Probably the first time I actually wrote a poc exploit for something we didn't write but were trying to win the maintenance contract for. I remember being In a pre-tender meeting showing it off to the potential client. Their face was amazing as my little script exported their database by exploiting some very shady search functionality.

PS. I had permission to do it, don't break systems you don't have permission to break, we also won that contact 😁