tl;dr

• RCE by uploading web.config
• Windows IIS 7.5
• MS10-059: Vulnerabilities in the Tracing Feature for Services Could Allow Elevation of Privilege

Cracking the Arctic Box.

tl;dr

• Adobe ColdFusion 8
• MS10-059
• CVE-2009-2265

Cracking Valentine box without using metasploit.

tl;dr

• HeartBleed Vulnerability
• CVE-2014-0160

How to crack Nibbles box without Metasploit.

tl;dr

• Nibbleblog v4.0.3 Code Execution
• CVE-2015-6967