Collaborate Disseminate
I’m testing for privilege escalations on a Ubuntu 18.04 host, and after running sudo -l , I’ve discovered a couple of root NOPASSWD commands for a standard user (w/unknown password). These commands contain wild cards.
Example: (root) NOPAS… Continue reading Possible to inject in the middle of a ROOT NOPASSWD command with a wild card?
I recently used sudo apt install on my Linux Virtual Machine to get funny commands like cowsay and Telnet Star Wars and, I was wondering, what does the command actually install from? What does it take the code from?
Continue reading what does sudo apt install (linux) install from? [migrated]
Linux and Unix operating systems require regular patching like any IT system, but as security professionals, ethical hackers, and criminal hackers will tell you, regular Linux and Unix patching is often neglected.
CVE-2021-3156 sudo Vulnerability
Last… Continue reading The Linux Flaw you can’t afford to Ignore (CVE-2021-3156)
Do docker (web service/server)s run unattended updates? Otherwise, how to do this? I am worried about the recent sudo -s CVE. How are docker containers affected? If I set up an auditing system with remote logging, and have unattended/secur… Continue reading How are docker containers affected by CVE-2021-3156?
Obligatory XKCD
Sudo is super important Linux utility, as well as the source of endless jokes. What’s not a joke is CVE-2021-3156, a serious vulnerability around incorrect handling of escape characters. This bug was discovered by researchers at Qualys, and …read more
Continue reading This Week in Security: Sudo, Database Breaches, and Ransomware
How can we disable sudo on CentOS 6 to prevent CVE-2021-3156?
We cannot remove RPMs or similar.
We can only change a configuration.
Do we have another fix for CVE-2021-3156 on CentOS 6, except disabling sudo?
Will we be able to execute su … Continue reading How can we disable sudo on CentOS 6 to prevent CVE-2021-3156?
Suppose I am logged in to Stack Exchange on Firefox on my work computer. This session is clearly stored as a cookie (or something else), because it persists when I reboot the computer. I have sudo access on my computer, but so does the net… Continue reading Can a sudo account access my browser sessions (e.g. Stack Exchange) remotely? [duplicate]
As we all know when using Linux it’s safest to operate on a non-root user. As it’s also known, when a non-root user has sudo permissions they can use it to escalate privileges and pop a root shell. I was testing the privesc potentials of m… Continue reading Non-admin user with privesc capability though sudo
I have a laptop on which I’m the only user. While installing the laptop I was wondering why I should choose a different password for the root account and user account. My reasoning is:
The change of finding a valid password doubles if the… Continue reading On a single user laptop does it make sense to have a separte password for root and the user?
The sudo command has the -E option that allows users to pass through all environment variables, although it’s still subject to the security policy configuration. So, is the use of -E inherently unsafe? Can someone offer a specific example … Continue reading Why does sudo remove environment variables by default?