MySQL

Web challenge working through authentication bypass, header-based blind SQL injection, UNION-based extraction, and a second-order SQL injection.

Linux box exploiting an unfinished LimeSurvey install via malicious plugin upload, then Docker credential exposure and SUID abuse through a shared volume.

Linux machine bypassing a SQL injection login, forging magic bytes to upload a PHP webshell, and hijacking a SUID binary’s relative-path lshw call for root.

Linux machine exploiting Joomla information disclosure and authenticated template editing to pull database credentials, then escalating via apport-cli.