abuse	🟨 Medium
✔️	HackMyVM	Metamorphose		Erlang Service Enumeration, Authentication Secret Cracking, Distributed Erlang Command Execution, Kafka Enumeration, Credential Extraction, Password Cracking, Linux Privileged Group Abuse, Credential Dumping	🟥 Hard
🚧	HackMyVM	Universe		Technology Fingerprinting, HTTP Redirect Analysis	🟥 Hard
✔️	HackMyVM	Zday		NFS Enumeration, Default Credential Abuse, Credential Disclosure, Restricted Shell Escape, NFS no_root_squash Abuse, SUID Abuse	🟥 Hard
✔️	HackMyVM	Zeug		Anonymous FTP Access, Server-Side Template Injection, Sandbox Escape, Arbitrary File Read, Reverse Engineering, PRNG Prediction, Sudo User Switching, Shared Library Injection	🟥 Hard