ZeroBox

Hack The Box and TryHackMe machines

Browse 929 Hack The Box and TryHackMe machines by platform, operating system and difficulty. 55 of them are targets I solved myself and have a writeup and attack path page, linked below; the rest are listed for reference with a link to the official room and can be tracked in ZeroBox.

Hack The Box (415)TryHackMe (514)

Hack The Box machines

Android Easy (1)

MachineOSDifficultyTags
ExploreAndroidEasyBasic-Android, HTB

BSD Easy (2)

MachineOSDifficultyTags
LuanneBSDEasyHTB, Lua-Code-Injection, NetPGP-and-doas-Abuse
SenseBSDEasyExploiting-PFSense, HTB

BSD Medium (4)

MachineOSDifficultyTags
OpenKeySBSDMediumCVE-2019-19520, CVE-2019-19521, CVE-2019-19522, Code-Auditing
PoisonBSDMediumApache-log-poisoning, HTB, Tunneling-ports-over-SSH
SchooledBSDMediumCVE-2020-14321, CVE-2020-25627, HTB
YPuffyBSDMediumCVE-2018-14665, HTB

BSD Insane (3)

MachineOSDifficultyTags
AttendedBSDInsaneCVE-2019-12735, Creating-an-HTTP, HTB, based-pseudo
CrossFitTwoBSDInsaneHTB, Host-header-injection, NodeJS-path-hijacking, Yubikey-simulation
FortuneBSDInsaneHTB

Linux Very Easy (17)

MachineOSDifficultyTags
AppointmentLinuxVery EasyStarting Point, Tier 1, SQLi, Web Auth Bypass
BaseLinuxVery EasyStarting Point, Tier 2, PHP, Type Juggling
BikeLinuxVery EasyStarting Point, Tier 1, Node.js, SSTI
CrocodileLinuxVery EasyStarting Point, Tier 1, FTP, Web
FawnLinuxVery EasyStarting Point, Tier 0, FTP, Anonymous Login
FunnelLinuxVery EasyStarting Point, Tier 2, SSH, Port Forwarding
GuardLinuxVery EasyStarting Point, Tier 2, SSH, Web
IgnitionLinuxVery Easyhttp, web, cms, credentials
IncludedLinuxVery EasyStarting Point, Tier 1, TFTP, LFI
MeowLinuxVery EasyStarting Point, Tier 0, Telnet, Default Credentials
OopsieLinuxVery EasyStarting Point, Tier 2, IDOR, Web
PennyworthLinuxVery EasyStarting Point, Tier 2, Jenkins, Groovy
RedeemerLinuxVery EasyStarting Point, Tier 0, Redis, Database
SequelLinuxVery EasyStarting Point, Tier 1, MySQL, MariaDB
ThreeLinuxVery EasyStarting Point, Tier 2, AWS, S3
UnifiedLinuxVery EasyStarting Point, Tier 2, Log4j, CVE-2021-44228
VaccineLinuxVery EasyStarting Point, Tier 1, FTP, SQLi

Linux Easy (90)

MachineOSDifficultyTags
AcademyLinuxEasyComposer, HTB, cve-2018-15133, pam_tty_audit
AdmirerLinuxEasyHTB, Python-Library-Hijacking
AlertLinuxEasyCPTS, Web, Markdown XSS, LFI
AnalyticsLinuxEasyHTB
AntiqueLinuxEasyHTB, SNMP
ArmageddonLinuxEasyDrupal, HTB
BackdoorLinuxEasyDirectory-traversal, HTB
BankLinuxEasyExploiting-SUID-files, HTB
BashedLinuxEasyHTB
BeepLinuxEasyHTB, based-fuzzing, vulnerabilities
BiznessLinuxEasyHTB
BlockyLinuxEasyBasic-local-Linux, CVE-2017-6074, Decompiling-JAR-files, HTB
BlunderLinuxEasyBludit-CMS, CVE-2019-14287, HTB
BountyHunterLinuxEasyHTB, Source-code-review, XXE-injection
BrokerLinuxEasyWeb, ActiveMQ-CVE-2023-46604, Java-Deserialization, Sudo-Nginx
BusquedaLinuxEasyCPTS, Web, RCE, Python
CapLinuxEasyHTB, IDOR
ChemistryLinuxEasyCPTS, Web, CIF Parser, Python
CodifyLinuxEasyHTB
CozyHostingLinuxEasyHTB
CurlingLinuxEasyAnalyzing-hex-dump, Curl-usage, HTB
DeliveryLinuxEasyEmail-impersonation, HTB
DevvortexLinuxEasyHTB
DoctorLinuxEasyHTB
FriendZoneLinuxEasyHTB, Module-hijacking
FrolicLinuxEasyCracking-password, HTB, binaries-with-ret2libc, protected-ZIP-files
GoodGamesLinuxEasyBased-SQL-Injections, Exploiting-SSTI, Exploiting-Union, HTB
HaystackLinuxEasyCVE-2018-17246, Elasticsearch, HTB
HelpLinuxEasyGraphQL, HTB
HorizontallLinuxEasyCVE-2019-18818, CVE-2019-19609, CVE-2021-3129, HTB
InjectLinuxEasyCPTS, Web, Spring Cloud, SpEL Injection
IrkedLinuxEasyExploit-modification, HTB, Linux
KeeperLinuxEasyHTB
KnifeLinuxEasyHTB
KoboldLinuxEasyweb, suid, privesc
LaboratoryLinuxEasyArbitrary-read-file, CVE-2020-10977, HTB, Marshal-cookie-attack
LaCasaDePapelLinuxEasyHTB, Linux-inode-knowledge
LameLinuxEasyCVE-2007-2447, Exploiting-Samba, HTB
LateLinuxEasyHTB, Linux-file-attributes
MetaTwoLinuxEasyHTB
MiraiLinuxEasyForensic-file-recovery, HTB
MongodLinuxEasyMongoDB, No-Auth
MonitorsTwoLinuxEasyCPTS, Web, Cacti, Docker Breakout
NetworkedLinuxEasyCommand-injection, File-upload-bypass, HTB
NibblesLinuxEasyExploiting-NOPASSWD, HTB
NodeBlogLinuxEasyHTB
NunchucksLinuxEasyAppArmor-Profile-Bypass, HTB, NodeJS-Nunjucks-SSTI
OpenAdminLinuxEasyHTB
OpenSourceLinuxEasyDirectory-Traversal, HTB, Network-Pivoting, Unrestricted-File-Upload
PandoraLinuxEasyHTB, SNMP
PaperLinuxEasyCVE-2019-17671, CVE-2021-3560, HTB, Linux-Fundamentals
PCLinuxEasyCPTS, gRPC, SQL Injection, Pivoting
PerfectionLinuxEasyCPTS, Web, SSTI, Ruby
PhotobombLinuxEasyCommand-Injection, HTB
PilgrimageLinuxEasyHTB
PostmanLinuxEasyHTB, Redis
PreciousLinuxEasyCPTS, Web, Command Injection, pdfkit
PreignitionLinuxEasyHTTP, Admin-Bypass
PreviseLinuxEasyHTB, PATH-hijacking
RedPandaLinuxEasyHTB, Source-code-review, XML-Entity-Injection
RouterSpaceLinuxEasyCVE-2021-3156, Command-Injection, HTB, Using-Android-Emulators
SafeLinuxEasyHTB
SauLinuxEasyHTB
ScriptKiddieLinuxEasy2020, 7384, CVE-2020-7384, Exploiting-CVE
SeaLinuxEasyCPTS, Web, SeaCMS, XSS
SecretLinuxEasyHTB, JWT-forgery, SUID
ShockerLinuxEasyExploiting-NOPASSWD, Exploiting-shellshock, HTB
ShoppyLinuxEasyHTB, NoSQL-Injection, Reverse-Engineering
SightlessLinuxEasyCPTS, Web, SQLPad, Chrome DevTools
SoccerLinuxEasyCPTS, Web, Blind SQLi, WebSockets
SpectraLinuxEasyFile-System-Permissions, HTB, Lateral-Movement, Sudo
SquashedLinuxEasyHTB
SteamCloudLinuxEasyExploiting-Kubernetes, HTB
StockerLinuxEasyCPTS, Web, NoSQL Injection, Server-Side XSS
SundayLinuxEasyBrute-forcing-SSH, Exploiting-Sudo-NOPASSWD, HTB
SwagShopLinuxEasyCVE-2015-1397, Exploit-modification, GTFObins, HTB
SyncedLinuxEasyRsync, Anonymous
TabbyLinuxEasyHTB, LXD-Abuse, ZIP-Cracking
TeacherLinuxEasyCVE-2018-1133, HTB, Website
TopologyLinuxEasyHTB
TraceBackLinuxEasyHTB, SSH-Motd-Editing
TraverxecLinuxEasyGTFOBins, HTB, SSH-Key-Cracking
TrickLinuxEasyDNS-Zone-transfer, HTB
TwoMillionLinuxEasyHTB
UnderpassLinuxEasySNMP-Walk, Daloradius, FreeRADIUS, Password-Cracking
UsageLinuxEasyCPTS, Web, Blind SQLi, 7-Zip Symlink
ValentineLinuxEasyExploiting-Heartbleed, HTB, Heartbleed
ValidationLinuxEasyHTB
WifineticLinuxEasyHTB
WriteupLinuxEasyHTB, Path-hijacking, Process

