HMCyberAcademy

The Last Dance | Very Easy | Challenges | HackTheBox

Photon Lockdown | Very Easy | Challenges | HackTheBox

SQL Injection 18 | Visible error-based SQL injection

EARN WHILE YOU SLEEP!!!

TwoMillion | Easy | Linux Machine

Lame | Easy | Linux Machine

Bandit [Complete] | OverTheWire

Unified | Tier 2 | Starting Point | HackTheBox

Vaccine | Tier 2 | Starting Point | HackTheBox

Oopsie | Tier 2 | Starting Point | HackTheBox

Mr Robot CTF | TryHackMe

Archetype | Tier 2 | Starting Point | HackTheBox

SQL Injection 17 | SQL injection with filter bypass via XML encoding

SQL Injection 8 | SQL injection attack, listing the database contents on non-Oracle databases

Natas 10 | Command Injection Filter Bypass | OverTheWire Wargames

File Upload Vulnerability 4 | Web Shell Upload via Extension Blacklist Bypass

File Upload Vulnerability 1 | Remote Code Execution via Web Shell Upload

Command Injection 1 | OS Command Injection, Simple Case

Command Injection 4 | Blind OS Command Injection with Out-Of-Band Interaction

Install Kali Linux on NON-ROOTED Android Phone | Version 11

WebSocket 1 | Manipulating WebSocket Messages to Exploit Vulnerabilities

Behemoth [Complete] | OverTheWire

Race Condition 2 | Bypassing Rate Limits via Race Conditions | RaceAgainstTime

Natas [Complete] | OverTheWire

Natas 26 | Simplifying Serialized Exploits: Hacking with Custom Objects | OverTheWire Wargames

SQL Injection 11 | Blind SQL injection with conditional responses

Natas 32 | Webroot's Hidden Treasures: Perl Command Injection | OverTheWire Wargames

Natas 23 | Strings that Bend Reality: PHP Type Juggling!! | OverTheWire Wargames

SQL Injection 9 | SQL injection attack, listing the database contents on Oracle

File upload 2 | Web shell upload via Content-Type restriction bypass

SQL Injection 13 | Blind SQL injection with time delays

SQL Injection 16 | Blind SQL injection with out-of-band data exfiltration

Command Injection 1 | OS Command Injection, Simple Case

SQL Injection 1 | SQL injection vulnerability in WHERE clause allowing retrieval of hidden data

SQL Injection 2 | SQL injection vulnerability allowing login bypass

File upload 3 | Web shell upload via path traversal

SSRF 2 | Basic SSRF against another Back-End System

[EXPERT] File Upload Vulnerability 7 | Web Shell Upload via Race Condition

Access Control 2 | Unprotected Admin Functionality with Unpredictable URL

File upload 1 | Web shell upload via Content-Type restriction bypass

Command Injection 3 | Blind OS Command Injection with Output Redirection

SQL Injection 2 | SQL injection vulnerability allowing login bypass

Information Disclosure 1 | Information Disclosure in Error Messages

Command Injection 2 | Blind OS Command Injection with Time Delays

Command Injection 4 | Blind OS Command Injection with Out-Of-Band Interaction

Command Injection 5 | Blind OS Command Injection with Out-Of-Band Data Exfiltration

File upload 6 | Remote Code Execution via Polyglot Web Shell Upload