Kubernetes Pentesting, which entry point?
https://www.reddit.com/r/Pentesting/comments/rg12qn/kubernetes_pentesting_which_entry_point/
<!-- SC_OFF -->How you all protect your kubernetes against pentest? For example, if google.com (https://google.com/) is hosted in a kubernetes cluster, the ip address I get from nslookup is the entry point that i want to pentest or what else? note: I am doing to my own machine and has fully consent to do it <!-- SC_ON --> submitted by /u/anonymous_2600 (https://www.reddit.com/user/anonymous_2600)
[link] (https://www.reddit.com/r/Pentesting/comments/rg12qn/kubernetes_pentesting_which_entry_point/) [comments] (https://www.reddit.com/r/Pentesting/comments/rg12qn/kubernetes_pentesting_which_entry_point/)
https://www.reddit.com/r/Pentesting/comments/rg12qn/kubernetes_pentesting_which_entry_point/
<!-- SC_OFF -->How you all protect your kubernetes against pentest? For example, if google.com (https://google.com/) is hosted in a kubernetes cluster, the ip address I get from nslookup is the entry point that i want to pentest or what else? note: I am doing to my own machine and has fully consent to do it <!-- SC_ON --> submitted by /u/anonymous_2600 (https://www.reddit.com/user/anonymous_2600)
[link] (https://www.reddit.com/r/Pentesting/comments/rg12qn/kubernetes_pentesting_which_entry_point/) [comments] (https://www.reddit.com/r/Pentesting/comments/rg12qn/kubernetes_pentesting_which_entry_point/)
Accidental Bug leads to google honorable-mentions
https://infosecwriteups.com/accidental-bug-leads-to-google-honorable-mentions-7dad9eecbd7f?source=rss------bug_bounty-5
https://infosecwriteups.com/accidental-bug-leads-to-google-honorable-mentions-7dad9eecbd7f?source=rss------bug_bounty-5
Hey fellow hackers and bug hunter’s,Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/accidental-bug-leads-to-google-honorable-mentions-7dad9eecbd7f?source=rss------bug_bounty-5)
First reported on Friday turning out to be cybersecurity nightmare for all major companies. This is likely to impact wide range of…Continue reading on Medium » (https://medium.com/@R3V3R53/the-log4j-vulnerability-1d746c6ce576?source=rss------bug_bounty-5)
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Best Ethical Hacking Certification Course
https://cdn-images-1.medium.com/max/2400/1*WCfRLpXXoYCOWWTMQvLPbw.jpeg
With growing cyber threats, the ethical hacking certification has become more popular.
Continue reading on Medium »
Best Ethical Hacking Certification Course
https://cdn-images-1.medium.com/max/2400/1*WCfRLpXXoYCOWWTMQvLPbw.jpeg
With growing cyber threats, the ethical hacking certification has become more popular.
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Mango @ HackTheBox
https://cdn-images-1.medium.com/max/1280/0*TeqZg6QZdVjfa_H4.jpg
Mango is a 30-point linux machine on hackthebox that involves a NoSQL-Injection which allows to obtain user passwords from a mongo…
Continue reading on Medium »
Mango @ HackTheBox
https://cdn-images-1.medium.com/max/1280/0*TeqZg6QZdVjfa_H4.jpg
Mango is a 30-point linux machine on hackthebox that involves a NoSQL-Injection which allows to obtain user passwords from a mongo…
Continue reading on Medium »
hacking: security in practice
Windows VM recommendations for running Linux OS’s
Wondering if anyone knows of a well optimized VM geared towards or even specifically for Linux distributions. From what I remember all the ones I’ve tried before were also visually challenging to use at first, is there one with a UI that flows better?
It’s been a while since I’ve messed with VM, so I really have no idea where it’s gone.
Thanks in advance for the feedback!
submitted by /u/NoSloMo
[link] [comments]
Windows VM recommendations for running Linux OS’s
Wondering if anyone knows of a well optimized VM geared towards or even specifically for Linux distributions. From what I remember all the ones I’ve tried before were also visually challenging to use at first, is there one with a UI that flows better?
It’s been a while since I’ve messed with VM, so I really have no idea where it’s gone.
Thanks in advance for the feedback!
submitted by /u/NoSloMo
[link] [comments]
reddit
Windows VM recommendations for running Linux OS’s
Wondering if anyone knows of a well optimized VM geared towards or even specifically for Linux distributions. From what I remember all the ones...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
Attackers can get root by crashing Ubuntu’s AccountsService
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Attackers can get root by crashing Ubuntu’s AccountsServicePost Views: 190 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute
A local privilege escalation security vulnerability could allow attackers to gain root access on Ubuntu systems by exploiting a double-free memory corruption bug in GNOME’s AccountsService component. AccountsService is a D-Bus service that helps manipulate and query information attached to the user accounts available on a device.