Linux Medium (100)

MachineOSDifficultyTags
AgileLinuxMediumCPTS, Web, LFI, Werkzeug PIN
AILinuxMediumDebugging-with-JDWP, HTB, Speech-to-Text
AmbassadorLinuxMediumCVE-2021-43798, Configuration-analysis, HTB
ApocalystLinuxMediumBasic-steganograpy, HTB, HTTP, Wordlist-generation
AragogLinuxMediumHTB
AwkwardLinuxMediumHTB
BackendLinuxMediumHTB
BackendTwoLinuxMediumHTB
BagelLinuxMediumCPTS, Web, LFI, Spring Boot
BitlabLinuxMediumDynamic-Binary-Analysis, Git-Hooks, HTB, Web-Hooks
BlurryLinuxMediumWeb, ClearML-CVE-2024-24590, Pickle-Deserialization, PyTorch
BoltLinuxMediumDocker-Image, HTB
BookLinuxMediumHTB, Logrotate, SQL-Truncation
BroScienceLinuxMediumCPTS, Web, Insecure Deserialization, PRNG
BucketLinuxMediumDynamoDB, HTB, PD4ML
CacheLinuxMediumBasic-SQL-Injection, HTB, Memcached
CanapeLinuxMediumCVE-2017-12636, Exploiting-Sudo-NOPASSWD, HTB
CarrierLinuxMediumHTB, SNMP
CatchLinuxMediumDecompile-APK-files, HTB, Laravel-Deserialization, Tamper-with-APK-files
CelestialLinuxMediumHTB, NodeJS
ChaosLinuxMediumHTB
ClickerLinuxMediumCPTS, Web, NFS, Mass Assignment
CraftLinuxMediumHTB, Python-eval-injection, Vault-SSH, pymysql-API
CronosLinuxMediumCommand-Injection, Exploiting-cron-jobs, HTB, SQL-Injection
DevOopsLinuxMediumExploiting-Python-pickle, HTB
DevzatLinuxMediumCVE-2019-20933, Command-Injection, HTB, Source-code-review
dynstrLinuxMediumCommand-Injection, Dynamic-DNS, HTB
EncodingLinuxMediumCPTS, Web, LFI, PHP Filters
EnterpriseLinuxMediumHTB
EpsilonLinuxMediumBasic-Cloud-Knowledge, Basic-Linux-Knowledge, HTB, OWASP-Top-10
EuropaLinuxMediumApache-virtual-hosts, HTB
FacultyLinuxMediumHTB, Linux-Fundamentals
FlusteredLinuxMediumAccessing-Azure-Storage, HTB
FluxCapacitorLinuxMediumExploiting-NOPASSWD, HTB
ForgeLinuxMediumHTB, Python-debugging
ForgotLinuxMediumHTB
FormatLinuxMediumCPTS, Web, LFI, Nginx Traversal
GoboxLinuxMediumHTB
HaircutLinuxMediumHTB, HTTP, based-fuzzing
HawkLinuxMediumDrupal, HTB, IppSec-Hawk-video)
HealthLinuxMediumExploit-modification, HTB
InceptionLinuxMediumAdvanced-local, HTB
InstantLinuxMediumCPTS, Mobile, Android APK, API
InterfaceLinuxMediumHTB
InvestigationLinuxMediumCPTS, Web, ExifTool, Forensics
JarvisLinuxMediumHTB
JewelLinuxMedium2020, 8165, CVE-2020-8165, HTB
JupiterLinuxMediumCPTS, Web, Grafana, PostgreSQL
LazyLinuxMediumExploiting-SUID-binaries, HTB, Padding-Oracle-Attack, to-aid-in
LightweightLinuxMediumHTB, Passive-Sniffing
LogForgeLinuxMediumHTB
LukeLinuxMediumHTB, NodeJs
MagicLinuxMediumBasic-SQL-Injection, HTB, Path-Hijacking, SUID-Abuse
MangoLinuxMediumGTFOBins-Abuse, HTB, NoSQL-Injection
MentorLinuxMediumHTB
MetaLinuxMedium2020, 2021, 22204-and-CVE, 29599
MonitoredLinuxMediumWeb, Nagios-XI-CVE-2023-40931, Cacti, SQLi
NinevehLinuxMediumChaining-exploits, HTB, HTTP, Local-file-inclusion
NodeLinuxMediumBypassing-ASLR-and-NX, HTB
NoterLinuxMediumCookie-Manipulation, HTB, Session-Hijacking
ObscurityLinuxMediumHTB, Known, Plaintext-Attack, Source-Code-Review
OctoberLinuxMediumBypassing-ASLR, Bypassing-NX/DEP, Exploiting-SUID-files, HTB
OlympusLinuxMediumCracking-WPA-handshakes, Exploiting-Xdebug, HTB, transfers
Only4YouLinuxMediumCPTS, Web, Cypher Injection, Neo4j
OnlyForYouLinuxMediumHTB
OphiuchiLinuxMediumHTB, YAML-Deserialization
PassageLinuxMediumBasic-Web, CVE-2019-11447, HTB
PitLinuxMedium12744, 2019, CVE-2019-12744, Exploiting-CVE
PopcornLinuxMediumHTB, Modifying-HTTP-requests
RansomLinuxMediumHTB
ReadyLinuxMediumCVE-2018-19571, CVE-2018-19585, Docker-Escape, HTB
RedCrossLinuxMediumHTB, Identification-and, PHP-Session-ID-reuse
RetiredLinuxMediumHTB, based-buffer-overflows
RunnerLinuxMediumCPTS, Web, TeamCity, CVE-2024-27198
SandwormLinuxMediumCPTS, Web, SSTI, Sandbox Escape
SealLinuxMediumGitbucket, HTB
SharedLinuxMediumCVE-2022-0543, CVE-2022-21699, HTB, Port-forwarding
ShibbolethLinuxMediumCVE-2021-27928, HTB, IPMI
SneakyLinuxMediumBasic-SQL-injection, Basic-buffer-overflow, Enumerating-SNMP, Exploiting-SUID-files
SneakyMailerLinuxMediumIMAP, Linux, Package Hijack, Phishing
SocketLinuxMediumHTB
SolidStateLinuxMediumChaining-vulnerabilities, Enumerating-POP-servers, Exploiting-Apache-James, Exploiting-world
StratosphereLinuxMediumExploiting-Sudo-NOPASSWD, HTB, Struts
SurveillanceLinuxMediumCPTS, Web, Craft CMS, ZoneMinder
TartarSauceLinuxMediumHTB, Identification-and
TenetLinuxMediumHTB
TentenLinuxMediumBasic-steganography, Enumerating-Wordpress, Exploit-modification, HTB
TheNotebookLinuxMedium2019, CVE-2019-5736, Exploiting-CVE, HTB
TimeLinuxMediumCVE-2019-12384, CVE-2019-12814, CVE-2019-14439, CVE-2020-24616
TimingLinuxMediumHTB, Side-Channel
UnattendedLinuxMediumAnalyzing-kernel-image, HTB, LFI-to-RCE
UndetectedLinuxMediumHTB, Reversing-Knowledge
UnicodeLinuxMediumHTB
UnionLinuxMediumHTB
UpDownLinuxMediumExploiting-SUID-binaries, HTB, HTTP-Header-modification
VaultLinuxMediumHTB, SSH-port-forwarding, configuration-files
WaldoLinuxMediumHTB, Linux-Capabilities, Rbash-escape-techniques, Source-code-review
WallLinuxMediumCVE-2019-16405, CVE-2019-17501, Decompiling-python-code, HTB
WriterLinuxMediumHTB, Local-File-Inclusion, Virtual-Host
ZippingLinuxMediumWeb, Zip-Symlink, LFI, SQLi

