This room exploits an open-source Youtube video download tool using an interesting injection method. It also includes some common linux privilege escalation methods.

In this room, we will compromise a Joomla CMS account via SQL Injection, practice cracking hashes and escalate your privileges by taking advantage of yum with sudo privileges.