Dns on Łukasz Pastuszak - security notes

Dns on Łukasz Pastuszak - security noteshttps://lukaszpastuszak.dev/tags/dns/Recent content in Dns on Łukasz Pastuszak - security notesHugoen-usSat, 06 May 2023 00:00:00 +0000Snoopyhttps://lukaszpastuszak.dev/writeups/snoopy/Sat, 06 May 2023 00:00:00 +0000https://lukaszpastuszak.dev/writeups/snoopy/A path-traversal filter bypass leaks a BIND TSIG key, which hijacks the mail domain to take over a Mattermost account; abusing a provisioning slash command honeypots SSH credentials, then CVE-2023-23946 (git apply symlink) and CVE-2023-20052 (ClamAV DMG XXE) escalate to root.