Linux Hard (61)

MachineOSDifficultyTags
AdmirerTooLinuxHardBasic-Linux-Fundamentals, CVE-2020-35476, CVE-2021-21311, CVE-2021-25294
AlteredLinuxHardHTB
CalamityLinuxHardHTB, mechanisms
CarpediemLinuxHard0492, 2022, CVE-2022-0492, Decrypting-TLS
ChainsawLinuxHardHTB, IPFS, Slack-space-and-Bmap, Using-Web3.py-API
CharonLinuxHardExploiting-SUID-files, HTB, Shell-command-injection, injection
CompromisedLinuxHardCVE-2018-12256, HTB, LiteCart-2.1.2
CrimeStoppersLinuxHardHTB
CybermondayLinuxHardHTB
DabLinuxHardCVE-2018-15473, HTB, Wfuzz-advanced
DeveloperLinuxHardAES-CTR-Decryption, Django-hash-cracking, HTB, Rust-Reversing
DownloadLinuxHardHTB
DriveLinuxHardHTB
EarlyAccessLinuxHardCommand-injection, HTB, Linux-capabilities, PHP-filtering
EllingsonLinuxHardHTB, Python-debugger-RCE, ROP-exploit
ExtensionLinuxHardHTB
FalafelLinuxHardBoolean, HTB, based-SQL-injection
FelineLinuxHardCVE-2020-11651, CVE-2020-11652, CVE-2020-9484, Deserialization
FluJabLinuxHardCookie-Tampering, HTB, Openssl-PRNG-exploit, Union-SQL-injection
ForwardSlashLinuxHardBash-Scripting, Blind-XXE, HTB, Pivoting
GhoulLinuxHardCVE-2018-18925, Git-reflog, Gogs-RCE, HTB
GoferLinuxHardHTB
HolidayLinuxHardBypassing-XSS-filtering, Exploiting-NPM-CLI, HTB
IntenseLinuxHardBinary, HTB, Length-Extension-Attack, SNMP-RCE
IntentionsLinuxHardHTB
IntuitionLinuxHardWeb, Flask, SSTI, Suricata-Bypass
JarmisLinuxHardHTB
JokerLinuxHardExploiting-tar-wildcards, HTB
KotarakLinuxHardExploiting-Wget, Exploiting-cron-jobs, HTB, containers
MailroomLinuxHardHTB
ModeratorsLinuxHardHTB
MonitorsLinuxHardCVE-2020-9496, Exploit-modification, HTB, Java-Deserialization
OneTwoSevenLinuxHardApache-rules, HTB
OouchLinuxHardHTB, OAuth
OverflowLinuxHard2021, 22204, Buffer-Overflow, CVE-2021-22204
OverGraphLinuxHardCSRF-attacks, FFmpeg, HTB, NoSQL-injection
OzLinuxHardHTB, PBKDF2, SHA256-hashes, Server
PatentsLinuxHardHTB, OOB-XXE, based
PhoenixLinuxHardHTB, Wildcard-injection
PikabooLinuxHard"Off, HTB, Local-File-Inclusion, Perl-function-injection
PlayerLinuxHardHTB, Vhost
PollutionLinuxHardHTB
PressedLinuxHardHTB
QuickLinuxHardESI-Injection, HTB, HTTP/3-Protocol, Using-Symlinks
RainyDayLinuxHardDocker/Host-shared-PIDs, HTB, Python, Tunneling
RegistryLinuxHardDocker-API, HTB
ScavengerLinuxHardHTB, Reversing-Rootkits, SQL-Injection
SeventeenLinuxHardCVE-2020-12640, HTB, Npm-registry, Npm-usage
ShrekLinuxHardEnumerating-hidden-tasks, HTB, Spectrogram-analysis, curve-cryptography
SnoopyLinuxHardHTB
SpiderLinuxHardBypassing-WAF-filters., HTB
SpooktrolLinuxHardHTB
StaticLinuxHardDEBUG, Exploiting-phuip, HTB, Multiple-Server-Pivoting
TalkativeLinuxHardHTB, Network
TentacleLinuxHardCVE-2020-7247, HTB
TravelLinuxHardEditing-LDAP-Attributes, HTB, Memcached, PHP-Deserialization
UnbalancedLinuxHardBlind-XPATH-Injection, HTB, hole
UnobtainiumLinuxHardHTB, Prototype-pollution
VesselLinuxHardHTB
ZettaLinuxHardFXP-&-FTP-Bounce-Attack, HTB
ZipperLinuxHardHTB, Zabbix-API

Linux Insane (31)

MachineOSDifficultyTags
AriekeiLinuxInsaneCVE-2016-3714, HTB, Identifying-containers, techniques
BookwormLinuxInsaneHTB
BrainfuckLinuxInsaneEnumerating-mail-servers, Exploit-modification, Exploiting-Wordpress, HTB
CorporateLinuxInsaneHTB
CrossFitLinuxInsaneBlind-XSS, COR's-(Cross, CVE-2019-10774, HTB
CTFLinuxInsaneHTB, LDAP-Injection
DerailedLinuxInsaneHTB
DyplesherLinuxInsaneAMQP, Cuberite, HTB, Password-Cracking
FattyLinuxInsaneDeserialization, HTB, Path-Traversal, SQL-Injection
FingerprintLinuxInsaneForging-JWT-tokens, HQL-Injection, HTB
FulcrumLinuxInsaneAdvanced-remote, HTB, network-rules
JailLinuxInsaneEnumerating-NFS-shares, Escaping-SELinux-sandbox, Escaping-rvim, Exploiting-NOPASSWD
KryptosLinuxInsaneAnalysing-RNG, Exploiting-RC4-flaws, HTB, PDO-Injection
LaserLinuxInsaneHTB, Printer
MischiefLinuxInsaneHTB, techniques
NightmareLinuxInsaneCVE-2017-1000112, Exploit-modification, HTB, Reverse-engineering-64
OuijaLinuxInsaneHTB
PikaTwooLinuxInsaneHTB
PlayerTwoLinuxInsaneHTB, Heap, MQTT, Twirp-and-Protobuf
ReddishLinuxInsaneHTB, Tunneling
RegistryTwoLinuxInsaneHTB
ResponseLinuxInsaneAuthentication-Bypass, Directory-Traversal, HTB, SSRF-using-HTTP-long
RopeLinuxInsaneFormat-String, HTB
RopeTwoLinuxInsaneHTB, Heap, V8-Exploit-Development
ScannedLinuxInsaneHTB, Manual
SinkLinuxInsaneHTB, HTTP-Desync
SkyfallLinuxInsaneHTB
SmasherLinuxInsaneBinary-file-fuzzing, Binary-file-reversing, Exploit-development, HTB
Smasher2LinuxInsaneExploiting-mmap-handlers, HTB, Reversing-shared-objects
StackedLinuxInsane2021, 32090, CVE-2021-32090, Exploiting-CVE
TobyLinuxInsaneCryptography, HTB

Windows Very Easy (5)

MachineOSDifficultyTags
ArchetypeWindowsVery EasyStarting Point, Tier 2, MSSQL, xp_cmdshell
DancingWindowsVery EasyStarting Point, Tier 0, SMB, Share Enumeration
ExplosionWindowsVery EasyStarting Point, Tier 0, RDP, Remote Desktop
MarkupWindowsVery EasyStarting Point, Tier 2, XXE, XML
TacticsWindowsVery Easysmb, administrator, share, starting-point

Windows Easy (29)

MachineOSDifficultyTags
AccessWindowsEasyBasic-Windows-knowledge, HTB
Active (2018 Retired)WindowsEasyHTB
ArcticWindowsEasyExploit-modification, HTB, and-HTTP-requests
BlueWindowsEasyHTB
BountyWindowsEasyHTB, patches
BuffWindowsEasyBuffer-Overflow, HTB, Port-Forwarding, Unauthenticated-RCE
CraftyWindowsEasyCPTS, Windows, Minecraft, Log4j
DevelWindowsEasyHTB, techniques
DriverWindowsEasyHTB, Hash-capturing, Meterpreter
ForestWindowsEasyAS-REP Roasting, ASREPRoasting, Active Directory, BloodHound
GrandpaWindowsEasyCVE-2017-7269, HTB, techniques
GrannyWindowsEasyCVE-2017-7269, HTB, techniques
HeistWindowsEasyCracking-Cisco-hashes, HTB, ProcDump, RID-bruteforce
JerryWindowsEasyBasic-script-debugging, HTB, SILENTTRINITY-post
LegacyWindowsEasyCVE-2008-4250, Exploiting-SMB, HTB
LoveWindowsEasyApplocker-policies, Exploit-modification, HTB
MailingWindowsEasyCPTS, Windows, Email, Directory Traversal
NestWindowsEasy.NET-Development, HTB
NetmonWindowsEasy2018, 9276, CVE-2018-9276, HTB
OmniWindowsEasyHTB, Windows-IoT-Core
OptimumWindowsEasyCVE-2014-6287, HTB, techniques
RemoteWindowsEasyCVE-2019-18988, HTB
ResponderWindowsEasyLFI, WinRM, Responder
ReturnWindowsEasyHTB, Network-Printer-Abuse
SaunaWindowsEasyAS-REP Roasting, ASREPRoasting-Attack, Active Directory, BloodHound
ServMonWindowsEasy1000, Exploiting-NSClient++, Exploiting-NVMS, HTB
SupportWindowsEasyHTB
TimelapseWindowsEasyHTB, Public-SMB-Share
ToolboxWindowsEasyDocker-Toolbox, HTB

Windows Medium (32)

MachineOSDifficultyTags
AdministratorWindowsMediumActiveDirectory, ADCS, Golden-Cert, Kerberoasting
AeroWindowsMediumHTB
ArkhamWindowsMediumHTB, Java-Deserialization, UAC-bypass
AtomWindowsMediumHTB
AuthorityWindowsMediumHTB
BartWindowsMediumEnumerating-subdomains, HTB, Log-poisoning, combinations
BastardWindowsMediumEnumerating-CMS-versions, Exploit-modification, HTB, techniques
BastionWindowsMediumExploiting-MRemoteNG, SAM Hive, SMB, VHD
CascadeWindowsMediumAD Recycle Bin, AES-Encryption, Active Directory, Active-Directory
ChatterboxWindowsMediumHTB, techniques
EscapeWindowsMediumHTB
EscapeTwoWindowsMediumActiveDirectory, MSSQL-Linked-Server, Coerce-Authentication, GPO-Abuse
FlightWindowsMediumCPTS, Active Directory, Pivoting, Responder
FuseWindowsMediumHTB, Printer
GiddyWindowsMediumHTB, Windows-Registry
HospitalWindowsMediumWindows, Roundcube, Webmail, CVE-2023-43770
IntelligenceWindowsMediumAD CS, ADIDNS-abuse, Active Directory, BloodHound
JeevesWindowsMediumDefender, HTB, Pass, hash-attacks
JsonWindowsMediumHTB, Using-ysoserial.net, dnSpy
ManagerWindowsMediumCPTS, Active Directory, MSSQL, AD CS
MonteverdeWindowsMediumActive Directory, Azure AD Connect, BloodHound, MSOL
OutdatedWindowsMediumCVE-2022-30190, Golden-Ticket-Attack, HTB
PovWindowsMediumHTB
QuerierWindowsMediumExcel-macros, HTB, PowerView
ResoluteWindowsMediumActive Directory, DLL Injection, DNSAdmins, DnsAdmins-Abuse
ScrambledWindowsMediumActive Directory, Deserialization, Deserialization-attacks, Kerberoasting
SecNotesWindowsMediumCSRF-payload-creation, HTB
SiloWindowsMediumDatabase, Enumerating-Oracle-SIDs, Oracle, TNS Listener
SniperWindowsMediumHTB, LFI-and-RFI, Malicious-CHM-Creation, NetNTLM
StreamIOWindowsMediumAutomatic-LDAP, HTB, LFI-using-PHP-wrappers, Source-Code-Review
VisualWindowsMediumCPTS, Windows, Web, Visual Studio
WorkerWindowsMediumAzure-DevOps, HTB, OWASP-Top-10, SVN-Repository

Windows Hard (22)

MachineOSDifficultyTags
AcuteWindowsHardHTB, Manual-Active-Directory, Windows-Defender-bypass
AnalysisWindowsHardHTB
AppsanityWindowsHardHTB
BlackfieldWindowsHardAS-REP Roasting, Active Directory, Anonymous-/-Guest, BloodHound
BreadcrumbsWindowsHardForging-PHP-sessions, HTB, SQL-Injection
CerberusWindowsHardHTB
CerealWindowsHardHTB
ConcealWindowsHardCVE-2018-8440, HTB, IKE-Configuration
ControlWindowsHardBasic-SQL-Injection, CVE-2019-11043, File-System, HTB
DropzoneWindowsHardExploit-modification, HTB, TFTP-data-transfer
HancliffeWindowsHardCVE-2018-16341, HTB, Socket-reuse-in-binary
HelplineWindowsHardApplocker, CVE-2017-9362, HTB
MantisWindowsHardHTB, Kerberos, databases
NapperWindowsHardHTB
ObjectWindowsHardHTB, Jenkins
ProperWindowsHardHTB
REWindowsHardEvading-Yara, Ghidra-XXE, HTB
ReelWindowsHardCVE-2017-0199, HTB, Identification-and, and-listener)
Reel2WindowsHardHTB, JEA-Bypass, Password-Cracking, Phishing
SearchWindowsHardGMSA-password-retrieval, HTB
SharpWindowsHardHTB
TallyWindowsHardEnumerating-Sharepoint, Exploit-modification, Exploiting-MSSQL, HTB

Windows Insane (18)

MachineOSDifficultyTags
AbsoluteWindowsInsaneHTB
AnubisWindowsInsaneASP-code-injection, HTB
APTWindowsInsaneHTB
BankrobberWindowsInsaneBuffer-Overflow, Command-Injection, File-read-through-SQLi, HTB
BigHeadWindowsInsaneEgg-hunting-technique, Extracting-ADS, HTB, Heap-spraying
CoderWindowsInsaneHTB
EtherealWindowsInsaneDNS-data-exfiltration, HTB, techniques
FighterWindowsInsaneAppLocker-bypassing, Command, HTB, Post
HackbackWindowsInsaneASPX-tunneling, HTB, Named-pipe-impersonation
HathorWindowsInsaneHTB
MinionWindowsInsaneForgery, HTB, streams
MultimasterWindowsInsaneCVE-2020-1472, HTB, Password-Cracking, SQL-Injection
PerspectiveWindowsInsaneHTB
PivotAPIWindowsInsaneHTB, Metadata
RabbitWindowsInsaneAuthorisation-bypass, HTB, Payload-creation
ReboundWindowsInsaneHTB
SekhmetWindowsInsaneHTB
SizzleWindowsInsaneDCSync, HTB, Kerberoasting, Passwordless-login

TryHackMe machines

Linux Very Easy (3)

MachineOSDifficultyTags
Advent of Cyber '23 Side QuestLinuxVery EasyTHM, CTF
Bypass Disable FunctionsLinuxVery EasyTHM, CTF, Chankro
REmux The TmuxLinuxVery EasyTHM, CTF, -

Linux Easy (153)

