MadLabs is a halloween themed, multi-tiered Linux machine. The exploitation path follows a strict logical flow, forcing the attacker to transition through multiple user contexts (www-data → igor → ...

Welcome to my writeup for Connection, an easy (beginner) Linux machine hosted on the HackMyVM platform. This box serves as an excellent case study on why proper file system permissions and access c...

In this writeup, we will be analyzing Echo, an entry level machine that offers a perfect playground for learning vulnerability chaining. Free of complex rabbit holes, this Easy target focuses purel...

For this writeup, we are pulling the pin on an entry-level machine called Grenade. While the name might sound intimidating, this box is actually a fantastic Easy target that serves as a perfect int...

Welcome back, fellow hackers! Today, we are diving into the writeup for my latest custom Linux machine available on HackMyVM: Sieste. While the name might suggest a relaxing afternoon nap, I promi...

Every pentester knows the feeling: you just wrapped up a box, the dopamine is still tracing through your veins, and you instantly want that next hit. Having just cleared System, I wasn’t looking fo...

The decision to tackle System, a vulnerable Linux machine created by avijneyam and hosted on HackMyVM was driven specifically by the hunt for a challenge focused on XML External Entity (XXE) vulner...

The alarm doesn’t sound. The cameras don’t blink. There are no ski masks, no getaway cars, and no bags with dollar signs on them. Yet, in less than twenty minutes, a secure financial institution ha...

In our previous posts, we built a solid foundation by conquering the 1-star and 2-star levels. Now, it is time to step up our game. We are officially moving to the 3-star difficulty tier on the sco...

In the previous post, we kicked things off by covering the entry level 1-star challenges to build up our foundation. In this post, we are officially moving up a level to tackle the more advanced 2-...