4 ms·
Tactics, Techniques, and Procedures of the Yahoo Hack
- jessaustin 10y agoWow, M4G seems kind of awesome. In a totally bad and not acceptable way, of course.
- 1ba9115454 10y agoAlexsey Belan(M4g) seems pretty good at exploiting systems but not so good at staying anonymous.
- alexeiz 10y agoHack 1: > Ran mysqldump against the production database, creating 1.txt Hack 2: > Ran mysqldump against the production database, creating 1.txt Anybody else sees a pattern here? We need to forbid creating files named "1.txt"!
- curiousgal 10y agoYou gotta give it to him! The guy is dedicated to say the least.
- zalebz 10y agoif you are running public facing servers off a vm in your kitchen and also use the host os to access a corporate VPN you're going to have a bad time
- yuhong 10y agoI wonder how many VM escape bugs are in Parallels.
- nickpsecurity 10y agoThat exact problem was why security kernels and later separation kernels were invented. The theory was you could bulletproof 4-12Kloc of mostly static code more easily than monolithic, dynamic hypervisors. They have less nifty features, though. Really bare bones.
- ec109685 10y agoIt seemed like he didn't escape but instead cracked the password using ssh.
- wopwopwop 10y agoCould someone more knowledgeable here explain this to me? How do you "crack the password using ssh" from a guest VM to the host? That seems to imply that the guest VM and the host were somehow on the same network and the host had a SSH service. Is this the case? And if so is that normal (or the default?) config, that you can network from the guest VM to the host? Thanks
- yuhong 10y agoYes, I think so. No I don't think it is the default.