A Python script to automate the initial recon process of capture the flag challenges.

Chaining NFS credential leaks and password reuse to exploit OpenSTAManager command injection, followed by an OliveTin validation bypass for root access.

Chaining an unauthenticated MCPJam command execution for initial access to exploit a hidden Python API administrative function for root access.

Chaining a React2shell vulnerability for initial access and database credential recovery to exploit a locally exposed Node.js WebSocket debugger for root access.

Chaining an MLFlow insecure deserialization vulnerability for initial access to exploit a passwordless sudo script via Python library hijacking for root access.