https://blog.msnieman.com/tags/postgresql/Recent content in PostgreSQL on Myles Nieman — BlogHugoen-usTue, 02 Sep 2025 00:00:00 +0000https://blog.msnieman.com/writeups/toolbox/Tue, 02 Sep 2025 00:00:00 +0000https://blog.msnieman.com/writeups/toolbox/SQL injection in a PostgreSQL-backed login form yields an os-shell inside a Docker container; the Docker Toolbox VM is reachable via SSH with default credentials, and its sudo-all docker user reads the Windows host’s C drive mounted at /c to retrieve the root flag.