I recently setup a RDP honeypot and it didn’t disappoint. The first actor that logged in disabled or broke AV/logging/Task Manager/ etc. via a bat file. Then they dropped two RDP brute forcing tools and a GUI for Massscan. See the full write-up below. Security News & Discussion

---

• I recently setup a RDP honeypot and it didn’t disappoint. The first actor that logged in disabled or broke AV/logging/Task Manager/ etc. via a bat file. Then they dropped two RDP brute forcing tools and a GUI for Massscan. See the full write-up below.
• CVE-2019-3010 - Local privilege escalation on Solaris 11.x via xscreensaver
• Analysis of Two Newly Patched Kubernetes Vulnerabilities (CVE-2019-16276 and CVE-2019-11253)
• Tailoring CVE-2019-2215 to Achieve Root
• Bash script to automate the creation of a Tor access point.
• How to detect CVE-2019-14287 using Falco
• Security research: CODESYS Runtime, a PLC control framework
• salesforce/policy_sentry: IAM Least Privilege Policy Generator
• API Hacking GraphQL

I recently setup a RDP honeypot and it didn’t disappoint. The first actor that logged in disabled or broke AV/logging/Task Manager/ etc. via a bat file. Then they dropped two RDP brute forcing tools and a GUI for Massscan. See the full write-up below. Posted: 16 Oct 2019 09:22 AM PDT submitted by /u/InfoSecJim [link] [comments]

CVE-2019-3010 - Local privilege escalation on Solaris 11.x via xscreensaver Posted: 16 Oct 2019 01:11 AM PDT submitted by /u/0xdea [link] [comments]

Analysis of Two Newly Patched Kubernetes Vulnerabilities (CVE-2019-16276 and CVE-2019-11253) Posted: 16 Oct 2019 06:08 AM PDT submitted by /u/pingpongfifa [link] [comments]

Tailoring CVE-2019-2215 to Achieve Root Posted: 16 Oct 2019 11:04 AM PDT submitted by /u/Titokhan [link] [comments]

Bash script to automate the creation of a Tor access point. Posted: 16 Oct 2019 03:14 PM PDT submitted by /u/rubio_bot [link] [comments]

How to detect CVE-2019-14287 using Falco Posted: 16 Oct 2019 02:23 AM PDT submitted by /u/bencer [link] [comments]

Security research: CODESYS Runtime, a PLC control framework Posted: 16 Oct 2019 04:52 AM PDT submitted by /u/anochvay [link] [comments]

salesforce/policy_sentry: IAM Least Privilege Policy Generator Posted: 15 Oct 2019 08:57 PM PDT submitted by /u/Gallus [link] [comments]

API Hacking GraphQL Posted: 15 Oct 2019 05:17 PM PDT submitted by /u/ghostlulz [link] [comments]

You are subscribed to email updates from /r/netsec - Information Security News & Discussion. To stop receiving these emails, you may unsubscribe now.	Email delivery powered by Google
Google, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States