The DMZ

Tom K.

6:00 AM

@Arminius I'll maybe have a spare ticket

@Luc I'm not sure which days I'll attend, but I'll set a time as soon as I know

Anonymous

7:54 AM

@TomK. Damn, if I knew about this earlier I probably could've come.

Anonymous

FeelsBadMan.jpg

Anonymous

(Potentially) unpopular opinion: hot desking is fucking stupid.

Anonymous

Seriously, why has this become popular? It's so damn uncomfortable.

Anonymous

I can't stand it.

Anonymous

The chairs are uncomfortable because people are changing them all the time, the desk setups are uncomfortable unless you always use the same desk.

Anonymous

8:01 AM

It's so bad...............

MechMK1

Hey, let me derail the conversation quickly by asking something on-topic :D

Is it possible to exploit an absolute path to a binary in a sudoers file, assuming the binary itself is not exploitable?

Anonymous

What do you mean?

Anonymous

You mean like... Replace/edit the path?

MechMK1

Imagine my sudoers file allows the user eve to run sudo /some/path/securebinary

Anonymous

It depends what that binary is.

MechMK1

8:10 AM

Assuming I can't write to /some/path or modify securebinary or exploit securebinary some other way

Anonymous

But you said "assuming the binary itself is not exploitable".

MechMK1

Let's assume securebinary does nothing and just returns

Anonymous

If you can't write/modify and the binary doesn't do anything - no.

Anonymous

I don't see a way of getting root under that scenario.

Anonymous

If the binary was like find or something like that, you could just do sudo find /etc/passwd -exec /bin/sh \;

MechMK1

8:12 AM

@J.J Thanks. Do you recon there may be a way to do something with chroot? Assuming I may be able to run chroot as root

Anonymous

Are you using LinuxPrivChecker/LinEnum?

MechMK1

@J.J Yes, I know. We did a nice escape with more's !bash option

Anonymous

If not, I highly, highly recommend it.

Anonymous

It saves all of this "can I do this?" and tells you what you CAN do.

MechMK1

Yes, we did run that

Anonymous

8:13 AM

Then you just need to find a way of doing it.

Anonymous

Ah, okay.

MechMK1

But you know, just to make sure

Anonymous

About chroot, I am not so sure.

MechMK1

>shrek_goodquestion.png

Anonymous

I believe there were some LPEs in chroot before.

Anonymous

8:15 AM

But I think it's more likely there is an easier way to escalate than that.

Anonymous

At least, in most environments.

Anonymous

@MechMK1 gtfobins.github.io

3

MechMK1

I know, we looked at that too :D

Anonymous

Ah okay.

MechMK1

But thanks for mentioning it, I didn't know that before my recent question

Really a helpful resource

Anonymous

8:17 AM

Yes, very helpful.

MechMK1

Starring it just in case people don't know

Anonymous

I'm guessing this particular system is pretty well-hardened?

Luc

@J.J that is actually a very popular opinion. Nobody likes hot desking because there is no reason to like it. The reason it's commonly applied is not because it's so great for employees, but because it saves employers a lot of money if not everyone is in the office every day (not unlike overcommitting seats on an airplane or CPUs on a VPS host).

> Research has demonstrated that while there may be cost savings in office space hot desking has significant negative impacts on both productivity and staff morale.

(Wikipedia)

Anonymous

Well, I'm glad it's a popular opinion because it's fucking awful.

Luc

weird name actually, hot desking. In dutch we call it "flexplekken" ('flexspots', short for something like "flexible work spots" I guess). This almost makes it sound as if anyone thinks it's hot

Anonymous

8:25 AM

Also @MechMK1 this is really useful for LPE - github.com/DominicBreuker/pspy

Anonymous

Since if you can find a cron job you can write - bingo.

MechMK1

@J.J Thanks, I'll have a look at that

Anonymous

"Some Fortinet networking equipment was caught sending customers' sensitive information over the internet to its servers using weak encryption – XOR and a hardcoded static key." ummmmmmmmmmmmmmm, excuse me!?

MechMK1

@J.J No :D

We're just trying to find more and more

Anonymous

Oh right, lol.

Anonymous

8:27 AM

Well, cron jobs are usually always misconfigured.

Anonymous

Its the easiest priv-esc ever.

MechMK1

@J.J Breddy gud grybdograbhy

Anonymous

Pretty sure I just broke my wrist.

Anonymous

Ow

MechMK1

@J.J Oh shit

Anonymous

8:35 AM

Bottled fizzy drinks are the biggest waste of money ever.

Anonymous

Literally they are POINTLESS.

Anonymous

After you open and close the bottle more than twice its totally still.

Anonymous

I feel really triggered by everything today.

Anonymous

I need to go home >.<

Anonymous

I forgot to push my git repo and now im missing files I needed to work on this code today

Anonymous

8:44 AM

omfggggggggggggggggggggggggggggggggggggggggggggggggggggg

MechMK1

9:50 AM

Petition to rename Hashcat to Rooty Tooty Password Bruty.

