All Walkthroughs

Browse through our comprehensive collection of CTF walkthroughs and security writeups

Showing walkthrough

Aug 08, 2026 • 4 min read

Wingdata - HackTheBox

Easy-difficulty Linux box featuring CVE-2025-47812 unauthenticated RCE against Wing FTP Server 7.4.3 for initial access, offline cracking of a salted SHA-256 password hash for lateral movement, and CVE-2025-4517 PATH_MAX tarfile bypass via a malicious tarball to escalate privileges to root.

#CVE-2025-4517 #CVE-2025-47812 #Hash Cracking #Linux #RCE

TryHackMe Medium

Jan 09, 2026 • 5 min read

Mindgames - TryHackMe

Medium-difficulty Linux box featuring RCE through Brainfuck-encoded Python execution, followed by automated enumeration and privilege escalation via CVE-2021-4034 (PwnKit).

#Brainfuck #Linux #PwnKit #Python #RCE