Tag Archives: admin

admin

Hard rebooting Linux

As usual, for future reference…

When shutdown and init fail, and everything else fails too, and we do not have keyboard access to press SysRq:

echo 1 >> /proc/sys/kernel/sysrq
echo b >> /proc/sysrq-trigger

WSUS and “Cannot save configuration because the server is still processing a previous configuration change”?

For future reference…

If WSUS starts responding with the message: “Cannot save configuration because the server is still processing a previous configuration change”, run this SQL command:

UPDATE tbSingletonData SET ResetStateMachineNeeded = 0

And in the long term, consider this:

https://community.spiceworks.com/scripts/show_download/2998-wsus-automated-maintenance-formerly-adamj-clean-wsus

Remote code execution on DNA sequencers…

…using properly synthesized DNA code as the medium…

A noteworthy paper by researchers from the University of Washington:

The rapid improvement in DNA sequencing has sparked a big data revolution in genomic sciences, which has in turn led to a proliferation of bioinformatics tools. To date, these tools have encountered little adversarial pressure. This paper evaluates the robustness of such tools if (or when) adversarial attacks manifest. We demonstrate, for the first time, the synthesis of DNA which ? when sequenced and processed? gives an attacker arbitrary remote code execution. To study the feasibility of creating and synthesizing a DNA-based exploit, we performed our attack on a modified downstream sequencing utility with a deliberately introduced vulnerability. After sequencing, we observed information leakage in our data due to sample bleeding. While this phenomena is known to the sequencing community, we provide the first discussion of how this leakage channel could be used adversarially to inject data or reveal sensitive information. We then evaluate the general security hygiene of common DNA processing programs, and unfortunately, find concrete evidence of poor security practices used throughout the field. Informed by our experiments and results, we develop a broad framework and guidelines to safeguard security and privacy in DNA synthesis, sequencing, and processing.

Source: http://dnasec.cs.washington.edu/dnasec.pdf

Remote Desktop Session Hijacking

THIS IS AUTOMATIC TRANSLATION…

I do not know how people get so excited … It is obvious that the SYSTEM can get into memory each process so why such WoW, that having the SYSTEM account, you can switch to a different logged-on user?

Can dlatemu, that you can have more privileges (e.g. Domain Admin). However, please note that:

  1. To use the method of switching on the SYSTEM you must be an administrator for the server on which this account is obtained.
  2. M $ and not only say that you should work with the lowest possible privileges so why anyone sane would sign such as the Enterprise permissions on these permissions are not the computer where the Admin’a needs and that can be compromised? Read: https://technet.microsoft.com/en-us/library/cc700835.aspx and quote: “Do not use service administrator accounts for day-to-day administrative tasks, such as account and member server management; Instead, use your regular user account. “” D[..]omain Admins credentials are required to perform the following steps: [..]”

But what what do you mean?

  1. We find the computer on which we have Admin and logged inadvertently Admin domain. We can help you with: query user
  2. change the permissions on the SYSTEM:
    PsExec-s \localhost cmd
  3. lists sessions (we remember our session and the session name of the victim), of course, better to the victim’s session has been inactive;-P
  4. Switching on the victim’s sessions:
    TSCON <numer naszej="" sesji="">/dest:<nazwa sesji="" ofiary=""> </nazwa> </numer>
  5. We look forward to;-)

And for those who prefer movies here’s a YouTube version: