Credential Reuse

Windows box recovering Cisco device passwords, RID brute forcing usernames, password spraying, and pulling credentials from Firefox process memory.

Linux box exploiting an unfinished LimeSurvey install via malicious plugin upload, then Docker credential exposure and SUID abuse through a shared volume.

Windows machine centred on an AChat buffer overflow with custom shellcode, then credential discovery and password reuse for Administrator.

Linux box that starts from an exposed Git repository, gains authenticated RCE in Backdrop CMS, and escalates through password reuse and sudo abuse of the bee CLI.

Linux machine exploiting a public OpenNetAdmin RCE, chaining reused database credentials into an internal-only site, and abusing a sudo-permitted nano binary for root.