Hello,
Today I replied in this
thread about some security issues of sentora.
And In this post, I'll give POC.
How easy it is to exploit Sentora Hosting accounts.
This should be considered as a friendly 'exploitation'.
Sentora need to improve security of their hosting accounts.
Here is the video link
http://www.dailymotion.com/video/x2xzlqp
@[apinto] check this.
@[ahsan], how did you installed the Terminal Emulator (HostExplore)?
(07-15-2015, 02:36 AM)apinto Wrote: [ -> ]@[ahsan], how did you installed the Terminal Emulator (HostExplore)?
That is just a perl script. I bypassed security measurments with custom htaccess handlers.
I thought perl
wasn't part off Sentora..
And if i remember it good it was removed already for security reasons a long time ago.
(07-15-2015, 02:46 AM)Ron- Wrote: [ -> ]eI thought perl wasn't part off Sentora..
And if i remember it good it was removed already for security reasons a long time ago.
But this is not about perl mate. This is about the Hosting management.
Suppose you and I are on the same server using Sentora. And I get hacked. And the hacker on my account use the same techniques that I used in the video.
There are other ways to do back connect other than perl. c , python, PHP and the list goes on.
So if you have no pearl installed on sentora this is not possible right
JUST SAW THE POST ABOVE
SOLUTIONS!!!!
If you don't have installed perl installed. You cannot use this way. But You have PHP installed (ofcourse you have). And There are too many scripts out there which will do the job for you :/
@[Me.B] @[5050] @[motters] @[kandrews] @[ballen]
@[ahsan] the issue you posted is a real one, however it was already said by the Sentora Dev team that Pearl is NOT supported due to this issue.
You have a house with a locked door... you open a huge hole in the wall and complain about security... I guess this was why Me.B did not reply to you.
Sentora does NOT use system accounts, it uses a single apache account.
If you want to make a POC (Prove of Concept) please do it on a clean sentora default install.
(07-15-2015, 02:51 AM)ahsan Wrote: [ -> ]There are other ways to do back connect other than perl. c , python, PHP and the list goes on.
I get your point, Sentora version 2/major update will work in a different way.
If i remember it good each user gets a own user, like some other control panels are using.
If that's what you are talking about that is already known and spoken off multiple times.
but for the time being all of them are not installed in the default setup except php which is protected/locked in by suhosin.