RCE·Vulnerability Research
·
RCE·Privilege Escalation·Default Credentials·Enumeration·Misconfiguration
Who Watches the Watchman? Hacking a SIEM Server to SYSTEM
A penetration test writeup demonstrating how default credentials on a SIEM appliance led to configuration file disclosure, MySQL root access, UDF injection, and full host compromise as NT AUTHORITY\SYSTEM.