Anonymous

Accepted.

MechMK1

Thank you!

MechMK1

10:15 AM

security.stackexchange.com/a/221949/163495

Needs 10k rep to watch, but damn, that story was good :D

Tom K.

is your gf still a thing @J.J ?

Anonymous

@TomK. Yes, why?

Tom K.

10:41 AM

might be a good reason to come to Germany <:

Anonymous

10:57 AM

She no longer lives in Germany.

Anonymous

She's doing her Masters in London.

MechMK1

11:57 AM

11

Q: How to avoid getting angry during job interviews?

How do you avoid getting angry or upset because you perceived in your mind (and the impression is very strong) they do not want to hire you and you are wasting your time by remaining there?

interviewing

Jesus, this guy....

> The interviewer says I have no experience with X and they want a guy who has experience with X and it's so unfair.

No, it's not.

I had an interview once where I wanted to get an internship at a company that does forensics, and I was rejected because I did not have practical experience with forensics.

Sucks, but that's life.

Anonymous

12:32 PM

Hahhahahahahahhaahhahahaha

Anonymous

WTF is that question

Anonymous

Hes basically asking for anger management

Anonymous

"How to avoid getting angry at job interviews?" - go to anger management...

MechMK1

It's so weird. It sounds to me like the guy is either very immature, or has serious anger management problems

In either case, I would not want to hire a guy who reacts like this

Anonymous

Dude, I am crying.

Anonymous

12:34 PM

This is hilarious.

MechMK1

Hmmm?

Anonymous

This question is hilarious.

Anonymous

I literally can't breathe.

MechMK1

The anger management one?

Anonymous

"because you perceived in your mind they do not want to hire you and you are wasting your time by remaining there"

Anonymous

12:35 PM

Yeah.

MechMK1

Maybe they did not hire you for a reason :D

Anonymous

I love the top comment.

Anonymous

"Therapy. Seriously, if this is a common problem you probably have generalized anger management issues."

MechMK1

It's true though

Anonymous

"Sometimes I feel guilt about walking out like I should stay there because I drove like 1 hour to the interview place. It just I have this thought like they do not want to hire me, but you never know until the end. – Fernando Martinez 14 hours ago" HAHAHAHA

Anonymous

12:38 PM

WTF IS WRONG WITH THIS GUY

MechMK1

The guy has anger management problems

Journeyman Geek

I once went to a job interview where I worked out they already filled the role ;p

That's just life

MechMK1

bruh

Journeyman Geek

you do not win them all.

Anonymous

Who the fuck walks out though

Anonymous

12:39 PM

Come on...

Journeyman Geek

an idiot

Anonymous

^

Journeyman Geek

if the guy they interviewed crashed and burned, you're still on the list

MechMK1

I saw people who aborted interviews though

Though there is a respectful way to do so, and there's just walking out

Anonymous

@TomK. @forest Do you remember when we had that question about the mosquito net and why it didn't kill him?

Anonymous

12:40 PM

This question is up there with that one in terms of stupidity.

MechMK1

What? :D

Anonymous

Sorry, was eating a sandwich.

Anonymous

Basically about a year ago Benoit (who used to hang out here) found a question on electronics StackEx (or something like that).

Anonymous

And the question was from a guy who put his hand on his mosquito net which he thought should kill him, but it didn't.

Anonymous

So to confirm his theory before posting his question he continued to touch the net each time wondering why it wasn't killing him.

MechMK1

12:43 PM

:D

Anonymous

Eventually he made a post here asking why he didn't die and it turns out he really misunderstood the conversion between watts to volts.

MechMK1

> When you are depressed, but also a scientist at heart.

Anonymous

And thus the net did not have enough wattage to physically kill him.

Anonymous

I would try and find the question but I am lazy as fuck

MechMK1

The best description I got as a kid was: Volt is what hurts you, ampere is what kills you.

Anonymous

12:46 PM

Found it.

Anonymous

I might've got a few minor details wrong

Anonymous

But here - electronics.stackexchange.com/questions/378605/…

Anonymous

Its the best thing I've ever read.

MechMK1

1:29 PM

Why are Bitlocker pins limited to 20 characters?

Shouldn't the input be hashed, and therefore allow arbitrary length inputs?

MechMK1

1:57 PM

4

Q: What does Lion Air faking the repair of the AoA vane mean for the Florida repair shop that ceased operations?

This is a lengthy read, but worth it. I'll quote the main piece I am speaking of. At the Bali airport, a vane, known as an angle of attack sensor, was replaced. Crash investigators were presented with photographs supposedly showing that a mandatory test was done after the vane had been replac...

aircraft-maintenance accident-investigation

> For a decade Xtra can't say for sure what they fixed or how they fixed it, and couldn't show they had the tools or the talent to fix anything they were allowed to.

Jesus...one would think that a business maintaining aircraft parts would have their shit together.

Benoit Esnard

10:33 PM

Which software / hardware would you use to encrypt an external hard disk? I'll buy one for Christmas I think.

Transcript for