Collaborate Disseminate
2 days ago some of the university staff asked me about 3 computers here.
All the computers are using Ubuntu and have the exact same password on the login screen for the superuser. Let’s say StackPa$$word is the password. 3 c… Continue reading No password root accounts of an entire laboratory!
2 days ago some of the university staff asked me about 3 computers here.
All the computers are using Ubuntu and have the exact same password on the login screen for the superuser. Let’s say StackPa$$word is the password. 3 c… Continue reading No password root accounts of an entire laboratory!
Cisco patched two high-severity vulnerabilities in its Cisco Application Policy Infrastructure Controller (APIC) that could allow an attacker to elevate privileges on the host machine. Continue reading Cisco Patches Privilege Escalation Bugs in APIC
Cisco patched two high-severity vulnerabilities in its Cisco Application Policy Infrastructure Controller (APIC) that could allow an attacker to elevate privileges on the host machine. Continue reading Cisco Patches Privilege Escalation Bugs in APIC
I have been using MetaSploit for a while (3 years), and I have just started exploiting Android.
My Android has root access, and SuperSu is configured to ‘grant’ all SU requests.
I have the payload installed on my phone, but… Continue reading Gaining root access on an Android phone exploited with MetaSploit
On an Android device, is there any way to access the data folder which is in its root directory without rooting the device?
Continue reading Is there any way to access android data folder without rooting it? [on hold]
I setup a test Ubuntu VPS about a month ago to run DHIS2, running on top of PostgreSQL and Tomcat (https://docs.dhis2.org/master/en/implementer/html/installation.html). No other software was installed. A few days ago I got an… Continue reading Ubuntu server rooted – apparently running dllhost? (Mystery solved) [on hold]
I studied this paper – http://www.cs.kun.nl/~erikpoll/publications/AndroidSecureStorage.pdf archive link which states that if attacker has root access to the device it’s easy to use keystore keys with another (hacker’s) application. Is it … Continue reading Is android keystore still vulnerable if root access is received?
I’m wondering is it possible to harm kernel (by injecting shared library, loadable module or something like that) without root. If yes, how hackers can achieve it?
Continue reading Possible ways for hackers to alter kernel behaviour without root [on hold]
Cisco is warning customers of a privilege escalation flaw in Cisco CloudCenter Orchestrator systems that could allow an attacker to gain root privileges on affected systems. Continue reading Cisco Warns of Critical Flaw in CloudCenter Orchestrator Systems