#pwnkit — Public Fediverse posts

#CISA warns of #hackers exploiting #PwnKit #Linux #vulnerability

https://www.bleepingcomputer.com/news/security/cisa-warns-of-hackers-exploiting-pwnkit-linux-vulnerability/

To check, whether or not, your #RPM based distro is patched, try:
rpm -q --changelog polkit | grep -i cve

#CVE #CVE20214034 #polkit #security #cybersecurity

Ich habe einen Hacker-Spickzettel geschrieben, den ich bei CTFs oder Pentests benutze: https://www.1337.observer

Neben kleineren Tricks, wie verschiedene Hackingtools verwendet werden, sind dort auch Anleitungen zu aktuellen, kritischen Sicherheitslücken mit drin, wie #Log4Shell (Java), #PrintNightmare (Windows) oder #PwnKit (Linux).

Die Datei ist natürlich noch am Anfang. Vielleicht hilft das ja noch jemanden außer mir.

This Week in Security: Geopolitical Hacktivism, Antivirus Mining, and Linux Malware - The CIA Hacktivists have launched a sort of ransomware campaign against the Belaru... - https://hackaday.com/2022/01/28/this-week-in-security-geopolitical-hacktivism-antivirus-mining-and-linux-malware/ #thisweekinsecurity #hackadaycolumns #securityhacks #cryptominer #pwnkit #news

Auf allen Servern kein #polkit installiert - check. #pwnkit

"we note that #OpenBSD is not exploitable, because its kernel refuses to execve() a program if argc is 0."

https://blog.qualys.com/vulnerabilities-threat-research/2022/01/25/pwnkit-local-privilege-escalation-vulnerability-discovered-in-polkits-pkexec-cve-2021-4034
#pwnkit #polkit #pkexec #itsec

La vulnerabilità #PwnKit (chiamata così dalla società #Qualys) che garantisce agli aggressori i privilegi di root sui sistemi Linux, è stata rivelata in un'utilità di sistema chiamata #Polkit.
L'exploit esiste da 12 anni, ma è emerso solo poche ore dopo la pubblicazione dei dettagli tecnici!
Di Ravie #Lakshmanan su #TheHackerNews
https://thehackernews.com/2022/01/12-year-old-polkit-flaw-lets.html

#pwnkit Local Privilege Escalation in polkit's pkexec (CVE-2021-4034) https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt #infosec

#PwnKit #Vulnerability Demo

https://vimeo.com/669715589

#PwnKit

https://blog.qualys.com/vulnerabilities-threat-research/2022/01/25/pwnkit-local-privilege-escalation-vulnerability-discovered-in-polkits-pkexec-cve-2021-4034

#Qualys #Security Advisory - #pwnkit: Local Privilege Escalation in polkit's pkexec (CVE-2021-4034)

https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt