Cloudberry Engineering

I’ve built a directory of open source cloud security tools.

A constant source of pain in Google Cloud Platform (GCP) and everywhere else is the amount of unmaintained resources: idle virtual machines, old buckets, IAM policies, DNS records and so on.

Docker and container security are broad problem spaces and there are many low hanging fruits one can harvest to mitigate risks.

Public cloud providers share some security responsibility with their customers.

In the context of incident response lateral movement is how attackers are able to penetrate deeper inside a system.

Google Cloud Registry (GCR) is the Docker container registry offered by Google Cloud Platform (GCP).

Video: Also available here.

Securing our Cloud infrastructure is incredibly important.

At Spotify, we actively manage more than 800 Google Cloud Platform projects.

RAT WARS 2.0: Advanced Techniques for Detecting RAT Screen Control In the landscape of web maliciousness Remote Administration Trojans 1 are not a new trend but their usage is still strong and growing steady.

Beyond Superfish: a Journey on SSL MitM in the Wild Recently Lenovo hit the news because they got caught installing adware on their laptops, namely Superfish, which, amongst other features, also perform SSL Mitm on the infected computer.

I’ve been contacted by a friend seeking for help: he bought something on a random ecommerce and after 30 days nothing was shipped and no one was replying to his emails.

Video: Also available on WordPress.tv.

As stated on this announcement on Full Disclosure every major old versions of Wordpress (from 2.5 to 3.3.1) was bundling a SWF applet named swfupload.swf which is vulnerable to XSS.

While playing around looking for a way to catch xss exploitation on a web application honeypot I’ve stumbled on the the problem of logging DOM XSS injections performed in the fragment portion of the URL.

A thing I noticed working day by day on WPScan’s vulnerability database is that many of the Wordpress (plugins) vulns disclosed are far less than the actual number of exploitable plugins.

Snippet time!

After some months of development xsssniper has become more stable and a lot has changed since initial releases so it’s about time to peek under the hood of current version: 0.8.x.

# Exploit Title: WordPress Shortcode Redirect plugin <= 1.0.01 Stored XSS # Dork: inurl:/wp-content/plugins/shortcode-redirect/ # Date: 2012/01/18 # Author: Gianluca Brindisi (g@brindi.si @gbrindisi http://brindi.si/g/) # Software Link: http://downloads.…

# Exploit Title: WordPress Mingle Forum plugin <= 1.0.32.1 Multiple Vulnerabilities # Date: 2012/01/18 # Author: Gianluca Brindisi (g@brindi.si @gbrindisi http://brindi.si/g/) # Software Link: http://downloads.wordpress.org/plugin/mingle-forum.1.0.32.1.…

# Exploit Title: WordPress uCan Post plugin <= 1.0.09 Stored XSS # Dork: inurl:/wp-content/plugins/ucan-post/ # Date: 2012/01/18 # Author: Gianluca Brindisi (g@brindi.si @gbrindisi http://brindi.si/g/) # Software Link: http://downloads.wordpress.org/plugi…

# Exploit Title: WordPress Age Verification plugin <= 0.4 Open Redirect # Date: 2012/01/10 # Dork: inurl:wp-content/plugins/age-verification/age-verification.php # Author: Gianluca Brindisi (g@brindi.si @gbrindisi http://brindi.si/g/) # Software Link: htt…

# Exploit Title: WordPress Pay With Tweet plugin <= 1.1 Multiple Vulnerabilities # Date: 01/06/2012 # Author: Gianluca Brindisi (g@brindi.si @gbrindisi http://brindi.si/g/) # Software Link: http://downloads.wordpress.org/plugin/pay-with-tweet.1.1.zip # Ve…

Simple Debugger (sdbg) is a minimal Windows debugger I wrote to sharpen my knowledge of debugging practices.

I wrote a little app called xsssniper to automatically test XSS injection points in target URLs. $ python xsssniper.py --url 'X' --payload 'Y' --check 'Z' What it does is scanning target URL for GET parameters and then inject an XSS payload (Y) into them…

Quick how-to install Tor and Polipo on OpenBSD 4.8, and route almost all the traffic trough them by deafult.

Since I haven’t managed to find a command line pastebin script whose based on the new APIs I wrote one.

This is a little how-to install and execute xmonad under X11.app on Snow Leopard.