• Home

  • Documents

  • Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus...
23

Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:

  • Upload
    others

  • View
    12

  • Download
    0

Embed Size (px)

Citation preview

Page 1: Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:
Page 2: Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:
Page 3: Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:
Page 4: Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:
Page 5: Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:

WARNINGContents of this presentationare for educational purposes

only. It is strongly suggestedthat you do not use this

knowledge for illegal purposes!

Page 6: Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:
Page 7: Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:

Your account jdelacruz has been created. Your password is: O9mx****

Page 8: Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:
Page 9: Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:
Page 10: Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:
Page 11: Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:
Page 12: Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:
Page 13: Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:
Page 14: Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:
Page 15: Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:
Page 16: Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:
Page 17: Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:
Page 18: Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:
Page 19: Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:
Page 20: Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:
Page 21: Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:
Page 22: Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:
Page 23: Unconventional Privilege Escalation - ROOTCON › ROOTCON 2 › Talks › ROOTCON 2...nessus ROOTKITS JRMES ß4CK SHOV oo COWRGHr VI 999; CULT Coe, 10.0.0.1 MAC: modified ARP points:

Gaithersburg’s Hometown Newspaper | Serving Kentlands ......Program means no more lawn mowing, snow shov-eling, or leaf raking. The homes range in price from 1.2 to 1.4 million and

Gaithersburg’s Hometown Newspaper | Serving Kentlands ......Program means no more lawn mowing, snow shov-eling, or leaf raking. The homes range in price from 1.2 to 1.4 million and

Documents
IT Conference 2011 Virtualization A New Risk. @tikbalangph rootCON 6 @parklane international hotel, cebu city [2012 sept 7-8]

IT Conference 2011 Virtualization A New Risk. @tikbalangph rootCON 6 @parklane international hotel, cebu city [2012 sept 7-8]

Documents
ROOTCON 13 Pilot Study on Semi-Automated Patch … 13/Talks/Pilot Study on...BlackHatUSA 2019, AsiaCCS 2019, AIS3 2018/2016, PHDays IV, SECCON,etc 3 Agenda Background Extracting Security

ROOTCON 13 Pilot Study on Semi-Automated Patch … 13/Talks/Pilot Study on...BlackHatUSA 2019, AsiaCCS 2019, AIS3 2018/2016, PHDays IV, SECCON,etc 3 Agenda Background Extracting Security

Documents
folkways-media.si.edu · Shortly after flying Into Nev York from the Coast early in December, 1959, Brownle McGhee rehearsed and appeared in a television shov, bought extra sets of

folkways-media.si.edu · Shortly after flying Into Nev York from the Coast early in December, 1959, Brownle McGhee rehearsed and appeared in a television shov, bought extra sets of

Documents
on Steroids Bug Bounty Hunting - ROOTCON® Media Server 12/Talks/Bug Bounty...Learning from the dev side of the tech world @anshuman_bh @_devalias @mhmdiaa Scaling & Reliability Vertical

on Steroids Bug Bounty Hunting - ROOTCON® Media Server 12/Talks/Bug Bounty...Learning from the dev side of the tech world @anshuman_bh @_devalias @mhmdiaa Scaling & Reliability Vertical

Documents
bug hunting 101 - ROOTCON 11/Trainings...• Jay Turla a.k.a The Jetman • Application Security Engineer @Bugcrowd • Metasploit Contributor: Host Header Injection Detection, BisonWare

bug hunting 101 - ROOTCON 11/Trainings...• Jay Turla a.k.a The Jetman • Application Security Engineer @Bugcrowd • Metasploit Contributor: Host Header Injection Detection, BisonWare

Documents
alquimista78.files.wordpress.com · I've John researched—one other a 'Chen Whitehouse, come¿jcxn "The most Of con With for Of The Shov BOOK penguin.com U.s.a. $10.00 409 BEF OF

alquimista78.files.wordpress.com · I've John researched—one other a 'Chen Whitehouse, come¿jcxn "The most Of con With for Of The Shov BOOK penguin.com U.s.a. $10.00 409 BEF OF

Documents
Methodology v2 The Bug Hunters - ROOTCON 11/Trainings/The Bug Hunters... · ★XXE v2.5. light reading. Discovery ++ Discovery Intro to scraping for subdomains Enumall (recon-ng,

Methodology v2 The Bug Hunters - ROOTCON 11/Trainings/The Bug Hunters... · ★XXE v2.5. light reading. Discovery ++ Discovery Intro to scraping for subdomains Enumall (recon-ng,

Documents
Cyber Espionage in CyberTopia - ROOTCON › ROOTCON 6 › Talks › ROOTCON 6 - Cyber … · FORWARD Consortium (2010), White book: Emerging ICT threats, Deliverable D3.1, FORWARD

