SQL injection vulnerabilities
Oopsie
Session hijack with burpsuite to get reverse shell uploaded. setuid used to run cat=/bin/sh in /tmp
TheNotebook
jwt – java web token exploit
Schooled
Exploiting Moodle vulnerabilities and FreeBSD custom pkg
Ready
Ready, GitLab remote code excution, escaping docker privileged containers.
Delivery
Delivery
Armageddon
Armageddon
Drupal drupal_drupalgeddon2
sudo snap install poc exploit dirty_sockv2.py
Ophiuchi
The Ophiuchi is a medium difficulty hackthebox machine, exploited using YAML deserialization vulnerablity for SnakeYAML used in java applications, and modifying wasm file to get root privileges.
ScriptKiddie
Rapid 7 APK Template Command Injection.