Reverse Shell

Linux machine chaining SMTP user enumeration, a CSRF-token-aware brute force of Roundcube Webmail, CVE-2025-49113 remote code execution, and sudo apt-get privilege escalation to root.

Linux machine chaining an exposed .git repository, a cPickle insecure deserialization RCE recovered from commit history, a CouchDB privilege-escalation CVE, and sudo pip abuse to root.

Linux Docker machine chaining a REST API JWT secret leaked in Git history, a Python eval() command injection, database credential recovery, and a HashiCorp Vault SSH OTP privilege escalation to root.

Linux machine chaining SMB enumeration, new-line command injection on an in-development router panel, cron job abuse, and a patched Diamorphine LKM rootkit for root.

Web challenge exploiting a ZIP-based asset upload through magic-byte forgery and a Zip Slip path traversal to plant a malicious Gunicorn hook.

Web application challenge chaining OTP brute forcing, a rate-limit bypass, JWT key manipulation, and remote command execution.

Windows machine where anonymous FTP exposure leads to credential recovery from MDB and PST backups, Telnet access, and stored-credential abuse via runas /savecred.

Linux machine exploiting a public OpenNetAdmin RCE, chaining reused database credentials into an internal-only site, and abusing a sudo-permitted nano binary for root.

Linux machine exploiting the PHP 8.1.0-dev backdoor for remote code execution, then escalating to root through a sudo misconfiguration on knife.