I've used them for pwncollege CTFs but pwncollege is way below your level (I've seen some of your write ups before).
I don't think I could solve most of the challenges there
If memory serves, I got creds for a machine where the git user was able to run `git diff` with setuid, so you could abuse the pager to escape into an elevated shell.