Collaborate Disseminate
Tech giant and feds this week renewed their urge to organizations to update Active Directory domain controllers. Continue reading Microsoft Warns Threat Actors Continue to Exploit Zerologon Bug
Tech giant and feds this week renewed their urge to organizations to update Active Directory domain controllers. Continue reading Microsoft Warns Threat Actors Continue to Exploit Zerologon Bug
From credential theft to network vulnerability exploitation and ransomware incidents on highly secure organizations, the year 2020 has been surprisingly rough on IT security. In the wake of the COVID-19 pandemic, companies around the world are reportin… Continue reading Is IT security under attack?
I’ve ran LinEnum.py on the target machine and I get this
I’ve tried running python and the server.py file as sudo but still get asked for a password, I’ve looked up online that it could be something to do with the sudoers file which I can… Continue reading Trying to do privesc but struggling [duplicate]
Researchers said the group was able to move from initial phish to full domain-wide encryption in just five hours. Continue reading Ryuk Ransomware Gang Uses Zerologon Bug for Lightning-Fast Attack
I am playing ctf and I have gained access to the target machine but not as root. I can see nohup utility has root access on the machine and I used this command to get the root access but that did not work:
nohup /bin/sh -p -c “sh -p <$(… Continue reading How can I use nohup command to get root access of the target machine?
Windows MSI files provide an opening for attackers even though the bug was mostly patched in July. Continue reading Known Citrix Workspace Bug Open to New Attack
Security researchers and U.S. government authorities alike are urging admins to address Microsoft’s critical privilege escalation flaw. Continue reading Windows Exploit Released For Microsoft ‘Zerologon’ Flaw
I am attempting to escalate privileges on a CTF Ubuntu box but I am afraid to run dirty cow due to possible crash is this kernel version vulnerable to the exploit:
Linux ip-10.0.0.1 3.13.0-162-generic #212-Ubuntu SMP Mon Oct 29 12:08:50 UT… Continue reading Is this Ubuntu kernel version vulnerable to dirty cow? [closed]
When reading about docker, I found a part of the documentation describing the attack surface of the docker daemon. From what I was able to understand, part of the argument is that it is possible to share (basically arbitrary) parts of the … Continue reading Host filesystem manipulation from docker vs. virtual machine