sqlmap

Web challenge working through authentication bypass, header-based blind SQL injection, UNION-based extraction, and a second-order SQL injection.

Linux machine leaking credentials over SNMP, exploiting a Nagios XI SQL injection and legacy admin-creation API, then abusing a sudo script’s unsanitised symlink target for root.

Linux machine leaking SSH credentials over SNMP, exploiting a Pandora FMS SQL injection to hijack a session, chaining an event feature into command execution, and hijacking a SUID binary’s relative tar call for root.

Linux machine exploiting a boolean-blind SQL injection in a password reset form to recover credentials, an outdated Laravel admin panel for a file upload RCE, and a 7-Zip wildcard injection for root.