Skip to main contentSkip to main content
Room Banner
Room Icon

Smol

Test your enumeration skills on this boot-to-root machine.

medium

60 min

19,116

User profile photo.
User profile photo.

To access material, start machines and answer questions login.

Score updated
Score updated

At the heart of Smol is a WordPress website, a common target due to its extensive plugin ecosystem. The machine showcases a publicly known vulnerable plugin, highlighting the risks of neglecting software updates and security patches. Enhancing the learning experience, Smol introduces a backdoored plugin, emphasizing the significance of meticulous code inspection before integrating third-party components.

Quick Tips: Do you know that on computers without GPU like the AttackBox, is faster than Hashcat?

Note: Please allow 4 minutes for the to fully boot up.

Answer the questions below
What is the user flag?

What is the root flag?