/Hive Five #66 · Apr 18, 2022
How to Take Over the World
/The Bee's Knees 🐝
The headline picks from this issue. The full issue has more.
-
AWS RDS Vulnerability Leads to AWS Internal Service Credentials
Lightspin's Research Team obtained credentials to an internal AWS service by exploiting a local file read vulnerability on the RDS EC2 instance using the log_fdw extension. The internal AWS service was connected to AWS internal account, related to the RDS service.
Read : AWS RDS Vulnerability Leads to AWS Internal Service Credentials -
Round Two - An Updated Universal Deserialisation Gadget for Ruby 2.x-3.x
A few months ago they noticed the gadget in their previous article had been patched and no longer worked in Ruby 3.0.3, so they spent a bit of time dusting off the old tools to see if they could find another one. One of the helper scripts they used is based on the original elttam article.
Read : Round Two - An Updated Universal Deserialisation Gadget for Ruby 2.x-3.x -
Bug Bounty Redacted #2 - Third Party Subdomain Takeover & Exposed Admin Interfaces
This episode covers two reports - the discovery of a third party subdomain takeover and an exposed administration panel. The discovery process and information about the exact report is shared in this video.
Watch : Bug Bounty Redacted #2 - Third Party Subdomain Takeover & Exposed Admin Interfaces -
Learn with j3ssiejjj - Automating Recon at scale using Osmedeus
In this video, Ai Ho Jessie, the author of the Osmedues, demonstrates how to utilise the tool to its full potential, including developing modules, alternative configurations, and many other capabilities.
Watch : Learn with j3ssiejjj - Automating Recon at scale using Osmedeus -
Diving Deeper into WatchGuard Pre-Auth RCE - CVE-2022-26318
The CVE for this issue is CVE-2022-26318. The reverse engineering of this CVE was performed by Dylan Pindur.
Read : Diving Deeper into WatchGuard Pre-Auth RCE - CVE-2022-26318