Hacking Articles Tips Tricks Videos Tutorials

Black Hat Ethical Hacking
Critical vulnerabilities in Zabbix Web Frontend allow authentication bypass, code execution on servers

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Critical vulnerabilities in Zabbix Web Frontend allow authentication bypass, code execution on serversPost Views: 208 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute
Two vulnerabilities in open source monitoring platform Zabbix could allow an attacker to bypass authentication and execute arbitrary code on a targeted server.
The security flaws were found in Zabbix Web Frontend, a platform used to collect, centralize. and track metrics such as CPU load and network traffic across entire infrastructures.

Researchers from SonarSource, who discovered the bugs, noted that Zabbix is a high-profile target for threat actors due to its popularity, features, and its “privileged position in most company’s networks”. IssuesThe first vulnerability, tracked as CVE-2022-23131, which was given a severity of 9.1, is unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML.

In the case of instances where the SAML SSO authentication is enabled (non-default), session data can be modified by a malicious actor, because a user login stored in the session was not verified.

A malicious unauthenticated actor could exploit this issue to escalate privileges and gain admin access to the Zabbix Frontend.
See Also: Complete Offensive Security and Ethical Hacking Course
A caveat to this is that to perform the attack, SAML authentication is required to be enabled, and the assailant has to know the username of Zabbix user (or use the guest account, which is disabled by default), a security advisory from Zabbix notes.

The second vulnerability found by SonarSource, tracked as CVE-2022-23134, is rated as medium severity and allows some steps of setup.php file to be reachable not only by super-administrators, but by unauthenticated users as well.

A malicious actor could pass step checks and potentially change the configuration of Zabbix Frontend, an advisory notes.
See Also: Kali Linux 2022.1 Release with Visual Updates, New Tools, Legacy SSH Patch nowIn a blog post from SonarSource, the researchers said that when writing and reviewing code related to important security features, “it is easy to make the same assumptions as the original developer who introduced the vulnerability”.

They wrote: “Here, there were no integration tests related to the client-side session storage that could have spotted this behavior.

“Always provide access to sensible services with extended internal accesses (e.g. orchestration, monitoring) over VPNs or a restricted set of IP addresses, harden filesystem permissions to prevent unintended changes, remove setup scripts, etc.”

Finally, the researchers recommended upgrading all instances running a Zabbix Web Frontend to 6.0.0beta2, 5.4.9, 5.0.19, or 4.0.37. See Also: Offensive Security Tool: Swaks – Swiss Army Knife for SMTP
Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
See Also: How ILOVEYOU worm became the first global computer virus pandemic Source: portswigger.net Source Linkhttps://www.blackh[...]

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking

Critical vulnerabilities in Zabbix Web Frontend allow authentication bypass, code execution on servers | Black Hat Ethical Hacking

Two vulnerabilities in open source monitoring platform Zabbix could allow an attacker to bypass authentication and execute arbitrary code on a targeted server.

11 viewsedited 10:20

Hacking Articles Tips Tricks Videos Tutorials

Black Hat Ethical Hacking Critical vulnerabilities in Zabbix Web Frontend allow authentication bypass, code execution on servers https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Critical vulnerabilities in Zabbix Web…

8 viewsedited 10:20

Hacking Articles Tips Tricks Videos Tutorials

Attacking Kerberos | Kerberoasting | AS-REP Roasting | Active Directory | Windows |
https://systemweakness.com/attacking-kerberos-kerberoasting-as-rep-roasting-active-directory-windows-e1b770b95c4b?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Medium

This blog covers how to attack Kerberos with Kerberoasting and AS-REP Roasting attacks.

9 viewsedited 10:35

Hacking Articles Tips Tricks Videos Tutorials

10 views10:35

Hacking Articles Tips Tricks Videos Tutorials

This blog covers how to attack Kerberos with Kerberoasting and AS-REP Roasting attacks.Continue reading on System Weakness » (https://systemweakness.com/attacking-kerberos-kerberoasting-as-rep-roasting-active-directory-windows-e1b770b95c4b?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Medium

This blog covers how to attack Kerberos with Kerberoasting and AS-REP Roasting attacks.

10 viewsedited 10:35

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
I'm kinda interested in all of this

What are common ways of dos-ing someone? Can someone give an example, and what do I have to learn. I'm new to all of this, I know java, that's all.

submitted by /u/KristerZX
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

I'm kinda interested in all of this

What are common ways of dos-ing someone? Can someone give an example, and what do I have to learn. I'm new to all of this, I know java, that's all.

11 viewsedited 10:48

Hacking Articles Tips Tricks Videos Tutorials

How can I secure my Android app’s code?
https://www.reddit.com/r/Pentesting/comments/sxqg9n/how_can_i_secure_my_android_apps_code/

submitted by /u/jeffreysan1996 (https://www.reddit.com/user/jeffreysan1996)
[link] (https://www.consealsecurity.com/blog/how-can-i-secure-android-app-code/) [comments] (https://www.reddit.com/r/Pentesting/comments/sxqg9n/how_can_i_secure_my_android_apps_code/)

___________________________
@hacking_Attack
@Hacking_Video

How can I secure my Android app’s code?

Posted in r/Pentesting by u/jeffreysan1996 • 1 point and 0 comments

12 viewsedited 11:24

Hacking Articles Tips Tricks Videos Tutorials

Hacking on Medium
What is Kali Linux & An Introduction to the Linux Terminal and CLI.

This guide is smoothed out for complete fledglings in the Linux people group to stand up and begin with the terminal, utilize the Linux…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

What is Kali Linux & An Introduction to the Linux Terminal and CLI.

This guide is smoothed out for complete fledglings in the Linux people group to stand up and begin with the terminal, utilize the Linux…

11 viewsedited 12:18

Hacking Articles Tips Tricks Videos Tutorials

Hacking on Medium
NFT Marketplace OpenSea Hacked, $1.7M in NFTs stolen

https://cdn-images-1.medium.com/max/1280/1*cbnzVwxCvC0LMljkOQmT6w.png
A new week, a new attack. Not a week has passed since the beginning of the year without an incident affecting a firm in the cryptosphere…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

NFT Marketplace OpenSea Hacked, $1.7M in NFTs stolen

A new week, a new attack. Not a week has passed since the beginning of the year without an incident affecting a firm in the cryptosphere…

8 viewsedited 12:18

Hacking Articles Tips Tricks Videos Tutorials

Hacking on Medium
Kernel Locking —Deep Dive into Spinlocks — Part 1

https://cdn-images-1.medium.com/max/600/1*3uhqV0ui4jOZMff1FxI5TQ.png
The Linux Kernel provides a variety of locking primitives. Each one of them behaves in a unique way that makes it more or less suitable to…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video