MachineOSDifficultyTags
0x41hazLinuxEasyTHM, CTF
A Bucket of PhishLinuxEasyTHM, CTF
Agent SudoLinuxEasyWeb, User-Agent-Spoofing, Steganography, Brute-Force
Agent TLinuxEasyPHP-8.1.0-dev, Backdoor, User-Agent-t, RCE
All in OneLinuxEasyTHM, CTF
AnonforceLinuxEasyTHM, CTF, nmap, John The Ripper
b3dr0ckLinuxEasyTHM, CTF
Basic PentestingLinuxEasySMB-Enumeration, Hydra-SSH, John-Cracking, Linux
BebopLinuxEasyTHM, CTF
BillingLinuxEasyTHM, CTF, -
Bounty HackerLinuxEasyFTP-Anonymous, Hydra, Tar-SUID, Linux
BrainsLinuxEasyTHM, CTF
Break Out The CageLinuxEasyTHM, CTF
Brute ItLinuxEasyTHM, CTF, -
BuggedLinuxEasyTHM, CTF
Bulletproof PenguinLinuxEasyTHM, CTF
c4ptur3-th3-fl4gLinuxEasyTHM, CTF, -
Capture!LinuxEasyTHM, CTF
Cat PicturesLinuxEasyTHM, CTF
Cat Pictures 2LinuxEasyTHM, CTF
Cheese CTFLinuxEasyTHM, CTF
Chill HackLinuxEasyTHM, CTF, -
Chocolate FactoryLinuxEasyTHM, CTF
Cipher's Secret MessageLinuxEasyTHM, CTF
ColddBox: EasyLinuxEasyTHM, CTF
CommittedLinuxEasyTHM, CTF
CompiledLinuxEasyTHM, CTF
ConfidentialLinuxEasyTHM, CTF
CorridorLinuxEasyIDOR, Hashing, MD5, Web
CouchLinuxEasyTHM, CTF
Crack the hashLinuxEasyTHM, CTF, hashcat
CreativeLinuxEasyTHM, CTF
CryptosystemLinuxEasyTHM, CTF
CTF collection Vol.1LinuxEasyTHM, CTF
CyberHeroesLinuxEasyReverse-Engineering, Authentication-Bypass, JavaScript, CTF
CyberLensLinuxEasyTHM, CTF
CyborgLinuxEasyOSCP, Borg Backup, Hash Cracking, Sudoers
DarkMatterLinuxEasyTHM, CTF
DavLinuxEasyTHM, CTF, nmap, gobuster
Dear QALinuxEasyTHM, CTF
Dig DugLinuxEasyTHM, CTF
DisgruntledLinuxEasyTHM, CTF, -
DreamingLinuxEasyTHM, CTF
Easy PeasyLinuxEasyTHM, CTF, -
EpochLinuxEasyCommand-Injection, Web, Linux, CTF
Evil-GPTLinuxEasyTHM, CTF, Python
Evil-GPT v2LinuxEasyTHM, CTF, -
ExposeLinuxEasyTHM, CTF
Flag VaultLinuxEasyTHM, CTF
Flag Vault 2LinuxEasyTHM, CTF
FlatlineLinuxEasyTHM, CTF
FlipLinuxEasyTHM, CTF
Fowsniff CTFLinuxEasyTHM, CTF, nmap, Metasploit
GalleryLinuxEasyTHM, CTF
GamingServerLinuxEasyTHM, CTF, nmap, hydra
GLITCHLinuxEasyTHM, CTF
Gotta Catch'em All!LinuxEasyTHM, CTF
GrepLinuxEasyTHM, CTF
h4ckedLinuxEasyTHM, CTF
Hacker vs. HackerLinuxEasyTHM, CTF
Hardening Basics Part 1LinuxEasyTHM, CTF
Hardening Basics Part 2LinuxEasyTHM, CTF
HeartBleedLinuxEasyTHM, CTF, -
Hide and SeekLinuxEasyTHM, CTF
HijackLinuxEasyTHM, CTF
IDELinuxEasyTHM, CTF, nmap, searchsploit
IgniteLinuxEasyOSCP, Fuel CMS, CVE-2018-16763, RCE
InclusionLinuxEasyLFI, Web, Sudo, Privesc
Infinity ShellLinuxEasyTHM, CTF
Intermediate NmapLinuxEasyNmap, Reconnaissance, Port-Scanning, CTF
Invite OnlyLinuxEasyTHM, CTF
Jack-of-All-TradesLinuxEasyTHM, CTF
Jax sucks alot.............LinuxEasyTHM, CTF
JPGChatLinuxEasyTHM, CTF
Juicy DetailsLinuxEasyTHM, CTF
KenobiLinuxEasyOSCP, Samba, ProFTPD, SUID
kibaLinuxEasyTHM, CTF
LazyAdminLinuxEasyOSCP, SweetRice CMS, MySQL Backup, Sudoers
Lesson Learned?LinuxEasyTHM, CTF
Lian_YuLinuxEasySteganography, Gobuster, FTP, Sudo-Privesc
LibraryLinuxEasyTHM, CTF, nmap, gobuster
LightLinuxEasyTHM, CTF, -
Lo-FiLinuxEasyWeb, LFI, Local-File-Inclusion, CTF
LookbackLinuxEasyTHM, CTF
MadnessLinuxEasyTHM, CTF
magicianLinuxEasyTHM, CTF
MD2PDFLinuxEasyWeb, XSS, SSRF, PDF-Conversion
Memory ForensicsLinuxEasyTHM, CTF
mKingdomLinuxEasyTHM, CTF, -
Monday MonitorLinuxEasyTHM, CTF, Wazuh, Sysmon
Mother's SecretLinuxEasyTHM, CTF, -
Mouse TrapLinuxEasyTHM, CTF
Mr. PhisherLinuxEasyTHM, CTF
MS Sentinel: Just LookingLinuxEasyTHM, CTF
MustacchioLinuxEasyTHM, CTF
NeighbourLinuxEasyIDOR, Web, Authentication, CTF
Ninja SkillsLinuxEasyTHM, CTF, -
OpacityLinuxEasyTHM, CTF
Oracle 9LinuxEasyTHM, CTF, Python
OrderLinuxEasyTHM, CTF
OverpassLinuxEasyTHM, CTF, -
PassCodeLinuxEasyTHM, CTF
Physical Security IntroLinuxEasyTHM, CTF, -
Pickle RickLinuxEasyWeb-Enumeration, Command-Injection, Sudo-Privesc, Linux
Plotted-TMSLinuxEasyTHM, CTF
ProbeLinuxEasyTHM, CTF
Psycho BreakLinuxEasyTHM, CTF
PublisherLinuxEasyTHM, CTF
PyratLinuxEasyTHM, CTF
RedLinuxEasyTHM, CTF
ResLinuxEasyRedis, Unauthorized-Access, Webshell, SUID-Xxd
RootMeLinuxEasyFile-Upload, Bypass, SUID-Python, Privesc
Sakura RoomLinuxEasyTHM, CTF
Searchlight - IMINTLinuxEasyTHM, CTF
Shadow TraceLinuxEasyTHM, CTF
Silver PlatterLinuxEasyTHM, CTF, -
Simple CTFLinuxEasyCMS-Made-Simple, CVE-2019-9053, SQLi, Vim-Sudo
SkynetLinuxEasyOSCP, Samba, SquirrelMail, Cuppa CMS
SlingshotLinuxEasyTHM, CTF
Smag GrottoLinuxEasyTHM, CTF
Snapped Phish-ing LineLinuxEasyTHM, CTF, VirusTotal
Sneaky PatchLinuxEasyTHM, CTF
Soupedecode 01LinuxEasyTHM, CTF
SourceLinuxEasyTHM, CTF
StartupLinuxEasyTHM, CTF, -
Stolen MountLinuxEasyTHM, CTF
SummitLinuxEasyTHM, CTF, PicoSecure
SurferLinuxEasyTHM, CTF
Tech_Supp0rt: 1LinuxEasyTHM, CTF
The GameLinuxEasyTHM, CTF
The Game v2LinuxEasyTHM, CTF
The Greenholt PhishLinuxEasyTHM, CTF, -
The Phishing PondLinuxEasyTHM, CTF
The Sticker ShopLinuxEasyTHM, CTF
The Witch's CauldronLinuxEasyTHM, CTF
ThompsonLinuxEasyTHM, CTF, nmap, gobuster
TomghostLinuxEasyOSCP, Ghostcat, CVE-2020-1938, Apache Tomcat
Toolbox: VimLinuxEasyTHM, CTF
ToolsRusLinuxEasyTHM, CTF, dirbuster, Hydra
TryHack3M: Bricks HeistLinuxEasyTHM, CTF
TShark Challenge I: TeamworkLinuxEasyTHM, CTF, Tshark
TShark Challenge II: DirectoryLinuxEasyTHM, CTF, Tshark
U.A. High SchoolLinuxEasyTHM, CTF
ValleyLinuxEasyTHM, CTF
Vulnerability CapstoneLinuxEasyFuel-CMS, CVE-2020-17463, RCE, Web
VulnNet: NodeLinuxEasyTHM, CTF
VulnversityLinuxEasyOSCP, File Upload Bypass, Burp Suite, SUID
W1seGuyLinuxEasyCryptography, XOR, Python, CTF
WalkthroughLinuxEasyTHM, CTF
WebOSINTLinuxEasyTHM, CTF
Wgel CTFLinuxEasyTHM, CTF
WhiteroseLinuxEasyTHM, CTF, nmap, gobuster
Wordpress: CVE-2021-29447LinuxEasyTHM, CTF

