All Walkthroughs - HackPath

HackTheBox Easy

Aug 08, 2026 • 4 min read

Wingdata - HackTheBox

Easy-difficulty Linux box featuring CVE-2025-47812 unauthenticated RCE against Wing FTP Server 7.4.3 for initial access, offline cracking of a salted SHA-256 password hash for lateral movement, and CVE-2025-4517 PATH_MAX tarfile bypass via a malicious tarball to escalate privileges to root.

#CVE-2025-4517 #CVE-2025-47812 #Hash Cracking #Linux #RCE

OverTheWire Easy

Apr 16, 2026 • 10 min read

Overthewire - Bandit 5-9

Master advanced Linux commands with OverTheWire Bandit Part 2 (Levels 5-9). Learn find with multiple criteria, grep for pattern matching, sort & uniq for data processing, and strings for binary file analysis. Includes regex basics!

#Bandit #Linux #Regex #Wargames #find

OverTheWire Easy

Apr 16, 2026 • 10 min read

Overthewire - Bandit 0-4

Master essential Linux commands through OverTheWire Bandit Levels 0-4. Learn to handle dashed filenames, spaces in filenames, hidden files, and file type detection. Beginner-friendly with practical examples and multiple solution methods.

#Bandit #Linux #Wargames

TryHackMe Medium

Jan 09, 2026 • 5 min read

Mindgames - TryHackMe

Medium-difficulty Linux box featuring RCE through Brainfuck-encoded Python execution, followed by automated enumeration and privilege escalation via CVE-2021-4034 (PwnKit).

#Brainfuck #Linux #PwnKit #Python #RCE

TryHackMe Medium

Dec 20, 2025 • 10 min read

Safezone - TryHackMe

Medium Linux CTF combining Apache log poisoning, authentication bruteforcing, command injection filter bypass, and creative sudo exploitation. Multiple privilege escalation paths from web to root.

#Command Injection #Linux #Log Poisoning #Web

HackTheBox Medium

Dec 18, 2025 • 10 min read

Imagery - HackTheBox

A medium-rated Linux machine, designed to provide hands-on experience with specific web application vulnerabilities(XSS, LFI, OS command Injection) and privilege escalation techniques.

#Linux #Web