Solving Root-Me's SQL and NoSQL web challenges — SQL injection authentication bypass, GBK character encoding exploit, and blind NoSQL injection via regex.

Exploiting a SQL injection vulnerability to inject a malicious Pickle payload, achieving remote code execution and capturing the flag.

Exploiting an OS command injection in FFmpeg to exfiltrate the flag and leveraging web cache deception for another challenge.

Manipulating the HackTheBox API endpoints to escalate privileges, exploiting a command injection in the admin panel, and using an old kernel exploit for root.

Leveraging a Server-Side Request Forgery in Request-Baskets to access an internal Maltrail instance, then exploiting an unauthenticated command injection (CVE-2023-32629) for shell access.

Breaking into a Linux box through a naive path traversal filter, brute-forcing SSH credentials with Hydra, and escalating to root via a vulnerable pkexec binary.

Exploiting an exposed .git repository to extract source code and discover hardcoded credentials, leading to SSH access and privilege escalation.

Discovering an exposed .git repository, exploiting ImageMagick arbitrary file read (CVE-2022-44268) to steal credentials, and escalating privileges via a vulnerable system binary.