Cron Job

Linux machine chaining an LFI-executed webshell (staged via phpLiteAdmin), a port-knocked SSH key hidden with steganography, and a chkrootkit cron exploit for root.

Linux machine bypassing MIME-based upload filters with forged magic bytes, exploiting an unsanitised filename in a cron job, then a network config script’s variable-parsing quirk for root.

Linux machine using default Apache James admin credentials to read mail and reset passwords, exploiting a James 2.3.2 RCE to escape a restricted shell, then hijacking a root cron job for full root.