curl

Linux machine chaining manual union-based SQL injection into a phpMyAdmin web shell, a Python command injection, and SUID systemctl abuse for root.

Linux machine escaping a vm2 sandbox, recovering credentials from SQLite, and finishing with a Bash wildcard injection to root.

Linux box chaining a Spring Boot Actuator session leak into cookie hijacking, command injection, JAR credential discovery, and sudo SSH abuse.

Linux machine exploiting the PHP 8.1.0-dev backdoor for remote code execution, then escalating to root through a sudo misconfiguration on knife.

Windows machine exploiting an exposed Gitea access token, abusing repository-backed web deployment, recovering mRemoteNG credentials, and escalating through PDF24.