Burp Suite

Linux machine chaining an exposed .git repository, a cPickle insecure deserialization RCE recovered from commit history, a CouchDB privilege-escalation CVE, and sudo pip abuse to root.

Linux Docker machine chaining a REST API JWT secret leaked in Git history, a Python eval() command injection, database credential recovery, and a HashiCorp Vault SSH OTP privilege escalation to root.

Linux machine chaining SMB enumeration, new-line command injection on an in-development router panel, cron job abuse, and a patched Diamorphine LKM rootkit for root.

Web challenge exploiting a TOCTOU race condition in a daily reward-claim endpoint using Burp Suite’s parallel Repeater requests to unlock a restricted vault.

Linux boot2root combining a NoSQL authentication bypass, Node.js SSTI, Node inspector abuse, and disk-group privilege escalation.

Web challenge working through authentication bypass, header-based blind SQL injection, UNION-based extraction, and a second-order SQL injection.

TryHackMe web challenge pairing a stored XSS payload with DNS-based data exfiltration and credential brute forcing to take over an admin account.

Linux target combining an unauthenticated Langflow RCE, JWT algorithm confusion, a malicious MCP tool registration, and a Kubernetes nodes/proxy escalation to host root.

Web application challenge chaining OTP brute forcing, a rate-limit bypass, JWT key manipulation, and remote command execution.

Windows box recovering Cisco device passwords, RID brute forcing usernames, password spraying, and pulling credentials from Firefox process memory.