An OffSec Linux box: an OS command injection in a web-based ping tool lands a reverse shell as www-data, and a SUID vim.basic binary hands over root.

An easy OffSec Proving Grounds Linux box chaining an exposed source backup, a PHP type-juggling auth bypass, LFI in the admin panel, hash cracking, and a sudo wildcard to root.