Disclosed privilege escalation or x2shell vulnerabilities.



Challenges

This challenge is optional, it will not count towards dojo completion.

CVE-2021-3156
Qualys
LiveOverFlow
RAC Blog

Connect with SSH

Link your SSH key, then connect with: ssh [email protected]

This challenge is optional, it will not count towards dojo completion.

CVE-2023-22809
SYNACKTIV

Connect with SSH

Link your SSH key, then connect with: ssh [email protected]

This challenge is optional, it will not count towards dojo completion.

CVE-2025-32463

Connect with SSH

Link your SSH key, then connect with: ssh [email protected]

This challenge is optional, it will not count towards dojo completion.

CVE-2025-59825
GHSA


Contributed by: S4vvy

Connect with SSH

Link your SSH key, then connect with: ssh [email protected]

This challenge is optional, it will not count towards dojo completion.

CVE-2025-66478
maple3142


Use firefox in the desktop environment, code, or ssh to interact with the web server! The server is automatically started on challenge.localhost.

Connect with SSH

Link your SSH key, then connect with: ssh [email protected]

This challenge is optional, it will not count towards dojo completion.

CVE-2026-24061
SECLISTS


Contributed by: glueless

Connect with SSH

Link your SSH key, then connect with: ssh [email protected]

This challenge is optional, it will not count towards dojo completion.

CVE-2026-31431
xint.io


This challenge needs to be solved in a virtual machine! You can launch with the virtual machine using the vm command, then interact with the challenges.

The flag inside of the vm is at /challenge/flag.

Connect with SSH

Link your SSH key, then connect with: ssh [email protected]

30-Day Scoreboard:

This scoreboard reflects solves for challenges in this module after the module launched in this dojo.

Rank Hacker Badges Score