User Enumeration

Linux machine chaining SMTP user enumeration, a CSRF-token-aware brute force of Roundcube Webmail, CVE-2025-49113 remote code execution, and sudo apt-get privilege escalation to root.

Solaris machine using the finger service to enumerate valid users, brute forcing SSH, cracking a leaked shadow backup, and abusing a sudo wget rule for root.