penelope

Linux machine exploiting the Magento Shoplift SQL injection to create an admin user, chaining an authenticated Magento RCE for a shell, and abusing a sudo vi rule for root.

Linux machine bypassing MIME-based upload filters with forged magic bytes, exploiting an unsanitised filename in a cron job, then a network config script’s variable-parsing quirk for root.

Linux target chained from a Metabase pre-auth RCE through Docker credential disclosure to an OverlayFS kernel exploit for root.

Linux box that starts with an exposed PHP web shell, pivots through sudo-based lateral movement, and finishes with cron-driven privilege escalation.

Linux machine exploiting Apache ActiveMQ (CVE-2023-46604) for initial access, then abusing sudo nginx rights for root.

Linux machine exploiting the UnrealIRCd 3.2.8.1 backdoor for a shell, steganography-hidden credentials for lateral movement, and a SUID binary’s relative-path execution for root.

Linux machine exploiting Joomla information disclosure and authenticated template editing to pull database credentials, then escalating via apport-cli.

Linux machine brute-forcing an SNMP community string for API credentials, chaining a command injection into a Docker container, pivoting via ligolo to PostgreSQL, and abusing an SNMP config password for root.

Linux machine chaining a WordPress plugin RFI for a foothold, sudo tar wildcard abuse for a second user, and a race condition in a root-run backup script for a SUID shell as root.

Linux machine exploiting the PHP 8.1.0-dev backdoor for remote code execution, then escalating to root through a sudo misconfiguration on knife.