Hack The Box

Exploited SQLpad vulnerability, cracked user credentials from the shadow file, leveraged a headless Chrome debugging port to obtain root flag

XSS via WonderCMS vulnerability, cracked user password hash from database and used command injection to get root access

Obtained reverse shell via Chamilo vulnerability, found user credentials with LinPEAS and manipulated ACLs to gain root

Finding SSH credentials through SSRF and exploiting a vulnerability in GitPython to obtain root access