Collaborate Disseminate
My question is same as this one,
A php script cron job running as root, php script includes other php files those are editable, ps aux shows script running as root but if I do system(‘whoami > output.txt’); it shows apache
In Detailed s… Continue reading php Dropping Privileges
My question is same as this one,
A php script cron job running as root, php script includes other php files those are editable, ps aux shows script running as root but if I do system(‘whoami > output.txt’); it shows apache
In Detailed s… Continue reading php Dropping Privileges [closed]
When I go to a website on my laptop, it sometimes asks me if I will allow the site to get my location. My question is, how does it determine my location? I understand that mobile phones have GPS devices inside them, but as far as I know mo… Continue reading How do websites determine your location from your desktop? [closed]
As part of an application that I’m writing, I attempt to resolve an active directory object from Guid to the object’s Distinguished name. For some restricted objects, I must grant my service account additional permissions in order to resol… Continue reading Minimal permissions required to resolve Guid of Active Directory Object
We need to give local admin privileges on most workstations to our ERP software admin so he can install updates. He is not a domain admin, simply a domain user. However, we don’t want him to have local admin rights to any management comput… Continue reading Granting Local Admin permissions on domain workstations
I am running an MVT check on an android phone and it’s returning these warnings. Do they necessarily mean that the phone is monitored/compromised with malware or spying software like Pegasus
WARNING [mvt.android.modules.adb.settings] Found… Continue reading Do these warnings mean that this phone is monitored? [closed]
Is there any way to get into the root file system in android with an already installed msfvenom apk in reverse_tcp (to get the whatsapp encryption key)
Continue reading Get root permission on android for metasploit
Lets say I have the following setup
Two teams: TeamAlice and TeamBob
A command that requires admin access: admin_command
Two sets of computers: TeamAlice_Computers and TeamBob_Computers
Only TeamAlice has login access to TeamAlice_Comput… Continue reading Permissions, Groups, and Principle of Least Privilege
I am still studying kernel credential management (https://kernel.org/doc/html/v5.9/security/credentials.html) and I have encountered a use case I cannot explain.
I am in a VM (Kali).
❯ uname -a
Linux cactus-ths 5.18.0-kali5-amd64 #1 SMP … Continue reading Explanation of capabilities: CAP_NET_BIND_SERVICE
I have some questions related with user context and auditing for background job execution for SaaS application.
Let’s say an admin user scheduled a background job through UI. When the job start running, this job requires to run with a user… Continue reading Questions on user context and auditing for background job execution for SaaS application