Cyber Espionage in CyberTopia - ROOTCON › ROOTCON 6 › Talks › ROOTCON 6 - Cyber … · FORWARD Consortium (2010), White book: Emerging ICT threats, Deliverable D3.1, FORWARD

Documents
FEATURE SHEETlucchettahomes.com/wp-content/uploads/2020/06/LOT-29-PRINTABL… · tennis courts, room, librar grass cutting walkway shov grass cutt tennis cou Association Fee: $262/month

FEATURE SHEETlucchettahomes.com/wp-content/uploads/2020/06/LOT-29-PRINTABL… · tennis courts, room, librar grass cutting walkway shov grass cutt tennis cou Association Fee: $262/month

Documents
- ROOTCON 10/Trainings/ROOTCON 10...• Authentication is only as strong as your user management processes • Use the most appropriate form of authentication suitable for your asset

- ROOTCON 10/Trainings/ROOTCON 10...• Authentication is only as strong as your user management processes • Use the most appropriate form of authentication suitable for your asset

Documents
Demystifying a Malware Attack - ROOTCON 10/Talks/ROOTCON... · – Damballa – F-Secure – Trend Micro • @Tophs. Author of 2012 2015. Co-Author of 2016. Agenda • The Attack

Demystifying a Malware Attack - ROOTCON 10/Talks/ROOTCON... · – Damballa – F-Secure – Trend Micro • @Tophs. Author of 2012 2015. Co-Author of 2016. Agenda • The Attack

Documents
Cloud Security Suite - ROOTCON 12/Talks/Defending cloud... · •Active Member of Null Bangalore Chapter •Researcher at heart. Why AWS/GCP/Azure Audit? •Misconfigured Access (IAM,

Cloud Security Suite - ROOTCON 12/Talks/Defending cloud... · •Active Member of Null Bangalore Chapter •Researcher at heart. Why AWS/GCP/Azure Audit? •Misconfigured Access (IAM,

Documents
Domain Discovery - ROOTCON 11/Trainings/RECON.pdf · A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform ★Kubebot: A security testing Slackbot

Domain Discovery - ROOTCON 11/Trainings/RECON.pdf · A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform ★Kubebot: A security testing Slackbot

Documents
Metasploit - ROOTCON™ Media Server 10/Trainings... · Metasploit Framework • One of the most popular open source penetration testing tools / frameworks the world has ever known

Metasploit - ROOTCON™ Media Server 10/Trainings... · Metasploit Framework • One of the most popular open source penetration testing tools / frameworks the world has ever known

Documents
AUTHORS FR: MEN SHOV, V.A. TO: MERCIER, JULES · title: authors fr: men shov, v.a. to: mercier, jules subject: authors fr: men shov, v.a. to: mercier, jules keywords

AUTHORS FR: MEN SHOV, V.A. TO: MERCIER, JULES · title: authors fr: men shov, v.a. to: mercier, jules subject: authors fr: men shov, v.a. to: mercier, jules keywords

Documents
 · M SHOV If 1M CIT/ Vrt? /Æt- fru / 00 -2/1 0041e,tJU — av0a- odt @ 3TO -u . A. I 11/ n/ I

 · M SHOV If 1M CIT/ Vrt? /Æt- fru / 00 -2/1 0041e,tJU — av0a- odt @ 3TO -u . A. I 11/ n/ I

Documents
TABELA DE PREÇOS - midiakit.verdesmares.com.brmidiakit.verdesmares.com.br/app/uploads/2016/10/wordpress_tabela... · AUTO ESPO SHOV TMAX DFAU FANT SHOD DOMA Nordeste Rural P. Empresas

TABELA DE PREÇOS - midiakit.verdesmares.com.brmidiakit.verdesmares.com.br/app/uploads/2016/10/wordpress_tabela... · AUTO ESPO SHOV TMAX DFAU FANT SHOD DOMA Nordeste Rural P. Empresas

Documents
Chattanooga Choo Choo - MHSC Musicmhscmusic.org/uploads/2/8/7/6/2876054/chattanoogachoochoo_mh…Chattanooga Choo Choo when you know that Ten- ne - ssee is not ver- y far. Shov - el

Chattanooga Choo Choo - MHSC Musicmhscmusic.org/uploads/2/8/7/6/2876054/chattanoogachoochoo_mh…Chattanooga Choo Choo when you know that Ten- ne - ssee is not ver- y far. Shov - el

Documents
UNDERSTANDINGS ANDBOXES - ROOTCON 6/Talks/ROOTCON 6 - Understan… · s andboxes $ see+ $ $

