Apache Tomcat

Linux machine using an LFI to leak Tomcat manager credentials for a WAR-based shell, cracking a reused backup password, and abusing LXD group membership to mount the host filesystem for root.

Windows machine exploiting default Apache Tomcat manager credentials to deploy a malicious WAR file and get an immediate SYSTEM shell.