Collaborate Disseminate
I am running an MVT check on an android phone and it’s returning these warnings. Do they necessarily mean that the phone is monitored/compromised with malware or spying software like Pegasus
WARNING [mvt.android.modules.adb.settings] Found… Continue reading Do these warnings mean that this phone is monitored? [closed]
Is there any way to get into the root file system in android with an already installed msfvenom apk in reverse_tcp (to get the whatsapp encryption key)
Continue reading Get root permission on android for metasploit
Lets say I have the following setup
Two teams: TeamAlice and TeamBob
A command that requires admin access: admin_command
Two sets of computers: TeamAlice_Computers and TeamBob_Computers
Only TeamAlice has login access to TeamAlice_Comput… Continue reading Permissions, Groups, and Principle of Least Privilege
I am still studying kernel credential management (https://kernel.org/doc/html/v5.9/security/credentials.html) and I have encountered a use case I cannot explain.
I am in a VM (Kali).
❯ uname -a
Linux cactus-ths 5.18.0-kali5-amd64 #1 SMP … Continue reading Explanation of capabilities: CAP_NET_BIND_SERVICE
I have some questions related with user context and auditing for background job execution for SaaS application.
Let’s say an admin user scheduled a background job through UI. When the job start running, this job requires to run with a user… Continue reading Questions on user context and auditing for background job execution for SaaS application
I made a very simple dashboard with HTML/PHP/JS (and a MySQL database) where some users (after a secure login with username and password) can access and insert some activities with details and attach a file in PDF format.
My dashboard is i… Continue reading PHP – How to block files access in specific directory from the external
While reading the manual page of setresuid() a question arose about the purpose of Real UID.
As mentioned in the man page:
setresuid() sets the real user ID, the effective user ID, and the saved set-user-ID of the calling process.
Unprivi… Continue reading Purpose of Real UID in spite of setresuid()
So the scenario is that we have a server shared with a number of users, with me being the server administrator and able to determine permission assignments.
The server is running a service on loopback interface which is only protected by a… Continue reading Is TLS needed on loopback for local security?
While browsing the internet on my laptop, I’ve allowed an internet site to access my location data. What I had expected was that it will show the name of my city based on my IP. I was quite shocked when I’ve seen the precise address of my … Continue reading Can any program discover my precise geolocation?
While trying to connect to my EC2 instance via ssh client, I got an error. I’m still able to connect from the option of AWS console : EC2 Instance connect
no supported authentication methods available server sent publickey,
gssapi-keyex,… Continue reading Issue with AWS ec2 instance ssh : error: AuthorizedKeysCommand [migrated]