Month May 2016

As it has come up a few times in my personal engagements, I figured it was time to do a writeup on Oracle command execution. Ray DoyleRay Doyle is an avid pentester/security enthusiast/beer connoisseur who has worked in IT for…

Exploiting init.d scripts based on security misconfigurations is a common, and generally easier to exploit, vector for privilege escalation. I’d like to cover an example of such an exploit this week, as well as an easy way to come across…