/Hive Five #61 · Mar 14, 2022
Remember the Pac-Man rule
/The Bee's Knees 🐝
The headline picks from this issue. The full issue has more.
-
The Discovery and Exploitation of CVE-2022-25636
A few weeks ago, they found and reported CVE-2022-25636 - a heap out of bounds write in the Linux kernel. The bug is exploitable to achieve kernel code execution (via ROP), giving full local privilege escalation, container escape, whatever you want.
Read : The Discovery and Exploitation of CVE-2022-25636 -
How to Use Bug Bounty to Help Your Career!
So they've now had a job in security, whooo, but what did they learn? Well they spoke to a lot of people who hire for jobs and wanted to tell you what they learned when it came to career planning and how they leveraged my bug bounty knowledge to get that security job!
Watch : How to Use Bug Bounty to Help Your Career! -
Intigriti 1337UP Live conference
For everyone interested in bug bounty and security vulnerability research. With a line-up of 10 excellent speakers, Intigriti brought you a knowledge-packed program straight into your homes.
Read : Intigriti 1337UP Live conference -
Escalating from Logic App Contributor to Root Owner in Azure
In October 2021, they were performing an Azure penetration test. By the end of the test, they had gained Owner access at the Root level of the tenant.
Read : Escalating from Logic App Contributor to Root Owner in Azure -
Put an io_uring on it - Exploiting the Linux Kernel
This blog posts covers io_uring, a new Linux kernel system call interface, and how they exploited it for local privilege escalation (LPE).
Read : Put an io_uring on it - Exploiting the Linux Kernel