Hellow guys, Welcome to my website, and you are watching Local Root Exploit in HospitalRun Software. and this vIdeo is uploaded by LiveOverflow at 2023-07-22T07:02:43-07:00. We are pramote this video only for entertainment and educational perpose only. So, I hop you like our website.
| Name | Local Root Exploit in HospitalRun Software |
| Video Uploader | Video From LiveOverflow |
| Upload Date | This Video Uploaded At 22-07-2023 14:02:43 |
| Video Discription | Let's talk about a "security flaw in hospital software that allows full access to medical devices". This issue was disclosed on LinkedIn and included a full exploit code. Let's use this app as an example on how to find a macOS privilege escalation and learn how local root exploits can work. Print BINGO sheet: https://twitter.com/liveoverflow/status/1682650394227351552 Sources: Original LinkedIn Post: https://web.archive.org/web/20230424004137/https://www.linkedin.com/posts/jeanpereira00_sicherheitsl%C3%BCcke-in-krankenhaus-software-activity-7055185115584303104-2eZr The Exploit code: https://0day.today/exploit/38531 "The project has been deprecated for 2 years. Version 1.0.0-beta has been an EOL for at least 5 years" - developer statement: https://twitter.com/tehkapa/status/1650059269939552256 My references finding priv esc issues in macOS apps: https://github.com/cure53/Publications/blob/master/summary-report_tunnelbear.pdf https://github.com/cure53/Publications/blob/master/summary-report_tunnelbear_2018.pdf https://github.com/cure53/Publications/blob/master/summary-report_tunnelbear_2019.pdf https://github.com/cure53/Publications/blob/master/pentest-report_IVPN.pdf Help me pay for any legal trouble in case somebody wants to sue me (advertisement): https://shop.liveoverflow.com/ Chapters: 00:00 - Intro: Practice Research with Existing Issues 01:45 - HospitalRun Functionality 03:07 - What is a Local Root Exploit? 05:49 - Typical macOS Priviledge Escalation Issues 09:23 - Looking for Priviledged Helper in HospitalRun 10:10 - My Experience in finding Local Root Exploits on macOS 11:46 - Threat Modeling and Common Deployments 13:11 - Was this an April Fools Joke? 14:18 - Analysing and Cleaning Up The Exploit Code 17:51 - Reading Comments on LinkedIn 19:29 - BINGO! =[ β€οΈ Support ]= β per Video: https://www.patreon.com/join/liveoverflow β per Month: https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join 2nd Channel: https://www.youtube.com/LiveUnderflow =[ π Social ]= β Twitter: https://twitter.com/LiveOverflow/ β Streaming: https://twitch.tvLiveOverflow/ β TikTok: https://www.tiktok.com/@liveoverflow_ β Instagram: https://instagram.com/LiveOverflow/ β Blog: https://liveoverflow.com/ β Subreddit: https://www.reddit.com/r/LiveOverflow/ β Facebook: https://www.facebook.com/LiveOverflow/ |
| Category | Education |
| Tags | Live Overflow | liveoverflow | hacking tutorial | how to hack | exploit tutorial | hospitalrun | macos | privesc | 0day | 0day.today | jean pereira | jean perreira | jean pereirra | linkedin | infosec charlatan | fake exploit | hospital hacking | critical infrastructure | bingo | bs bingo | exploitation | buffer | nopslide | threat modeling | april fools | race condition | openvpn | vpn app | root daemon | priviledged daemon | deamon | osx |
