New answers tagged

0

If the process is high-integrity, then you need to be running with either SYSTEM or Administrator privileges. Since your exploit is evidently not providing the necessary privileges, you would need to escalate your privileges first. If you're using a common tool like Metasploit, there may be an escalation plugin that applies to your target. Given the ...


-2

Root is designed to do whatever he wants on the system! He is the system administrator. He is the boss there. There is no reason to limit him in any way! As there will always be a method to go in somehow - i.e. compile kernel space module, properly sign it and force kernel to load it on next reboot or modify some system files, certificates, whatever I can't ...


1

I agree with Steffen Ullrich's answer - blacklisting leaves too many holes, and it will only be a matter of time until you encounter an unexpected "Gotcha". This is true in general for security, as proper defense in depth should start from the perspective of least privilege. Rather than asking "What shouldn't the user do?" it's much safer to ask "What ...


2

I can think of these: Indirectly modifying kernel image or signed modules by changing update or other system configurations (point update server to yours, add your keys). Or by compromising infrastructure where the updates come from. n-days. syzkaller reports quite a few bugs and some remain unfixed for a while. https://syzkaller.appspot.com/ Loading ...


4

Negative rings are false rings. They are not actual privilege levels of the CPU. The way rings work is simple. Some instructions have privilege checks where they verify that the current privilege level, or CPL, is sufficient and if it is not, the instruction fails with a general protection fault. CPL0 is ring 0, CPL1 is ring 1, etc. Some instructions will ...


1

I will stay with the intel/x86 architecture for my answer, but it can probably be applied to other vendors/ring-designs. Ring -3 is 'the computer that runs your computer', the management engine on the mainboard. So the next logical step would be to look for a chip on the motherboard that could exercise total control over the system. The only thing I can ...


0

So, it turns out that someone was using a copypasta script for checking file contents that, inexplicably, calls file_put_contents inside an if() declaration, I honestly didn't look at it long enough to consider why it was, I'm just glad that was the root cause. Turns out, the reason mostly PHP files were affected only, is that the script was written in PHP, ...


0

This doesn't really have much to do with "hacking". There is a command in the WhatsApp protocol where the sender can send to the receiver "Please delete message X". Whether or not the client honors that command is a different matter (it would be trivial for a client to simply ignore this command), but the official WhatsApp client by Facebook obviously does ...


Top 50 recent answers are included