⌕
| Machine | OS | Difficulty | Techniques | User | Root |
|---|---|---|---|---|---|
| Unika | 🪟 Windows | Easy | LFI NTLMv2 Hashcat | ✓ | ✓ |
| EscapeTwo | 🪟 Windows | Easy | ADCS ESC4→ESC1 MSSQL | ✓ | ✓ |
| Support | 🪟 Windows | Easy | SMB LDAP Rev Eng RBCD | ✓ | ✓ |
| Timelapse | 🪟 Windows | Easy | SMB PFX LAPS | ✓ | ✓ |
| Interpreter | 🐧 Linux | Medium | CVE-2023-43208 Deserialization PBKDF2 eval() Injection | ✓ | ✓ |
| Browsed | 🐧 Linux | Medium | Chrome Extension Bash Arithmetic Injection SSRF pyc Hijack | ✓ | ✓ |
| Overwatch | 🪟 Windows | Medium | SMB WCF/SOAP Injection DNS Poisoning Active Directory | ✓ | ✓ |
| Active | 🪟 Windows | Easy | GPP / MS14-025 Kerberoasting SMB | ✓ | ✓ |
| Forest | 🪟 Windows | Easy | AS-REP Roast DCSync WriteDACL | ✓ | ✓ |
| Cicada | 🪟 Windows | Easy | SMB Password Spray secretsdump | ✓ | ✓ |
| Sauna | 🪟 Windows | Easy | AS-REP Roast DCSync AutoLogon | ✓ | ✓ |
| Escape | 🪟 Windows | Medium | MSSQL xp_dirtree NTLM ADCS ESC1 | ✓ | ✓ |
| Sea | 🐧 Linux | Easy | CVE-2023-41425 Stored XSS → RCE Command Injection | ✓ | ✓ |
| ServMon | 🪟 Windows | Easy | Anonymous FTP CVE-2019-20085 NSClient++ | ✓ | ✓ |
| Flight | 🪟 Windows | Hard | LFI → NTLM Password Spray GodPotato | ✓ | ✓ |
| Blackfield | 📦 AD | Hard | AS-REP Roast lsass Dump SeBackupPrivilege | ✓ | ✓ |
| Nibbles | 🐧 Linux | Easy | File Upload RCE sudo Misconfiguration CVE-2015-6967 | ✓ | ✓ |
| TheFrizz | 📦 AD | Medium | Gibbon LMS RCE Kerberos-only GPO Abuse | ✓ | ✓ |
| Eighteen | 📦 AD | Hard | CVE-2025-8110 BadSuccessor dMSA Abuse | ✓ | ✓ |
| TombWatcher | 🪟 Windows | Hard | Kerberoasting gMSA ACL Abuse ESC15 | ✓ | ✓ |
no machines match your search