Accessing a filesystem directory they had the permission to access -> exploit
Connecting to a reachable, passwordless/keyless server -> exploit
Finding credentials to the servers of a company that accidently uploaded their credentials online -> exploit