Pentest Rocket Chat RCE + docker VM PoC read any root file (PRIV esc) shocker

Mohad Pentest July 18, 2022
affected script is Rocket Chat official site : https://rocket.chat/   Situation : log in as mod or admin. after login in go to INTEGRATION      choose the active channel ( my case was GENERAL …
Read More

Pentest PandoraFMS Backup Utility root priv escalation

Mohad Pentest July 18, 2022
Situation: reverse shell or ssh connection.   official site : https://pandorafms.com/manual/en/ation/05_big_environments/07_server_management   executing command : /usr/bin/pandora_backup   show we have no permission. reading the backup script it shows that depends on tar, so i created…
Read More

MySQL Enable Remote Access (Grant)

Mohad tech April 11, 2021
If you try to connect to your mysql server from remote machine, and run into error like below, this article is for you. ERROR 1130 (HY000): Host ‘1.2.3.4’ is not allowed to connect to this…
Read More