all InfoSec news
Pilgrimage HTB write up
Dec. 5, 2023, 1:12 p.m. | Pr3ach3r
System Weakness - Medium systemweakness.com
Don’t leave your Git repository exposed
Introduction
Hello, everyone! Welcome back to my infosec journey. Today, I’ll be discussing Pilgrimage, an “easy” machine on the hackthebox.com website. To pwn this box, one can dump an exposed git repository and find the version of an ImageMagick program. By exploring CVE-2022–44268, also known as ImageMagick Arbitrary File Read, we can uncover the user credentials. Upon SSH access, a Binwalk task is running on the system. Verifying the …
More from systemweakness.com / System Weakness - Medium
Analyzing WSH RAT
1 day, 16 hours ago |
systemweakness.com
The Essential Cybersecurity Mindset
1 day, 16 hours ago |
systemweakness.com
Secure Architecture: Infrastructure Controls
1 day, 16 hours ago |
systemweakness.com
Data Breaching in Secure Companies
1 day, 16 hours ago |
systemweakness.com
How Prompt Injection Can Steal Your Data
3 days, 20 hours ago |
systemweakness.com
Jobs in InfoSec / Cybersecurity
CyberSOC Technical Lead
@ Integrity360 | Sandyford, Dublin, Ireland
Cyber Security Strategy Consultant
@ Capco | New York City
Cyber Security Senior Consultant
@ Capco | Chicago, IL
Sr. Product Manager
@ MixMode | Remote, US
Security Compliance Strategist
@ Grab | Petaling Jaya, Malaysia
Cloud Security Architect, Lead
@ Booz Allen Hamilton | USA, VA, McLean (1500 Tysons McLean Dr)