BITSCTF 2026

Fluffy is an easy Windows machine that demonstrates CVE-2025-24071, Shadow Credentials technique, and ESC16 vulnerability on ADCS.

404Gh0stMay 31, 20259 min read

• Windows
• Easy
• CVE-2025-24071
• GenericAll
• GenericWrite
• Shadow Credentials
• ADCS
• ESC16

Nocturnal is an easy Linux machine that demonstrates command injection bypass and privilege escalation using CVE-2023-46818.

404Gh0stMay 31, 20256 min read

• Linux
• Easy
• Command Injection
• ISPConfig
• CVE-2023-46818