Remote File Inclusion

Linux machine chaining a WordPress plugin RFI for a foothold, sudo tar wildcard abuse for a second user, and a race condition in a root-run backup script for a SUID shell as root.

Active Directory box capturing NTLM hashes, abusing SMB access and password reuse, pivoting through IIS, and escalating via SeImpersonatePrivilege.