Hydra

Linux machine chaining SNMP community-string enumeration, SSH password spraying, a world-writable cron script hijack, a Unix socket pivot, and a PATH-hijacked SUID binary for root.

Linux machine chaining an exposed .git repository, a cPickle insecure deserialization RCE recovered from commit history, a CouchDB privilege-escalation CVE, and sudo pip abuse to root.

Linux target combining an unauthenticated Langflow RCE, JWT algorithm confusion, a malicious MCP tool registration, and a Kubernetes nodes/proxy escalation to host root.

Windows machine using anonymous FTP notes and an NVMS-1000 directory traversal to recover credentials, then abusing the NSClient++ REST API for a SYSTEM shell.

Linux box that starts from an exposed Git repository, gains authenticated RCE in Backdrop CMS, and escalates through password reuse and sudo abuse of the bee CLI.

Linux machine using SSRF to reach an internal API, recovering credentials from Git history, and escalating via a GitPython command injection.

Linux machine chaining a GraphQL credential leak with authenticated blind SQL injection in HelpDeskZ, password/email brute forcing, and a GLIBC-matched kernel exploit for root.

Linux machine where vhost discovery uncovers an authenticated Dolibarr RCE, followed by credential disclosure and Enlightenment SUID privilege escalation.

Linux machine driven by a Python eval() command injection, followed by credential reuse, Docker configuration disclosure, and sudo script abuse.

Linux machine exploiting a pdfkit command injection (CVE-2022-25765) for a foothold, then a Ruby YAML deserialization bug in a sudo-permitted script for root.