UNDERSTANDINGS ANDBOXES - ROOTCON 6/Talks/ROOTCON 6 - Understan… · s andboxes $ see+ $ $

Documents
REMOTE CODE EXECUTION - ROOTCON 10/Talks/ROOTCON... · RCE – binary deserialization • Java contains a native serialization mechanism, that converts objects to binary data •

REMOTE CODE EXECUTION - ROOTCON 10/Talks/ROOTCON... · RCE – binary deserialization • Java contains a native serialization mechanism, that converts objects to binary data •

Documents
THE LACHLAN PROBLEMsudoplatov/lachlan_eng_03_09_2008.pdf · tor of Institute of Mathematics, Academician Yuriy Leonidovich Er-shov. To the statement the Problem and to successes in

THE LACHLAN PROBLEMsudoplatov/lachlan_eng_03_09_2008.pdf · tor of Institute of Mathematics, Academician Yuriy Leonidovich Er-shov. To the statement the Problem and to successes in

Documents
 · SOMMER Total !FOR VILLAGE CLERK 1 Voteis1 Over ! 4 YEAR TERM Allowed Under ! 4 ANL JRMES BREWER !FOR VILLAGE TRUSTEE 3 Vote lsl Over ... 17 REP TAM1 FRUHLING-VOGES DEM NO CANDIDATE

 · SOMMER Total !FOR VILLAGE CLERK 1 Voteis1 Over ! 4 YEAR TERM Allowed Under ! 4 ANL JRMES BREWER !FOR VILLAGE TRUSTEE 3 Vote lsl Over ... 17 REP TAM1 FRUHLING-VOGES DEM NO CANDIDATE

Documents
CAVALRY IN THE ROMAN WORLD · Notes for contributors and page templates for JRMES are available from the Production Editor and the JRMES web page Published 2020 for The Association

CAVALRY IN THE ROMAN WORLD · Notes for contributors and page templates for JRMES are available from the Production Editor and the JRMES web page Published 2020 for The Association

Documents
A presentation for rOOTcON 5 (September 9-11, 2011) By ... 5/Lock...A presentation for rOOTcON 5 (September 9-11, 2011) By:JollyMongrel (arf arf ) Very IMPORTANT DISCLAIMER: This presentation

A presentation for rOOTcON 5 (September 9-11, 2011) By ... 5/Lock...A presentation for rOOTcON 5 (September 9-11, 2011) By:JollyMongrel (arf arf ) Very IMPORTANT DISCLAIMER: This presentation

Documents
Potpisivanje PDF dokumenata - Aktiva 2001aktiva2001.rs/obrasci/Potpisivanje PDF dokumenata_BG.pdf · Može se čekirati opcija Do not shov this message again kako se ovaj prozor ubuduće

Potpisivanje PDF dokumenata - Aktiva 2001aktiva2001.rs/obrasci/Potpisivanje PDF dokumenata_BG.pdf · Može se čekirati opcija Do not shov this message again kako se ovaj prozor ubuduće

Documents
ROOTCON 101

ROOTCON 101

Documents
THE ENEMIES OF ROMEbib.irb.hr/datoteka/472769.M._Sanader_T._Separovic... · Journal of Roman Military Equipment Studies JRMES Editor M.C.Bishop, 34 Cobden Street, Darlington DL1 4JD,

THE ENEMIES OF ROMEbib.irb.hr/datoteka/472769.M._Sanader_T._Separovic... · Journal of Roman Military Equipment Studies JRMES Editor M.C.Bishop, 34 Cobden Street, Darlington DL1 4JD,

Documents
“If you can manipulate the data, 8/Talks/ROOTCON 8...CSP • Content-Security-Policy -Chrome 25 (Firefox nightlies) • X-Content-Security-Policy -Firefox 4+ • X-WebKit-CSP -WebKitbrowsers

“If you can manipulate the data, 8/Talks/ROOTCON 8...CSP • Content-Security-Policy -Chrome 25 (Firefox nightlies) • X-Content-Security-Policy -Firefox 4+ • X-WebKit-CSP -WebKitbrowsers

Documents
The VOHO Campaign - ROOTCON 7/Talks/ROOTCON 7 - The VOH… · The VOHO Campaign Paper Authors: Will Gragido,Sr. Manager RSA First Watch Chris ‘Tophs’ Elisan, Principal Malware

The VOHO Campaign - ROOTCON 7/Talks/ROOTCON 7 - The VOH… · The VOHO Campaign Paper Authors: Will Gragido,Sr. Manager RSA First Watch Chris ‘Tophs’ Elisan, Principal Malware

Documents