netcat

Linux machine chaining SMB enumeration, new-line command injection on an in-development router panel, cron job abuse, and a patched Diamorphine LKM rootkit for root.

Windows machine where an unauthenticated file upload sets up a CloudMe buffer overflow, leading to administrator access.

Linux machine using SSRF to reach an internal API, recovering credentials from Git history, and escalating via a GitPython command injection.

Linux machine exploiting the UnrealIRCd 3.2.8.1 backdoor for a shell, steganography-hidden credentials for lateral movement, and a SUID binary’s relative-path execution for root.

Linux machine chaining manual union-based SQL injection into a phpMyAdmin web shell, a Python command injection, and SUID systemctl abuse for root.