Hydra

Linux machine exploiting a public OpenNetAdmin RCE, chaining reused database credentials into an internal-only site, and abusing a sudo-permitted nano binary for root.

Linux machine leaking SSH credentials over SNMP, exploiting a Pandora FMS SQL injection to hijack a session, chaining an event feature into command execution, and hijacking a SUID binary’s relative tar call for root.

Linux machine chaining an LFI-executed webshell (staged via phpLiteAdmin), a port-knocked SSH key hidden with steganography, and a chkrootkit cron exploit for root.

Linux machine brute-forcing an SNMP community string for API credentials, chaining a command injection into a Docker container, pivoting via ligolo to PostgreSQL, and abusing an SNMP config password for root.

Linux box chaining a Spring Boot Actuator session leak into cookie hijacking, command injection, JAR credential discovery, and sudo SSH abuse.

Solaris machine using the finger service to enumerate valid users, brute forcing SSH, cracking a leaked shadow backup, and abusing a sudo wget rule for root.