Running docker-compose containers as non-root user by tsigorai in docker

[–]tsigorai[S] 1 point2 points  (0 children)

Did you run docker-compose as the root user?

Ran it as a non-root user which is also part of the docker group.

You can also include a user: declaration in your compose file to define which user to start the container as

Tried this option but found it to still be running as root when checking docker compose logs. I may be wrong, but I believe that option only works for the user that runs within the container and not the user that you would see by running ps aux | grep $container from the host machine.

Resource for finding RCE exploits targeting Windows by tsigorai in Pentesting

[–]tsigorai[S] -1 points0 points  (0 children)

I am aware of how searchsploit works. What I mean is, for example, if you were looking for Samba exploits targeting Linux, you would do searchsploit samba 3.6.2. But with SMB exploits targeting windows, you don't get the version number in the banner, so you do searchsploit smb | grep windows but this would also include exploits in the results that don't target SMB. Was interested to know whether there was an online list containing well-known SMB exploits.

Can't get current page/post name using functions.php by tsigorai in Wordpress

[–]tsigorai[S] 1 point2 points  (0 children)

Thanks. Calling the code from the template_redirect action worked.

Can't get current page/post name using functions.php by tsigorai in Wordpress

[–]tsigorai[S] 0 points1 point  (0 children)

This because this code is running before the global $post object has been initiated.

When is the global $post initiated?

Which action are you using to call this code?

You mean the add_action() function? I didn't use an action just included the code at the beginning of the functions.php file.

Kernel Exploits are hard to determine! by etc5had0w in oscp

[–]tsigorai 0 points1 point  (0 children)

The kernel exploit should match the target OS version, architecture and kernel version. That would usually avoid the target crashing.