Linux Medium (216)

MachineOSDifficultyTags
0dayLinuxMediumTHM, CTF
AirplaneLinuxMediumTHM, CTF
AnnieLinuxMediumTHM, CTF
AnonymousLinuxMediumCTF, FTP, Cron, SUID
APIWizards BreachLinuxMediumTHM, CTF
AratusLinuxMediumTHM, CTF
ArchangelLinuxMediumCTF, LFI, Log-Poisoning, Cron
AsterLinuxMediumTHM, CTF
AthenaLinuxMediumTHM, CTF
Atomic Bird Goes Purple #1LinuxMediumTHM, CTF
Atomic Bird Goes Purple #2LinuxMediumTHM, CTF
Atomic Red TeamLinuxMediumTHM, CTF
Attacking ICS Plant #2LinuxMediumTHM, CTF
AVengerLinuxMediumTHM, CTF
BacktrackLinuxMediumTHM, CTF
Basic Malware RELinuxMediumTHM, CTF, -
batteryLinuxMediumTHM, CTF
BenignLinuxMediumTHM, CTF, Splunk
BibliotecaLinuxMediumTHM, CTF
Binary HeavenLinuxMediumTHM, CTF
BinexLinuxMediumTHM, CTF
BiohazardLinuxMediumTHM, CTF
bitemeLinuxMediumTHM, CTF
BlockLinuxMediumTHM, CTF
BlogLinuxMediumTHM, CTF
Boiler CTFLinuxMediumCTF, Joomla, Sar2HTML, SUID
Boogeyman 1LinuxMediumTHM, CTF, jq, Wireshark
Boogeyman 2LinuxMediumTHM, CTF
Boogeyman 3LinuxMediumTHM, CTF
BookstoreLinuxMediumREST-API, Werkzeug-Console, PIN-Exploit, SUID-Binary
Break itLinuxMediumTHM, CTF
Breaking RSALinuxMediumTHM, CTF
BreakmeLinuxMediumTHM, CTF
brokerLinuxMediumTHM, CTF
Brooklyn Nine NineLinuxMediumCTF, Steganography, Hydra, SUID
BruteLinuxMediumTHM, CTF, -
BypassLinuxMediumTHM, CTF
CAPTCHApocalypseLinuxMediumTHM, CTF
CarnageLinuxMediumTHM, CTF
ChronicleLinuxMediumTHM, CTF
Cicada-3301 Vol:1LinuxMediumTHM, CTF
Classic PasswdLinuxMediumTHM, CTF
ClockyLinuxMediumTHM, CTF
CMesSLinuxMediumTHM, CTF
CMSpitLinuxMediumTHM, CTF
Cold VVarsLinuxMediumTHM, CTF
ContainMeLinuxMediumTHM, CTF
ContAInmentLinuxMediumTHM, CTF
ContiLinuxMediumTHM, CTF
ConvertMyVideoLinuxMediumTHM, CTF
Cooctus StoriesLinuxMediumTHM, CTF
Crack The Hash Level 2LinuxMediumTHM, CTF
CryloLinuxMediumTHM, CTF
Crypto FailuresLinuxMediumTHM, CTF
CTF collection Vol.2LinuxMediumTHM, CTF
CyberCraftedLinuxMediumTHM, CTF
DebugLinuxMediumTHM, CTF
DevelpyLinuxMediumCTF, Python, Input-Injection, Cron
DevieLinuxMediumTHM, CTF
Disk Analysis & AutopsyLinuxMediumTHM, CTF
DockMagicLinuxMediumTHM, CTF
DodgeLinuxMediumTHM, CTF
DogcatLinuxMediumCTF, LFI, Log-Poisoning, Docker-Escape
Dumping Router FirmwareLinuxMediumTHM, CTF
Dunkle MaterieLinuxMediumTHM, CTF
DX1: Liberty IslandLinuxMediumTHM, CTF
EavesdropperLinuxMediumTHM, CTF
EmplineLinuxMediumTHM, CTF
En-passLinuxMediumTHM, CTF
ExfilNodeLinuxMediumTHM, CTF
ExtractedLinuxMediumTHM, CTF
FarewellLinuxMediumTHM, CTF
FixitLinuxMediumTHM, CTF
Forgotten ImplantLinuxMediumTHM, CTF
FortressLinuxMediumTHM, CTF
Frank & Herby make an appLinuxMediumTHM, CTF
Frank and Herby try again.....LinuxMediumTHM, CTF
Friday OvertimeLinuxMediumTHM, CTF, -
Game ZoneLinuxMediumCTF, SQLi, SSH-Tunneling, Webmin
GhizerLinuxMediumTHM, CTF
Git and CrumpetsLinuxMediumTHM, CTF
Git HappensLinuxMediumCTF, Git, Information-Disclosure, Source-Code-Analysis
GoldenEyeLinuxMediumTHM, CTF, -
HA Joker CTFLinuxMediumTHM, CTF, nmap
Hack Smarter SecurityLinuxMediumTHM, CTF
HamletLinuxMediumTHM, CTF
HammerLinuxMediumTHM, CTF
HarderLinuxMediumCTF, Git, HMAC, GPG
HaskHellLinuxMediumTHM, CTF
HeistLinuxMediumTHM, CTF
Hunt Me I: Payment CollectorsLinuxMediumTHM, CTF
Hunt Me II: Typo SquattersLinuxMediumTHM, CTF
IncludeLinuxMediumTHM, CTF
Industrial IntrusionLinuxMediumTHM, CTF
InfernoLinuxMediumTHM, CTF
InjecticsLinuxMediumTHM, CTF
IntranetLinuxMediumTHM, CTF
Investigating with SplunkLinuxMediumTHM, CTF, Splunk
IronShadeLinuxMediumTHM, CTF
Island OrchestrationLinuxMediumTHM, CTF
ItsyBitsyLinuxMediumTHM, CTF, ELK
Jacob the BossLinuxMediumJBoss, Java-Deserialization, CVE-2017-12149, SUID
JVM Reverse EngineeringLinuxMediumTHM, CTF
KeldagrimLinuxMediumTHM, CTF
KittyLinuxMediumTHM, CTF
Kubernetes for EveryoneLinuxMediumTHM, CTF
LockdownLinuxMediumTHM, CTF
Log Analysis with SIEMLinuxMediumTHM, CTF
Looking GlassLinuxMediumTHM, CTF
LookupLinuxMediumCTF, Web, ELK, Command-Injection
Lumberjack TurtleLinuxMediumTHM, CTF
Lunizz CTFLinuxMediumTHM, CTF
Madeye's CastleLinuxMediumTHM, CTF
MalBusterLinuxMediumTHM, CTF
MastermindsLinuxMediumTHM, CTF, Brim
MayhemLinuxMediumTHM, CTF
MetamorphosisLinuxMediumTHM, CTF
MindgamesLinuxMediumTHM, CTF
Minotaur's LabyrinthLinuxMediumTHM, CTF
MnemonicLinuxMediumTHM, CTF
MoebiusLinuxMediumTHM, CTF
Mr Robot CTFLinuxMediumWordPress, Wp-login, Dictionary-Attack, Nmap-SUID
NahamStoreLinuxMediumTHM, CTF
NanoCherryCTFLinuxMediumTHM, CTF
NappingLinuxMediumTHM, CTF
NaxLinuxMediumTHM, CTF
NerdHerdLinuxMediumTHM, CTF
Net Sec ChallengeLinuxMediumTHM, CTF, Nmap, hydra
New Hire Old ArtifactsLinuxMediumTHM, CTF
New York FlankeesLinuxMediumTHM, CTF
NoNameCTFLinuxMediumTHM, CTF
ObscureLinuxMediumTHM, CTF
Oh My WebServerLinuxMediumTHM, CTF
OllieLinuxMediumTHM, CTF
OlympusLinuxMediumTHM, CTF
One PieceLinuxMediumTHM, CTF
Overpass 3 - HostingLinuxMediumTHM, CTF
PalsForLifeLinuxMediumTHM, CTF
Peak HillLinuxMediumTHM, CTF
PosterLinuxMediumCTF, PostgreSQL, Metasploit, Privesc
PressedLinuxMediumTHM, CTF
PrioritiseLinuxMediumTHM, CTF
ProfilesLinuxMediumTHM, CTF
PS EclipseLinuxMediumTHM, CTF, Splunk
PWN101LinuxMediumTHM, CTF
pyLonLinuxMediumTHM, CTF
Rabbit StoreLinuxMediumTHM, CTF
Race Conditions ChallengeLinuxMediumTHM, CTF
RazorBlackLinuxMediumTHM, CTF
RecoveryLinuxMediumTHM, CTF
RecruitLinuxMediumWeb, Privesc, Security, CTF
Red Stone One CaratLinuxMediumTHM, CTF
RevengeLinuxMediumTHM, CTF
Reversing ELFLinuxMediumCTF, Reverse-Engineering, GDB, Radare2
REvil CorpLinuxMediumTHM, CTF
RoadLinuxMediumTHM, CTF
RobotsLinuxMediumTHM, CTF
SafeZoneLinuxMediumTHM, CTF
ScriptingLinuxMediumTHM, CTF
Security FootageLinuxMediumTHM, CTF
SeeTwoLinuxMediumTHM, CTF, Wireshark, tshark
SequenceLinuxMediumTHM, CTF
ServicesLinuxMediumTHM, CTF
SigHuntLinuxMediumTHM, CTF
SmolLinuxMediumTHM, CTF, nmap, wpscan
Snort Challenge - Live AttacksLinuxMediumTHM, CTF, snort
Snort Challenge - The BasicsLinuxMediumTHM, CTF, snort
SQHellLinuxMediumTHM, CTF
StuxCTFLinuxMediumCTF, Serialization, PHP-Object-Injection, Privesc
Super Secret TIpLinuxMediumTHM, CTF
Super-SpamLinuxMediumTHM, CTF
Supplemental MemoryLinuxMediumTHM, CTF
SustahLinuxMediumTHM, CTF
Sweettooth Inc.LinuxMediumTHM, CTF
TardigradeLinuxMediumTHM, CTF
TeamLinuxMediumCTF, LFI, Bash-Scripting, Privesc
TemplatesLinuxMediumTHM, CTF
That's The TicketLinuxMediumTHM, CTF
The Blob BlogLinuxMediumTHM, CTF
The Cod CaperLinuxMediumOSCP, SQLi, Command Injection, Buffer Overflow
The Great EscapeLinuxMediumTHM, CTF
The Impossible ChallengeLinuxMediumTHM, CTF
The London BridgeLinuxMediumTHM, CTF
The MarketplaceLinuxMediumTHM, CTF
The Server From HellLinuxMediumTHM, CTF
toc2LinuxMediumTHM, CTF
Tokyo GhoulLinuxMediumTHM, CTF
TryHack3M: Sch3Ma D3MonLinuxMediumTHM, CTF
TryHack3M: SubscribeLinuxMediumTHM, CTF
TryPwnMe OneLinuxMediumTHM, CTF
UltraTechLinuxMediumCTF, NodeJS, API, Docker
UmbrellaLinuxMediumTHM, CTF
Unbaked PieLinuxMediumTHM, CTF
Unstable TwinLinuxMediumTHM, CTF
Void ExecutionLinuxMediumTHM, CTF
Volt TyphoonLinuxMediumTHM, CTF
VoyageLinuxMediumTHM, CTF
VulnNetLinuxMediumTHM, CTF
VulnNet: dotjarLinuxMediumCTF, Tomcat, AJP-Ghostcat, JAR-Reverse
VulnNet: dotpyLinuxMediumTHM, CTF
VulnNet: EndgameLinuxMediumTHM, CTF
Warzone 1LinuxMediumTHM, CTF
Warzone 2LinuxMediumTHM, CTF
WatcherLinuxMediumCTF, LFI, FTP, Cron
WeaselLinuxMediumTHM, CTF
WekorLinuxMediumTHM, CTF
Whats Your Name?LinuxMediumTHM, CTF
WhyHackMeLinuxMediumTHM, CTF
WillowLinuxMediumTHM, CTF
WonderlandLinuxMediumCTF, Steganography, Privesc, Python
WWBuddyLinuxMediumTHM, CTF
XDR: Operation Global DaggerLinuxMediumTHM, CTF
XDR: Operation Global Dagger 2LinuxMediumTHM, CTF
You Got MailLinuxMediumTHM, CTF
Zeek ExercisesLinuxMediumTHM, CTF, Zeek
ZenoLinuxMediumTHM, CTF

