Remote Code Execution

Linux machine chaining SMTP user enumeration, a CSRF-token-aware brute force of Roundcube Webmail, CVE-2025-49113 remote code execution, and sudo apt-get privilege escalation to root.

Linux machine chaining an exposed .git repository, a cPickle insecure deserialization RCE recovered from commit history, a CouchDB privilege-escalation CVE, and sudo pip abuse to root.

Linux target combining an unauthenticated Langflow RCE, JWT algorithm confusion, a malicious MCP tool registration, and a Kubernetes nodes/proxy escalation to host root.

Linux box exploiting an unfinished LimeSurvey install via malicious plugin upload, then Docker credential exposure and SUID abuse through a shared volume.

Windows machine built around an Adobe ColdFusion remote code execution bug, escalated to SYSTEM with a kernel exploit.

Windows machine centred on an AChat buffer overflow with custom shellcode, then credential discovery and password reuse for Administrator.

Linux machine using SSRF to reach an internal API, recovering credentials from Git history, and escalating via a GitPython command injection.

Linux target chained from a Metabase pre-auth RCE through Docker credential disclosure to an OverlayFS kernel exploit for root.

Linux machine escaping a vm2 sandbox, recovering credentials from SQLite, and finishing with a Bash wildcard injection to root.

Linux machine exploiting the PHP 8.1.0-dev backdoor for remote code execution, then escalating to root through a sudo misconfiguration on knife.