Collaborate Disseminate
Security groups either make or break your IT security. Group memberships are responsible for administrative access in your your network and define access to other privileged resources and data on your domain. Ever wondered how a simple misconfiguration… Continue reading IT security under attack: Why are group memberships so crucial?
As we all know when using Linux it’s safest to operate on a non-root user. As it’s also known, when a non-root user has sudo permissions they can use it to escalate privileges and pop a root shell. I was testing the privesc potentials of m… Continue reading Non-admin user with privesc capability though sudo
VMware has issued a full patch and revised the severity level of the NSA-reported vulnerability to “important.” Continue reading VMware Rolls a Fix for Formerly Critical Zero-Day Bug
In this blog in the IT security under attack series, we will learn about an advanced Active Directory (AD) domain controller (DC) attack to obtain persistence in AD environments.
Dubbed DCShadow, this is a late-stage kill chain attack that …
The post I… Continue reading IT security under attack blog series: Instant domain persistence by registering a rogue domain controller
VMware explained it has no patch for a critical escalation-of-privileges bug that impacts both Windows and Linux operating systems and its Workspace One. Continue reading Critical VMware Zero-Day Bug Allows Command Injection; Patch Pending
Threat actors mount year-long campaign of espionage, exfiltrating data, stealing credentials and installing backdoors on victims’ networks. Continue reading APT Exploits Microsoft Zerologon Bug: Targets Japanese Companies
I am attempting to solve a CTF challenge where I am logged in as a member of the www-data group and the apache2 service is misconfigured and can be run as sudo without a password. What I am attempting to do is access a token stored at /roo… Continue reading Exploit apache2 service as member of www-data group
In most Linux distributions it is possible to manage virtual machines as a regular user if that user has access to /run/libvirt/libvirt-sock and is a member of the libvirt group.
I understand that we cannot give a regular user access to ro… Continue reading security implications of libvirt socket access
Three critical security bugs allow for easy privilege escalation to an administrator role. Continue reading Ultimate Member Plugin for WordPress Allows Site Takeover
Having the following pseudocode executed by a superuser, is it safe to assume that it is secure on Linux?
if fork() == 0:
# drop privileges to an unprivileged user, let’s say "nobody"
# perform various tasks, start other pr… Continue reading Linux: Can unprivileged users tamper with processes running under their own identity?