Linux Hard (76)

MachineOSDifficultyTags
Advent of Cyber '24 Side QuestLinuxHardTHM, CTF
Adventure TimeLinuxHardTHM, CTF
Anonymous PlaygroundLinuxHardTHM, CTF
BorderlandsLinuxHardCTF, Pivoting, API, Docker
Brainpan 1LinuxHardOSCP, Buffer Overflow, Binary Exploitation, Wine
Capture ReturnsLinuxHardTHM, CTF
Carpe Diem 1LinuxHardTHM, CTF
CERTain DoomLinuxHardTHM, CTF
CherryBlossomLinuxHardTHM, CTF, nmap, smbclient
ChromeLinuxHardTHM, CTF
ContrabandoLinuxHardTHM, CTF
CRM SnatchLinuxHardTHM, CTF
Daily BugleLinuxHardOSCP, Joomla, SQLi, CVE-2019-8942
Dave's BlogLinuxHardTHM, CTF
Dead End?LinuxHardTHM, CTF
Different CTFLinuxHardTHM, CTF
DirectoryLinuxHardTHM, CTF
DiskruptLinuxHardTHM, CTF
DX2: Hell's KitchenLinuxHardTHM, CTF
El BanditoLinuxHardTHM, CTF
EnterPrizeLinuxHardTHM, CTF
envizonLinuxHardTHM, CTF
Event HorizonLinuxHardTHM, CTF
ExfiliburLinuxHardTHM, CTF
ExtractLinuxHardTHM, CTF
For Business ReasonsLinuxHardTHM, CTF
ForensicsLinuxHardTHM, CTF
Fusion CorpLinuxHardTHM, CTF
GameBuzzLinuxHardTHM, CTF
Hack BackLinuxHardTHM, CTF
hc0n Christmas CTFLinuxHardTHM, CTF
Initial Access PotLinuxHardTHM, CTF
InternalLinuxHardCTF, WordPress, Tunneling, Jenkins
Iron CorpLinuxHardTHM, CTF
JackLinuxHardTHM, CTF
Jurassic ParkLinuxHardTHM, CTF
K2LinuxHardTHM, CTF
Lost in RAMslationLinuxHardTHM, CTF
M4tr1x: Exit DeniedLinuxHardTHM, CTF
Misguided GhostsLinuxHardTHM, CTF
MotunuiLinuxHardTHM, CTF
MountaineerLinuxHardTHM, CTF
Plotted-EMRLinuxHardTHM, CTF
PrecisionLinuxHardTHM, CTF
Python PlaygroundLinuxHardTHM, CTF
RaLinuxHardTHM, CTF
Ra 2LinuxHardTHM, CTF
Rabbit HoleLinuxHardTHM, CTF
Racetrack BankLinuxHardTHM, CTF
REloadedLinuxHardTHM, CTF
RocketLinuxHardTHM, CTF
Royal RouterLinuxHardTHM, CTF
Sea SurferLinuxHardTHM, CTF
SecondLinuxHardTHM, CTF
Sequel DumpLinuxHardTHM, CTF
SetLinuxHardTHM, CTF
ShakerLinuxHardTHM, CTF
Shock and SilenceLinuxHardTHM, CTF
SpringLinuxHardTHM, CTF
Squid GameLinuxHardTHM, CTF
TartarusLinuxHardCTF, FTP, Directory-Traversal, Cron
TempleLinuxHardTHM, CTF
Tempus Fugit DuriusLinuxHardTHM, CTF
The Bandit SurferLinuxHardTHM, CTF
The Return of the YetiLinuxHardTHM, CTF
TryHack3M: Burg3r BytesLinuxHardTHM, CTF
TryHack3M: TriCipher SummitLinuxHardTHM, CTF
TryPwnMe TwoLinuxHardTHM, CTF
Uranium CTFLinuxHardTHM, CTF
VulnNet: InternalLinuxHardCTF, SMB, Redis, TeamCity
Year of the DogLinuxHardCTF, SQLi, Gitea, Command-Injection
Year of the FoxLinuxHardCTF, Web, Command-Injection, Port-Forwarding
Year of the JellyfishLinuxHardTHM, CTF
Year of the OwlLinuxHardTHM, CTF
Year of the PigLinuxHardCTF, Web, Brute-Force, Capabilities
Year of the RabbitLinuxHardCTF, BurpSuite, Steganography, Sudo-CVE

