RootMe - Command Injection
RootMe challenge walkthrough - Command Injection
RootMe challenge walkthrough - Command Injection
RootMe challenge walkthroughs - NoSql Injection Authentication, String, Numeric, Error, Time Based, Blind

PortSwigger Web Security Academy - NoSQL injection labs

PortSwigger Web Security Academy - OS Command Injection labs
RootMe challenge walkthroughs - SQL Injection Authentication, String, Numeric, Error, Time Based, Blind
RootMe challenge walkthroughs - JavaScript Source, Obfuscation, and Authentication

PortSwigger challenge walkthroughs - File Path Traversal
RootMe challenge walkthrough - Exposed .git
RootMe challenge walkthrough - Directory Traversal
RootMe challenge walkthrough - Hidden Include & Backup