pentester.land· Aug 2, 2024· by Ceri Coburn

KnowBe4 RCE and LPE

Open Original Article ↗
Target Program: KnowBe4
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.
#RCE#Local Privilege Escalation#DLL Hijacking

More Writeups Like This

pentester.land

Poppin shells with Okta Verify on Windows

by b0yd (@rwincey)
pentester.land

Getting SYSTEM on Windows in style

by Sector 7 (@sector7_nl)
pentester.land

I hacked a card printer software (CVE-2024-34329)

by p0pcycle
pentester.land

Inside Xerox WorkCentre: Two Unauthenticated RCEs

by Arseniy Sharoglazov (@_mohemiv)