Root-Me

Shell scripting, interpreters, cron jobs, and escaping restricted execution contexts.

Linux and Windows privilege escalation: capabilities, SUID binaries, services, and misconfigurations.

Reverse engineering, license checks, packers, and keygen-style validation routines.

Classical ciphers, RSA, hashes, and cryptanalysis without publishing restricted material.

Disk and memory artifacts, timelines, logs, and investigative reconstruction.

Packet captures, protocols, covert channels, and traffic analysis.

Algorithmic puzzles, APIs, graders, and programming contest-style challenges.

Multi-step realistic scenarios blending web, network, and host layers.

Hidden data in images, audio, metadata, and steganography tooling.

Browser-side attacks: XSS, DOM sinks, CSP, and front-end trust boundaries.

Server-side web flaws: injection, SSRF, auth bypass, and backend exploitation.