The security flaw (a memory management bug tracked as CVE-2021-3939) was accidentally spotted by GitHub security researcher Kevin Backhouse while testing an exploit demo for another AccountsService bug that also made it possible to escalate privileges to root on vulnerable devices.
“AccountsService could be made to crash or run programs as an administrator if it received a specially crafted command,” an Ubuntu security advisory explains.
Backhouse found that AccountsService incorrectly handled memory during some language setting operations, a flaw that local attackers could abuse to escalate privileges.
The bug only affects Ubuntu’s fork of AccountsService. Versions impacted by this vulnerability include Ubuntu 21.10, Ubuntu 21.04, and Ubuntu 20.04 LTS.
This privilege escalation flaw was fixed by Canonical in November when AccountsService versions 0.6.55-0ubuntu12~20.04.5, 0.6.55-0ubuntu13.3, 0.6.55-0ubuntu14.1 were released. After applying the updates, you will also need to restart the computer to apply the changes.
See Also: Complete Offensive Security and Ethical Hacking Course Not the fastest, but definitely reliableAs he explains, his CVE-2021-3939 proof of concept exploit is slow (could that several hours) and will not work every time. However, it doesn’t matter since it can be executed until successful, seeing that the double-free bug allows crashing AccountsService as many times as needed.
The only restriction to successfully exploiting this bug is that the AccountsService crashes are rate-limited by systemd, blocking attempts to restart it more than five times every 10 seconds.
PoC video for Ubuntu accountsservice CVE-2021-3939. It's not quick, but it gets you a root shell eventually. https://t.co/YBQStkalNY pic.twitter.com/RRs2vF3vdH
— Kevin Backhouse (@kevin_backhouse) December 13, 2021
See Also: New Windows zero-day with public exploit lets you become an admin
“It relies on chance and the fact that I can keep crashing accountsservice until it’s successful. But would an attacker care? It gets you a root shell, even if you have to wait a few hours,” Backhouse said.
“To me, it feels like magic that it’s even possible to exploit such a small bug, especially considering all the mitigations that have been added to make memory corruption vulnerabilities harder to exploit. Sometimes, all it takes to get root is a little wishful thinking!”
Further details on how the vulnerability was found and the exploit developed are available in Backhouse’s CVE-2021-3939 writeup.
See Also: Offensive Security Tool: Cobalt Strike
Earlier this year, the researcher found an authentication bypass vulnerability in the polkit Linux system service that enabled unprivileged attackers to get a root shell on most modern distros.
See Also: Hacking stories – Rafael Núñez (aka RaFa), hacking NASA with the hacking group: World of Hell
Source: www.bleepingcomputer.com (Click Link)https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/Untitled[...]
Attackers can get root by crashing Ubuntu’s AccountsService
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Attackers can get root by crashing Ubuntu’s AccountsServicePost Views: 190 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute
A local privilege escalation security vulnerability could allow attackers to gain root access on Ubuntu systems by exploiting a double-free memory corruption bug in GNOME’s AccountsService component. AccountsService is a D-Bus service that helps manipulate and query information attached to the user accounts available on a device.
The security flaw (a memory management bug tracked as CVE-2021-3939) was accidentally spotted by GitHub security researcher Kevin Backhouse while testing an exploit demo for another AccountsService bug that also made it possible to escalate privileges to root on vulnerable devices.
“AccountsService could be made to crash or run programs as an administrator if it received a specially crafted command,” an Ubuntu security advisory explains.
Backhouse found that AccountsService incorrectly handled memory during some language setting operations, a flaw that local attackers could abuse to escalate privileges.
The bug only affects Ubuntu’s fork of AccountsService. Versions impacted by this vulnerability include Ubuntu 21.10, Ubuntu 21.04, and Ubuntu 20.04 LTS.
This privilege escalation flaw was fixed by Canonical in November when AccountsService versions 0.6.55-0ubuntu12~20.04.5, 0.6.55-0ubuntu13.3, 0.6.55-0ubuntu14.1 were released. After applying the updates, you will also need to restart the computer to apply the changes.
See Also: Complete Offensive Security and Ethical Hacking Course Not the fastest, but definitely reliableAs he explains, his CVE-2021-3939 proof of concept exploit is slow (could that several hours) and will not work every time. However, it doesn’t matter since it can be executed until successful, seeing that the double-free bug allows crashing AccountsService as many times as needed.
The only restriction to successfully exploiting this bug is that the AccountsService crashes are rate-limited by systemd, blocking attempts to restart it more than five times every 10 seconds.
