Infrastructure Security
Infra
Infrastructure and systems: command-injection filter bypasses, world-writable root cron jobs, and predictable / carried-forward key material used to reach root.
- Healthy Hijack 2 Part 2 of Healthy Hijack. The deployment is the same vulnerable stack as part 1: a Flask "Safe Command Runner" with a startswith allowlist + metacharacter blacklist (newline bypass), and a world-writable root cron script…
- Locks of Confusion 1 An "Internal Ops Portal" full of lore pages. The story: the svc-legacydb SSH keypair on legacy-03 (Debian 4.0 "etch", provisioned 2007-11-14) was carried forward through a 2011 P2V migration without regeneration: a key "decided long before…
- Healthy Hijack 1 A Flask "Safe Command Runner" runs only ping, traceroute, nslookup, with a blacklist that strips shell metacharacters. Two flaws chain to full root:
No write-ups match your filter.