Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- A few prelim thoughts after discussion with a friend on the Phineas account of breaching Hacking Team:
- 1) He wasn’t going to find an exploitable zero-day in postfix.Joomla is even worse than Wordpress at security vulnerabilities.
- 2) Point of entry: Sounds cool but professionals are known to spread disinformation about that. See eg 2009 Matasano breach http://shinnok.com/reading/zfo/zfo5.txt Contacts and back-channels said that he got in through a web vulnerability, the other things he says are pure disinfo even though some items look convincing.
- 4) Time spent: If Phineas spent two 40-hour weeks REing the firmware, that only leaves 20h for network recon, pivoting/lateral moving, pillaging and exfiltration. 100h time could just be notional.
- 2 cents: A non-zero day in Joomla as entry point sounds much more likely.
Add Comment
Please, Sign In to add comment
