Medicare at 50 Would Double Down on Failure
A new proposal would expand Medicare to include Americans as young as 50. It's a throw-money-at-it solution to problems largely caused by government intervention in health care, according to Cato’s…
Medicare at 50 Would Double Down on Failure
A new proposal would expand Medicare to include Americans as young as 50. It's a throw-money-at-it solution to problems largely caused by government intervention in health care, according to Cato’s…
Episode-2391- Listener Calls for 2-28-19
Today on The Survival Podcast I take your phone calls on beef, reloading, soils, fish, guns, ducks, winter weather, land and more. Remember to be on a show like this…
Jenkins – decrypting credentials.xml
If you find yourself on a Jenkins box with script console access you can decrypt the saved passwords in credentials.xml in the following way: hashed_pw='$PASSWORDHASH' passwd = hudson.util.Secret.decrypt(hashed_pw) println(passwd) You…
Jenkins – decrypting credentials.xml
If you find yourself on a Jenkins box with script console access you can decrypt the saved passwords in credentials.xml in the following way: hashed_pw='$PASSWORDHASH' passwd = hudson.util.Secret.decrypt(hashed_pw) println(passwd) You…
Jenkins – SECURITY-180/CVE-2015-1814 PoC
Forced API token change SECURITY-180/CVE-2015-1814 https://jenkins.io/security/advisory/2015-03-23/#security-180cve-2015-1814-forced-api-token-change Affected Versions All Jenkins releases <= 1.605 All LTS releases <= 1.596.1 P...
Jenkins – SECURITY-180/CVE-2015-1814 PoC
Forced API token change SECURITY-180/CVE-2015-1814 https://jenkins.io/security/advisory/2015-03-23/#security-180cve-2015-1814-forced-api-token-change Affected Versions All Jenkins releases <= 1.605 All LTS releases <= 1.596.1 P...
Jenkins – SECURITY-200 / CVE-2015-5323 PoC
API tokens of other users available to admins SECURITY-200 / CVE-2015-5323 API tokens of other users were exposed to admins by default. On instances that don’t implicitly grant RunScripts permission…
Jenkins – SECURITY-200 / CVE-2015-5323 PoC
API tokens of other users available to admins SECURITY-200 / CVE-2015-5323 API tokens of other users were exposed to admins by default. On instances that don’t implicitly grant RunScripts permission…
Jenkins Master Post
A collection of posts on attacking Jenkins http://www.labofapenetrationtester.com/2014/08/script-execution-and-privilege-esc-jenkins.html Manipulating build steps to get RCE https://medium.com/@uranium238/shodan-jenkins-to-get-rces-on-servers-6b6ec7c960e2 Using the terminal plugin to get RCE https://sharadchhetri.com/2018/12/02/managing-jenkins-plugins/ Getting started with Jenkins Plugins https://blog.orange.tw/2019/01/hacking-jenkins-part-1-play-with-dynamic-routing.html Vulns…
Jenkins Master Post
A collection of posts on attacking Jenkins http://www.labofapenetrationtester.com/2014/08/script-execution-and-privilege-esc-jenkins.html Manipulating build steps to get RCE https://medium.com/@uranium238/shodan-jenkins-to-get-rces-on-servers-6b6e...
Episode-2390- Blair Wirkkala on CBD Oil and the Endocannabinoid System
Blair is a wellness oriented RN. Beyond her experience as a registered nurse, she has worked as a health and physical educator, an exercise physiologist, personal trainer, and nutrition consultant.…
Jenkins – messing with exploits pt2 – CVE-2019-1003000
After the release of Orange Tsai's exploit for Jenkins. I've been doing some poking. PreAuth RCE against Jenkins is something everyone wants. While not totally related to the blog post…
Jenkins – messing with exploits pt2 – CVE-2019-1003000
After the release of Orange Tsai's exploit for Jenkins. I've been doing some poking. PreAuth RCE against Jenkins is something everyone wants. While not totally related to the blog post…
Episode-2389- Becoming a Modern Renaissance Man
We have discussed the concept of becoming a modern renaissance man aka a polymath a few times on feedback shows, but never as a stand alone subject. I took a…
Jenkins – messing with new exploits pt1
Jenkins notes for: https://blog.orange.tw/2019/01/hacking-jenkins-part-1-play-with-dynamic-routing.html http://blog.orange.tw/2019/02/abusing-meta-programming-for-unauthenticated-rce.html to download old jenkins WAR files http://updates.jenkins-ci.org/download/war/ 1st bug in the blog is a username enumeration bug in Jenkins weekly up to and including 2.145…
Jenkins – messing with new exploits pt1
Jenkins notes for: https://blog.orange.tw/2019/01/hacking-jenkins-part-1-play-with-dynamic-routing.html http://blog.orange.tw/2019/02/abusing-meta-programming-for-unauthenticated-rce.html to download old jenkins WAR files http://updates.jenkins-ci.org/download/war/ 1st bug in the blog is a username enumeration bug in Jenkins weekly up to and including 2.145…
I Need Questions for the Expert Council
Guys and Gals the Expert Council is truly a blessing and we just got three new amazing members. Right now though I need questions for the entire council. To see…
Kim and Trump, Together Again
Will the diplomatic push between the U.S. and North Korea produce more substantive agreement? Will South Korea get on board with the long-held goal of U.S. troops departing the peninsula?…
Kim and Trump, Together Again
Will the diplomatic push between the U.S. and North Korea produce more substantive agreement? Will South Korea get on board with the long-held goal of U.S. troops departing the peninsula?…
Episode-2388- Listener Feedback for 2-25-19
Today on The Survival Podcast I take your questions on gardening, generators, yard tools, cryptocurrency, real estate, guns, mead, cars, government stupidity and more. Make sure if you submit content…
The Sportsman 1000 Watt Generator is on Sale at Home Depot for 150 Bucks
Steven Harris alerted me to this and I have to say this little generator is both Spirko and Harris approved. The price is stupid low and this little generator has…
Welcome Jessica “Dixie” Mills to the Expert Council
I have asked Jessica Mills to join the counsel of TSP Experts and she has graciously accepted. Jessica has completed the US Triple Crown of Hiking. Translation the gal has…
The Dramatic Growth of Higher Ed Bureaucracy
What are all these university administrators doing, exactly? Cato senior fellow Todd Zywicki doesn't know, either. Hosted on Acast. See acast.com/privacy for more information.