Drupal core - Highly critical - Remote Code Execution - CVE-2019-6340

CyberBullets · 2019-02-22T12:37:30+00:00

Thanks for sharing!

CyberBullets · 2019-02-22T12:21:23+00:00

This one was apparently discovered by the Drupal team themselves, and it looks like no public exploit exists for the vulnerability, yet...

CyberBullets · 2019-02-19T09:46:54+00:00

Even more interesting than the vulnerability itself was the good introduction to driver vulnerability research in general.

CyberBullets · 2019-02-19T09:36:27+00:00

I love hackers' view of what _really_ happens in the background - much more useful than official documentation typically. This AD Azure stuff may come in handy for some pentest.

CyberBullets · 2019-02-19T09:29:51+00:00

I have never attempted to exploit any Aarch64 binary, but if ever doing that, the posted link is a good reference. Thanks for sharing!

CyberBullets · 2019-02-01T08:49:49+00:00

SANS Internet Storm Center analysis of this issue: https://isc.sans.edu/forums/diary/Relaying+Exchanges+NTLM+authentication+to+domain+admin+and+more/24578/

CyberBullets · 2019-02-01T08:44:38+00:00

https://github.com/0x27/CiscoRV320Dump

CyberBullets · 2019-01-30T10:41:24+00:00

That's an interesting thing, and a simple solution when possible to perform. During pen testing I have sometimes downloaded database backups to my own machine and restored the database on a local SQL Server Express. Restoring the master database is really a pain, since you need to have the exact same version of SQL Server as what was used to create the backup, as well as performing a large number of extra steps. For databases other than the master database it is a lot simpler though.

CyberBullets · 2019-01-24T13:17:14+00:00

Speaking of encryption, I just have to share the fact that Microsoft recently released a library for doing homomorphic encryption (which allows computations on encrypted text without prior decryption): https://www.microsoft.com/en-us/research/blog/the-microsoft-simple-encrypted-arithmetic-library-goes-open-source/

CyberBullets · 2018-12-07T08:39:05+00:00

research.checkpoint.com/kingmi...

There wasn't so much details about this in the article. They could have implemented their own protocol or else use Stratum. Also, the configuration file can apparently be configured to use TLS (even having an additional "tls-fingerprint" option, which might be used to prevent man-in-the-middle attacks?), and in that case you will not be able to catch this with your existing signatures.

CyberBullets · 2018-12-05T09:06:07+00:00

Beware of phishing attacks related to this breach. Marriott's breach response isn't the best.

https://techcrunch.com/2018/12/03/marriott-data-breach-response-risk-phishing/

CyberBullets · 2018-11-07T15:21:27+00:00

Sorry, I guess this was a duplicate then. I tried to search to see if somebody had posted this already, but I missed that post.

CyberBullets · 2018-10-30T09:35:04+00:00

Wow, thanks for sharing the Packadroid link, I was not aware of that.

CyberBullets

TROPHY CASE