3 ms·
Is it though? Who knows what kind of "soft center" is around the "hard shells" of these organisations? For starters, the "uname -a" he ran shows the server's
by keyme 9y ago
Is it though?
Who knows what kind of "soft center" is around the "hard shells" of these organisations?
For starters, the "uname -a" he ran shows the server's kernel to be from Jan 2016. Right from the top of my head, this is probably vulnerable to "dirtycow" (for which there are weaponized exploits on github).
Who knows where root on this server can get you? You're not allowed to check. Legally that's black. No bug-bounty program allows you to go beyond the "/etc/passwd" print.
- krylon 9y ago> For starters, the "uname -a" he ran shows the server's kernel to be from Jan 2016. Who lets an Internet-facing production server run for a year without updates? (So, okay, it is possible that whoever is responsible for that machine did install updates but did not reboot the server. But that still leaves that server running with a known vulnerability.)