↓ Skip to main content

OffSec Proving Grounds

Old writeups are in http://cameroncandau.com/ctf/archive/offsec---proving-grounds-writeups/

Bold indicates writeups in archive. Lower priority to redo; even if it’s been a while, at least I’ve seen it before.

Italics* indicate a minimal summary of the lab, sourced from reading existing writeups rather than going through it myself. As of writing this, I’m approaching my next exam attempt, and want to check for any remaining gaps in my methodology.

LainKusanagi List
#

LinuxWindowsActive Directory and Networks
ClamAVKevinAccess
PelicanInternalNagoya
PayDayAlgernonHokkaido
SnookumsJackoVault
BratarinaCraft
PebblesSquidTreat it like a small network
NibblesNickelSkillForge (Linux)
Hetemit (Permission denied when trying to start lab VM…)MedJed
ZenPhotoBillybossPriv Esc not in scope but good practice:
NukemShenziHutch
CockpitAuthByResourced
ClueSlort
ExtplorerHepet
PostfishDVR4
HawatMiceAWS (Not in the exam)
WallaMonsterPathway
PCFish
Apex
Sorcerer
Sybaris
Peppo
Hunit
Readys*
Astronaut
Bullybox*
Marketing*
Exfiltrated
Fanatastic*
QuarterJack*
Wombo*
Flu
Roquefort*
Levram
Mzeeav*
LaVita
Xposedapi*
Zipper
Workaholic
Fired
Scrutiny
SPX
Vmdak
Mantis
BitForge
WallpaperHub
Zab
SpiderSociety

NetSecFocus / TJNull List
#

Linux Boxes:Windows Boxes:Windows Active Directory Boxes:Post OSCP Section. Challenging yourself:
TwiggyAlgernonAccessNagoya [Windows]
ExfiltratedAuthbyHeistOsaka [Windows]
PelicanCraftVaultProStore [Linux]
AstronautHutchNagoyaRPC1 [Linux]
BlackgateInternalResourcedSymbolic [Windows]
BooleanJackoHutchUpsploit [Linux]
ClueKevinValidator [Linux]
CockpitResourcedGLPI [Linux]
CodoSquidMarshalled [Linux]
CraneDVR4Educated [Linux]
LevramHepetKyoto [Windows Buffer Overflow]
ExtplorerShenziNara [Windows Active Directory]
HubNickel
ImageSlort
LawMedJed
LavitaMonster
PCMice
Fired
Press
Scrutiny
RubyDome
Zipper
Flu
Workaholic
PyLoader
Plum
SPX
Jordak
BitForge
Vmdak
Ochima
Nibbles
CVE-2023-6019
Sea
PayDay
Snookums
SpiderSociety

There are no articles to list here yet.