RCE | Classroom

TryHackMe Plant Photographer: SSRF to RCE via Werkzeug

SSRF

Plant Photographer: SSRF to RCE via Werkzeug

TryHackMe Bricks Heist: CVE-2024-25600 RCE to cryptominer forensics

CVE-2024-25600

Bricks Heist: CVE-2024-25600 RCE to cryptominer forensics

TryHackMe Custom Tooling Using Python: brute-force to RCE

Python

Custom Tooling Using Python: brute-force to RCE

TryHackMe Insecure Deserialisation: PHP Object Injection to RCE

Web Application Pentesting

Insecure Deserialisation: PHP Object Injection to RCE

TryHackMe Server-side Template Injection: SSTI to RCE

Web Application Pentesting

Server-side Template Injection: SSTI to RCE

TryHackMe Injectics: SQLi Filter Bypass to Twig RCE

Web Application Pentesting

Injectics: SQLi Filter Bypass to Twig RCE

TryHackMe CVE-2026-42945 Nginx Rift: Heap Overflow to RCE

CVE-2026-42945

CVE-2026-42945 Nginx Rift: Heap Overflow to RCE

TryHackMe n8n CVE-2025-68613: Expression Injection to RCE

Jr Penetration Tester

n8n CVE-2025-68613: Expression Injection to RCE

TryHackMe NoScope: Alf.io returnClass Sandbox Escape to RCE

Jr Penetration Tester

NoScope: Alf.io returnClass Sandbox Escape to RCE

TryHackMe The Guestbook: A Two-Hour Prompt-Injection Rabbit Hole

AI Security

The Guestbook: A Two-Hour Prompt-Injection Rabbit Hole