Burp Suite

Linux machine demonstrating manual union-based SQL injection, phpMyAdmin web-shell creation, Python command injection, and SUID systemctl abuse.

Windows machine demonstrating Cisco password recovery, RID brute forcing, password spraying, and credential extraction from Firefox process memory.

Windows machine demonstrating MSSQL injection, forced NTLM authentication, WinRM access, and UniFi Video service abuse for SYSTEM privileges.

Linux machine demonstrating SSRF-based internal API access, credential disclosure through Git history, and GitPython command injection for root access.

Windows machine demonstrating IIS upload bypass with web.config abuse and kernel exploit privilege escalation.

Linux machine demonstrating Python eval command injection, credential reuse, Docker configuration disclosure, and sudo script abuse.

Linux machine demonstrating Metabase pre-auth RCE, Docker environment credential disclosure, and OverlayFS kernel exploitation.

Linux machine demonstrating Grafana arbitrary file read, Grafana credential cracking, SSH access, and Docker privileged container abuse.