REST API

Linux Docker machine chaining a REST API JWT secret leaked in Git history, a Python eval() command injection, database credential recovery, and a HashiCorp Vault SSH OTP privilege escalation to root.

Windows machine using anonymous FTP notes and an NVMS-1000 directory traversal to recover credentials, then abusing the NSClient++ REST API for a SYSTEM shell.