PoC video for Ubuntu accountsservice CVE-2021-3939. It's not quick, but it gets you a root shell eventually. https://t.co/YBQStkalNY pic.twitter.com/RRs2vF3vdH
— Kevin Backhouse (@kevin_backhouse) December 13, 2021
See Also: New Windows zero-day with public exploit lets you become an admin
“It relies on chance and the fact that I can keep crashing accountsservice until it’s successful. But would an attacker care? It gets you a root shell, even if you have to wait a few hours,” Backhouse said.
“To me, it feels like magic that it’s even possible to exploit such a small bug, especially considering all the mitigations that have been added to make memory corruption vulnerabilities harder to exploit. Sometimes, all it takes to get root is a little wishful thinking!”
Further details on how the vulnerability was found and the exploit developed are available in Backhouse’s CVE-2021-3939 writeup.
See Also: Offensive Security Tool: Cobalt Strike
Earlier this year, the researcher found an authentication bypass vulnerability in the polkit Linux system service that enabled unprivileged attackers to get a root shell on most modern distros.
See Also: Hacking stories – Rafael Núñez (aka RaFa), hacking NASA with the hacking group: World of Hell
Source: www.bleepingcomputer.com (Click Link)https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/Untitled[...]
Hacking Articles Tips Tricks Videos Tutorials
Black Hat Ethical Hacking Attackers can get root by crashing Ubuntu’s AccountsService https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Attackers can get root by crashing Ubuntu’s AccountsServicePost Views: 190 htt…
-design.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/frame_2_delay-0.5s-90x90.jpg Hackers start pushing malware in worldwide Log4Shell attacks1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-3-90x90.jpg Malicious Notepad++ installers push StrongPity malware4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/Kali-Linux-2021.4-Released-90x90.png Kali Linux 2021.4 Released – New Themes and Tools, name-that-hash, truffleHog, S3Scanner, KDE Plasma 5.234 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/cover_image_1598944248.jpg.760x400_q85_crop_upscale-90x90.jpg Hackers infect random WordPress plugins to steal credit cards5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-2-90x90.jpg 27 flaws in USB-over-network SDK affect millions of cloud users6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/5fdb9e7105edc00d5378b856_kafkalogo-90x90.jpg Apache Kafka Cloud Clusters Expose Sensitive Data for Large Companies1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/Excel-als-Malware-Schleuder-Gefahr-durch-XLL-Dateien-Twitter-90x90.png Malicious Excel XLL add-ins push RedLine password-stealing malware1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-1-90x90.jpg New malware hides as legit nginx process on e-commerce servers2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-90x90.jpg Microsoft Exchange servers hacked to deploy BlackByte ransomware2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/80-percent-e-commerce-android-apps-leak-personal-data-765x383-1-90x90.jpg Android banking malware infects 300,000 Google Play users2 weeks ago
The post Attackers can get root by crashing Ubuntu’s AccountsService first appeared on Black Hat Ethical Hacking.
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-3-90x90.jpg Malicious Notepad++ installers push StrongPity malware4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/Kali-Linux-2021.4-Released-90x90.png Kali Linux 2021.4 Released – New Themes and Tools, name-that-hash, truffleHog, S3Scanner, KDE Plasma 5.234 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/cover_image_1598944248.jpg.760x400_q85_crop_upscale-90x90.jpg Hackers infect random WordPress plugins to steal credit cards5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-2-90x90.jpg 27 flaws in USB-over-network SDK affect millions of cloud users6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/5fdb9e7105edc00d5378b856_kafkalogo-90x90.jpg Apache Kafka Cloud Clusters Expose Sensitive Data for Large Companies1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/Excel-als-Malware-Schleuder-Gefahr-durch-XLL-Dateien-Twitter-90x90.png Malicious Excel XLL add-ins push RedLine password-stealing malware1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-1-90x90.jpg New malware hides as legit nginx process on e-commerce servers2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-90x90.jpg Microsoft Exchange servers hacked to deploy BlackByte ransomware2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/80-percent-e-commerce-android-apps-leak-personal-data-765x383-1-90x90.jpg Android banking malware infects 300,000 Google Play users2 weeks ago
The post Attackers can get root by crashing Ubuntu’s AccountsService first appeared on Black Hat Ethical Hacking.
Accidental Bug leads to google honorable-mentions
Hey fellow hackers and bug hunter’s,Continue reading on InfoSec Write-ups »
Read more...
Hey fellow hackers and bug hunter’s,Continue reading on InfoSec Write-ups »
Read more...
The log4j Vulnerability
First reported on Friday turning out to be cybersecurity nightmare for all major companies. This is likely to impact wide range of…Continue reading on Medium »
Read more...
First reported on Friday turning out to be cybersecurity nightmare for all major companies. This is likely to impact wide range of…Continue reading on Medium »
Read more...