TryHackMe
ConvertMyVideo - TryHackMe Writeup
This room exploits an open-source Youtube video download tool using an interesting injection method. It also includes some common linux privilege escalation methods.
Relevant - TryHackMe Room
In this room, you will perform a full penetration test. The goal is to find and report all the vulnerabilities and give advice on how to patch them - also a good lesson on rabbit holes.