Collaborate Disseminate
My goal is to write in /etc/passwd to escalate privileges to root.
i generated password "test1" for the new root user : openssl passwd test1
and i use echo to append a new entry in /etc/passwd file : sudo echo "root2:rmeF3kd… Continue reading Can’t write to /etc/shadow with "echo" but with "nano" i can [migrated]
From SentinelLabs, a critical vulnerability in HP printer drivers:
Researchers have released technical details on a high-severity privilege-escalation flaw in HP printer drivers (also used by Samsung and Xerox), which impacts hundreds of millions of Windows machines.
If exploited, cyberattackers could bypass security products; install programs; view, change, encrypt or delete data; or create new accounts with more extensive user rights.
The bug (CVE-2021-3438) has lurked in systems for 16 years, researchers at SentinelOne said, but was only uncovered this year. It carries an 8.8 out of 10 rating on the CVSS scale, making it high-severity…
Citizen Lab has identified yet another Israeli company that sells spyware to governments around the world: Candiru.
From the report:
Summary:
Candiru is a secretive Israel-based company that sells spyware exclusively to governments. Reportedly, their… Continue reading Candiru: Another Cyberweapons Arms Manufacturer
As a developer, I ask how to approach security concerns regarding permissions of a binary which needs access to resources only available to root users.
For example, let’s think of a simple tool which creates a virtual device or executes co… Continue reading Secure way to run a linux binary which needs access to ressources only available to root?
I am trying to privilege escalate a vulnerable box and I’ve stuck with this output:
sudo -l
Matching Defaults entries for charlie on sewers:
env_reset, mail_badpass,
secure_path=/usr/local/sbin\:/usr/local/bin\:/usr/sbin\:/usr/… Continue reading Sudo -l systemctl bypass
Because tech vendors have turned to over-the-air updates – the idea is to not give their customers any excuses for not keeping firmware current – Eclypsium’s discovery of a chain of four vulnerabilities in the BIOSConnect feature within Dell Client BI… Continue reading Dell BIOSConnect Flaws Show Over-the-Air Risks
Background
Currently doing some vulnservers on Offensive Security’s Proving Grounds Practice Labs. A vulnserver is a machine configured with vulnerabilities for testing/audit and research purposes.
I came across a machine that had a cronjo… Continue reading SUID Priv Escalation – LD_LIBRARY_PATH versus ldconfig and /etc/ld.so.conf
Endpoint security is a hot topic of discussion, especially now with so many businesses shifting to remote work. First, let’s define what endpoints are. Endpoints are end-user devices like desktops, laptops, and mobile devices. They serve as points of a… Continue reading The role of endpoints in the security of your network
I am trying to execute the sudo buffer overflow (CVE-2021-3156) on one of my systems, but haven’t got it working yet. The system is definitely vulnerable (taking into account sudo version and sudoedit -A -s \\ output (malloc error).
I crea… Continue reading How to fine tune timing for CVE-2021-3156 (sudo privilege escalation)?
As we know running mysql with root privilege is not recommended which leads to privilege escalation using UDF’s.
I’m trying to setup a machine to demonstrate this and I wanted to run mysqld as root user.
Im running ubuntu 21.04 and with my… Continue reading Running mysqld with root privilege [migrated]