TLDR
- exploit a pre-auth RCE vulnerability on a
SaltStack master
TLDR
- Bypass Auth -> SSRF -> RCE
- Exploit misconfigured sudo privilege to root
TLDR
- Fuzz directory to find application which is vulnerable to SQLi
- Exploit the vulnerable application using SQLMap to get shell
TLDR
- Exploit
OpenSMTP Vulnerability to get the RCE as root.
TLDR
- Use Nmap to get the list of services running on the target.
- On web app use default credentials to login.
- Exploit CMS which is vulnerable to authenticated RCE.
- Exploit Cronjob to escalate privilege to root.