bash

Linux machine demonstrating Spring Boot Actuator session disclosure, cookie hijacking, command injection, JAR credential discovery, and sudo SSH abuse.

Linux machine demonstrating SSRF-based internal API access, credential disclosure through Git history, and GitPython command injection for root access.