1) Every sudo-allowed command is a privesc possibility (some examples: https://t.co/Az7kwm0chZ)
2) Every setuid/setgid file is a privesc opportunity
3) Seriously don't run Zimbra
4) No, don't use Exchange either
Today I got a notification on my phone that YouTube had sent me a copyright report, claiming one of my videos violated copyright and my channel was going to receive a strike.
Except, my video didn't violate copyright. And YouTube didn't really send me a copyright report.
Just home from @DerrenBrownโs the showman. Truly excellent, felt warm and comforting throughout, yet sad too. Thankyou @DerrenBrown for sharing, having lost a parent recently I felt the sentiment of the show. Go see it people ๐ #derrenbrown#showman
Iโm going to randomly pick 3 people who retweet this to receive a copy of the book. Iโll tweet out the winners tomorrow. Iโll also be giving away two more copies later this week complements of @RayRedacted! โฆand maybe a couple more next week just for university students
Who loves free? ๐ this guy! Join me for a bunch of new content and 3 hands-on labs featuring cloud attacks and incident response analysis. Sign up today!
iOS 14.0 "remote jailbreak" demo.๐ (RCE + LPE exploit)
Don't stay on versions on or below iOS 14.3. If you click a malicious link, bad guys would steal everything on your iPhone.