Hacker News new | ask | show | jobs
by phone8675309 1767 days ago
Just because a server is headless does not mean that it isn't interactive in some way or running some user-submitted scripts or code.

Also, compromising a service running as a user (not root) would be sufficient to then escalate.