tl;dr

• Kerberos Exploitation
• MS MySQL Server
• MS14-068
• GoldenTicket

tl;dr

• RCE by uploading web.config
• Windows IIS 7.5
• MS10-059: Vulnerabilities in the Tracing Feature for Services Could Allow Elevation of Privilege

tl;dr

• SQL Injection
• Linpeas Priv-Esc

tl;dr

• Shellshock
• Local File Inclusion

Cracking the Arctic Box.

tl;dr

• Adobe ColdFusion 8
• MS10-059
• CVE-2009-2265

Cracking Valentine box without using metasploit.

tl;dr

• HeartBleed Vulnerability
• CVE-2014-0160

How to crack Nibbles box without Metasploit.

tl;dr

• Nibbleblog v4.0.3 Code Execution
• CVE-2015-6967

How to crack Shocker box without Metasploit.

tl;dr

• ShellShocker exploit
• Apache mod_cgi