Linux Insane (8)

MachineOSDifficultyTags
CCT2019LinuxInsaneTHM, CTF
Crocc CrewLinuxInsaneTHM, CTF
Frosteau Busy with VimLinuxInsaneTHM, CTF
OsirisLinuxInsaneTHM, CTF
Snowy ARMageddonLinuxInsaneTHM, CTF
TakedownLinuxInsaneTHM, CTF
TheseusLinuxInsaneTHM, CTF
You're in a caveLinuxInsaneTHM, CTF

macOS Medium (1)

MachineOSDifficultyTags
Mac HuntmacOSMediumTHM, CTF

Other Easy (1)

MachineOSDifficultyTags
TakeOverOtherEasySubdomain-Takeover, DNS, Web, CTF

Windows Easy (16)

MachineOSDifficultyTags
Active Directory BasicsWindowsEasyActive Directory, Domain Controller, Forests, Trusts
Active Directory EnumerationWindowsEasyActive Directory, Enumeration, PowerView, BloodHound
AlfredWindowsEasyOSCP, Jenkins, PowerShell, Token Impersonation
AnthemWindowsEasyUmbraco-CMS, RDP, OSINT, Privesc
BloodHound BasicsWindowsEasyBloodHound, Neo4j, Graph Theory, Active Directory
BlueWindowsEasyOSCP, EternalBlue, MS17-010, SMB
BlueprintWindowsEasyTHM, CTF, -
Buffer Overflow PrepWindowsEasyOSCP, Buffer Overflow, x86, Mona.py
CorpWindowsEasyTHM, CTF, hashcat, PowerUp1.ps1
IceWindowsEasyOSCP, Icecast, CVE-2004-1561, Mimikatz
Living Off The LandWindowsEasyLOLBAS, Living Off The Land, Certutil, MSHTA
PrintNightmare, again!WindowsEasyTHM, CTF
Red Team EngagementsWindowsEasyRed Team, Rules of Engagement, OPSEC, Threat Intelligence
Red Team FundamentalsWindowsEasyRed Team, Methodology, OPSEC, Engagements
Steel MountainWindowsEasyOSCP, Rejetto HFS, CVE-2014-6287, Unquoted Service Path
Windows Event LogsWindowsEasyWindows, Event Logs, Sysmon, Log Clearing

Windows Medium (28)

MachineOSDifficultyTags
Active Directory HardeningWindowsMediumActive Directory, Hardening, LAPS, Tier Model
AD Certificate TemplatesWindowsMediumADCS, ESC1, Certipy, Certificates
AD Tier ModelWindowsMediumActive Directory, Tier Model, Tier 0, Tier 1
AllSignsPoint2PwnageWindowsMediumTHM, CTF
Attacking KerberosWindowsMediumKerberos, ASREPRoast, Kerberoasting, Silver Ticket
Attacktive DirectoryWindowsMediumCTF, ActiveDirectory, Kerberos, ASREPRoast
BlasterWindowsMediumCTF, RDP, CVE-2019-1388, UAC-Bypass
BlizzardWindowsMediumTHM, CTF
BrainstormWindowsMediumCTF, Buffer-Overflow, FTP, x86
Breaching Active DirectoryWindowsMediumActive Directory, NTLM Relay, LLMNR-Poisoning, Responder
Domain Privilege EscalationWindowsMediumActive Directory, BloodHound, GPO Abuse, ACLs
EdenWindowsMediumActive Directory, Kerberos, Pass-the-Ticket, BloodHound
Exploiting Active DirectoryWindowsMediumActive Directory, Kerberoasting, ASREPRoasting, Pass-the-Hash
GatekeeperWindowsMediumCTF, Buffer-Overflow, Oscilloscope, Privesc
HackParkWindowsMediumCTF, Hydra, BlogEngine, CVE-2019-6714
Investigating Windows 2.0WindowsMediumTHM, CTF
Investigating Windows 3.xWindowsMediumTHM, CTF
Lateral Movement and PivotingWindowsMediumActive Directory, Pivoting, Lateral Movement, WMI
Logless HuntWindowsMediumTHM, CTF
PrintNightmare, thrice!WindowsMediumTHM, CTF
RelevantWindowsMediumOSCP, SMB, IIS, WebShell
StealthWindowsMediumTHM, CTF
VulnNet: Active (Retired)WindowsMediumActive Directory, Redis, GPP-Passwords, Kerberoast
VulnNet: RoastedWindowsMediumCTF, ActiveDirectory, Kerberos, ASREPRoast
Windows Local PersistenceWindowsMediumPersistence, Registry, Scheduled Tasks, Services
Windows PrivEscWindowsMediumPrivilege Escalation, Windows, UAC Bypass, Service Exploitation
Windows PrivEsc ArenaWindowsMediumPrivilege Escalation, AlwaysInstallElevated, Unquoted Service Path, Registry
ZaWindowsMediumActive Directory, Kerberos, BloodHound, GPO Abuse

Windows Hard (12)

MachineOSDifficultyTags
Active Directory TrustsWindowsHardActive Directory, Domain Trusts, SID History, Trust Abuse
AV Evasion: ShellcodeWindowsHardRed Team, AV Evasion, Shellcode, AMSI
DiskFiltrationWindowsHardTHM, CTF
Elevating MovementWindowsHardTHM, CTF
EnterpriseWindowsHardActive Directory, ZeroLogon, SQLi, Privilege Escalation
HoloWindowsHardActive Directory, Multi-Host, Kerberos, BloodHound
LedgerWindowsHardTHM, CTF, Active Directory
Raz0rBlackWindowsHardActive Directory, NFS, Kerberos, AS-REP Roasting
ResetWindowsHardTHM, CTF, Active Directory
RetroWindowsHardCTF, WordPress, RDP, CVE-2019-1388
ThrowbackWindowsHardActive Directory, Red Team, Network, C2
WreathWindowsHardActive Directory, Pivoting, Chisel, Empire

Track every box offline. ZeroBox gives you a Kanban board for all of these machines. Open ZeroBox