3 ms·

Better title: "How I found an exploit in a Paypal vendor ticket server." Clearly the title is meant to bait an interest in financial vulnerabilities. A "Paypal

Better title: "How I found an exploit in a Paypal vendor ticket server." Clearly the title is meant to bait an interest in financial vulnerabilities. A "Paypal server" is as meaningful a name as a "Google webpage".

deleted 9y ago
[deleted]
keyme 9y ago
Is it though? Who knows what kind of "soft center" is around the "hard shells" of these organisations? For starters, the "uname -a" he ran shows the server's kernel to be from Jan 2016. Right from the top of my head, this is probably vulnerable to "dirtycow" (for which there are weaponized exploits on github). Who knows where root on this server can get you? You're not allowed to check. Legally that's black. No bug-bounty program allows you to go beyond the "/etc/passwd" print.
- krylon 9y ago
  > For starters, the "uname -a" he ran shows the server's kernel to be from Jan 2016. Who lets an Internet-facing production server run for a year without updates? (So, okay, it is possible that whoever is responsible for that machine did install updates but did not reboot the server. But that still leaves that server running with a known vulnerability.)
hannob 9y ago
> A "Paypal server" is as meaningful a name as a "Google webpage". If you can execute on a server that serves a "Google webpage" then I'll be impressed. No, it doesn't have to be google.com.
anon335dtzbvc 9y ago
down vote cause of click bait title
matheweis 9y ago
A ticket vendor server that was explicitly allowed in the CSP in PayPal.com sites. Not as benign as it seems.
- ivanbakel 9y ago
  True, and that might be worth mentioning in the title as well - but my post was not about how benign the contents of the article are. The point is whether "hacking a Paypal server" makes people expect what the post is actually about. This Paypal-administrated server might give you access to the nuclear launch codes, but the title is still misleading.
dang 9y ago
OK let's use that above.

deleted 9y ago

[deleted]

keyme 9y ago

Is it though? Who knows what kind of "soft center" is around the "hard shells" of these organisations? For starters, the "uname -a" he ran shows the server's kernel to be from Jan 2016. Right from the top of my head, this is probably vulnerable to "dirtycow" (for which there are weaponized exploits on github). Who knows where root on this server can get you? You're not allowed to check. Legally that's black. No bug-bounty program allows you to go beyond the "/etc/passwd" print.

krylon 9y ago
> For starters, the "uname -a" he ran shows the server's kernel to be from Jan 2016. Who lets an Internet-facing production server run for a year without updates? (So, okay, it is possible that whoever is responsible for that machine did install updates but did not reboot the server. But that still leaves that server running with a known vulnerability.)

hannob 9y ago

> A "Paypal server" is as meaningful a name as a "Google webpage". If you can execute on a server that serves a "Google webpage" then I'll be impressed. No, it doesn't have to be google.com.

anon335dtzbvc 9y ago

down vote cause of click bait title

matheweis 9y ago

A ticket vendor server that was explicitly allowed in the CSP in PayPal.com sites. Not as benign as it seems.

ivanbakel 9y ago
True, and that might be worth mentioning in the title as well - but my post was not about how benign the contents of the article are. The point is whether "hacking a Paypal server" makes people expect what the post is actually about. This Paypal-administrated server might give you access to the nuclear launch codes, but the title is still misleading.

dang 9y ago

OK let's use that above.