SNMP

Linux machine chaining SNMP community-string enumeration, SSH password spraying, a world-writable cron script hijack, a Unix socket pivot, and a PATH-hijacked SUID binary for root.

Linux machine leaking credentials over SNMP, exploiting a Nagios XI SQL injection and legacy admin-creation API, then abusing a sudo script’s unsanitised symlink target for root.

Linux machine leaking SSH credentials over SNMP, exploiting a Pandora FMS SQL injection to hijack a session, chaining an event feature into command execution, and hijacking a SUID binary’s relative tar call for root.

Linux machine brute-forcing an SNMP community string for API credentials, chaining a command injection into a Docker container, pivoting via ligolo to PostgreSQL, and abusing an SNMP config password for root.

Linux machine using SNMP to discover a daloRADIUS install, logging in with default operator credentials to leak a crackable MD5 hash, and abusing a sudo mosh-server rule for root.