Collaborate Disseminate
I run the following command in the background constantly to check for camera access on Ubuntu Linux:
lsmod | grep ^uvcvideo
I noticed that every time I load into gmail my check is triggering my kernel’s camera module. I as… Continue reading How can I block access to module for Firefox? (gmail accessing camera)
In recent black-box pen-test of a webapp hosted on CentOS, I found a vulnerability that allowed me to grab contents of files (kind of file inclusion) located within the home path of Tomcat.
In classic scenario, I tried to read /etc/passw… Continue reading Tomcat application arbitrary file read exploitation
Sometimes I prefer working with text files instead of database as I can later manually edit the file content.
Imagine I have created a text file blacklist and chmodded it to 777. Let’s say it is accessible at http://example.c… Continue reading What can a normal user do with a 777 file on my web server?
Sometimes I prefer working with text files instead of database as I can later manually edit the file content.
Imagine I have created a text file blacklist and chmodded it to 777. Let’s say it is accessible at http://example.c… Continue reading What can a normal user do with a 777 file on my web server?
Although most people seem to share entire drives with RDP, it is possible to share individual folders, by mapping them to a drive for example with subst <lettertomap>: <pathtofolder> (for other ways see raymond.cc… Continue reading Is it possible for a remote machine to "escape" from a folder mapped through RDP?
I woke up today to see the top and bottom pages of my website displaying a link with text “Cheap Jerseys Free Shipping”.
I quickly went in and saw that /index.php and /wp-content/themes/Avada/footer.php were changed, I remov… Continue reading Hacked WordPress /index.php and /wp-content/themes/Avada/footer.php
What are the security risks in this line of LaTeX code, and what can be done to reduce them? The LaTeX3 project wants TeX macros to be able to do file operations via shell escape.
{ cp~-RLf~ \exp_not:N \tl_to_str:n {#1} ~… Continue reading Concerns about LaTeX 3 shell escape code
From my days of amateur web development the principle of least privilege has beaten into me not to use chmod -R 777 dir. I have personally never needed it, so I’ve never used it.
I now work on a development team professiona… Continue reading Reason to not use chmod -R 777 on internal server for project source code?
I noticed that in Google Chrome, if I type in file:///C:/Users/MyUsername/Desktop/ it shows me all of the folders on my Desktop, and I can type open up PDFs and such in chrome just by typing in the file path.
What processes and systems ar… Continue reading What stops Google from saving all the information on my computer through Google Chrome?
I’ve found either one, or more than one, bug, in ACL evaluation, when running Samba on FreeBSD. I can’t be sure if these are facets of the same bug or related bugs – they’re very similar but do have distinct features and expo… Continue reading To workaround a FreeBSD ACL bug I need to grant "read attributes/ACLs" to untrusted Samba users. Not happy about security – can practical harm result?