Collaborate Disseminate
I understand the LD_preload trick, but in this tutorial(https://www.hackingarticles.in/linux-privilege-escalation-using-ld_preload/), they not only give the user the right to keep this environment variable, but also to run one command (fin… Continue reading Privilege escalation : Is this step really necessary?
Assume Alice has physical access to Bob’s Linux machine (but can only use the mouse/keyboard). What is the worst that can happen to Bob’s files? For example could she write in a file owned by Bob even if Bob didn’t give permission to her?
… Continue reading What is the most harm that a non-root logged-in user can do on a Linux machine? [closed]
Sudo and Opendoas on Linux use timestamp files to keep track of how long it’s been since you’ve last entered your password. Doas on BSD uses a kernel feature instead.
Why is the latter considered more secure?
Continue reading Why is sudo’s usage of timestamp files insecure?
Sudo and Opendoas on Linux use timestamp files to keep track of how long it’s been since you’ve last entered your password. Doas on BSD uses a kernel feature instead.
Why is the latter considered more secure?
Continue reading Why is sudo’s usage of timestamp files insecure?
I need to write a simple program that demonstrates a race condition. I picked the Meltdown vulnerability.
I want to clarify something. I’m following this explanation https://resources.infosecinstitute.com/topic/race-conditions-exploitation… Continue reading Understanding the Meltdown vulnerability
Consider a scenario in which you offer service access based on a hierarchy of authority. i.e., a HEAD can register his subordinates. The authenticated HEAD has the previledge to read and update data from all of his subordinates. Is there a… Continue reading Authorise access to hierarchical data
If you plug a Razer peripheral (mouse or keyboard, I think) into a Windows 10 or 11 machine, you can use a vulnerability in the Razer Synapse software — which automatically downloads — to gain SYSTEM privileges.
It should be noted that this… Continue reading Interesting Privilege Escalation Vulnerability
If I get hit with malware while performing daily tasks (e.g. – checking email, web browsing, etc.) with a root shell, the malware will own my machine.
If the aforementioned occurs whilst on a standard account with the ability to run sudo, … Continue reading If browsing the web with root is dangerous, isn’t browsing the web with a sudo enabled account only marginally safer?
In the past, I have used the Sherlock PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities.
However, I am looking for a similar script, but I struggle to find one. I thought to make one … Continue reading PowerShell – privilege escalation
By 2022, API abuses will become the most frequent attack vector, predicts Gartner. We’re already witnessing new API exploits reach the headlines on a near-daily basis. Most infamous was the Equifax breach, an attack that exposed 147 million accounts i… Continue reading For Hackers, APIs are Low-Hanging Fruit