Sometimes you have to google the outputs xD

Bruteforce Jenkins login page with a wordlist we find leading to system access and proceeding by escalating to Root

Bypassing length limitation with Unicode

Make sure to call your functions :)

Git repo secret.

Prototype pollution which allows to run arbitrary js in admin context and retrieve the flag through the sql injection with an error based injection.