Password Reuse

Linux box where an unauthenticated XWiki RCE gives a foothold, database credentials are reused over SSH, and a Netdata ndsudo PATH vulnerability leads to root.

Windows machine chaining PHP session poisoning for code execution, SMB-hosted RFI for a webshell, reused database credentials, and a malicious CHM help file for administrator.

Linux machine driven by a Python eval() command injection, followed by credential reuse, Docker configuration disclosure, and sudo script abuse.

Linux machine using an LFI to leak Tomcat manager credentials for a WAR-based shell, cracking a reused backup password, and abusing LXD group membership to mount the host filesystem for root.

Linux box chaining a Spring Boot Actuator session leak into cookie hijacking, command injection, JAR credential discovery, and sudo SSH abuse.

Active Directory box capturing NTLM hashes, abusing SMB access and password reuse, pivoting through IIS, and escalating via SeImpersonatePrivilege.