Collaborate Disseminate
Its well known that popular Linux distros use the PAM default to slightly delay incorrect login attempts, thus mitigating brute-force attacks against a user account (for example, running su repeatedly with different password … Continue reading Preventing Linux brute force concurrent su/sudo attempts
I had corrupted my sudo setup. With no possibility to login as root (locked root account, broken sudo), a search made it clear: use pkexec. It worked. So far, so good.
But that turns out to be a big security hole: a user tha… Continue reading sudo restrictions circumvention with pkexec: root shell
Well, I’ve done a lot of reading and documentation around possible exploitation of sudoers files and SUID programs, but don’t have a deep enough knowledge to pick up the wisest possible solution for my problem.
We’re curre… Continue reading Using SUID program to avoid having entries in sudoers
I want to make a Node.js development server use HTTPS by giving it access to the contents of a TLS certificate and private key file.
On the one hand, I don’t like the idea of making the TLS private key file readable by anyon… Continue reading Is it safe to use a unix pipe to redirect sensitive output data as input to another program?
I use Windows 10 Home on my PC and SSHing to up to five different Linux IaaS-modeled machines environments with Debian/ArchLinux.
I use Ansible to orchestrate and continuously integrate and continuously upgrade data in these… Continue reading Using the same private key for both WSL-Ansible and Putty (or WSL-OpenSSH for that matter)
I am working on web-app and was hoping to get some security threat perspective from folks here. I am trying to identify all the potential threat vectors so I can secure them. I am too close to the problem to trust my instinct… Continue reading security considerations/issues for web-app where apache has sudo as user access
The other day Dave was hurrying for his project at night. He wanted to install homebrew on his Mac. He typed “homebrew” in Safari search bar, pressed return, and clicked into the first link. He copied the command on the webpa… Continue reading Does it make sense to check command integrity after running it as root?
It seems protections are harcoded into sudo that prevent the binary from executing as a low-privileged user. Running it in Ubuntu as a normal user returns the following error:
“sudo must be owned by uid 0 and have the set… Continue reading Unix Privilege Escalation: "sudo must be owned by uid 0 and have the setuid bit set"
I have machine vulnerable to suidperl Privilege Escalation that was released by Equation group. I am using the exploit released by them and shared at this page
https://github.com/x0rz/EQGRP/blob/master/Linux/up/procsuids.sh…. Continue reading suidperl Privilege Escalation
With iOS 12 and the new Siri Shortcuts app, I’ve been thinking of ways I could leverage the SSH command capability in the app. For those of you who don’t know, the app allows you to send a bash file or string to stdin and ret… Continue reading Sending shutdown command via ssh using sudo non-interactively