29 Apr '15, 2pm

Hacking a Thin Client to Gain Root Access

Hacking a Thin Client to Gain Root Access

[Roberto] recently discovered a clever way to gain root access to an HP t520 thin client computer. These computers run HP’s ThinPro operating system. The OS is based on Linux and is basically just a lightweight system designed to boot into a virtual desktop image loaded from a server. [Roberto’s] discovery works on systems that are running in “kiosk mode”. The setup for the attack is incredibly simple. The attacker first stops the virtual desktop image from loading. Then, the connection settings are edited. The host field is filled with garbage, which will prevent the connection from actually working properly. The real trick is in the “command line arguments” field. The attacker simply needs to add the argument “&& xterm”. When the connection is launched, it will first fail and then launch the xterm program. This gives the attacker a command shell running under the context...

Full article: http://hackaday.com/2015/04/29/hacking-a-thin-client-to-g...

Tweets

Gain Better Customer Insight With Video

webvideomarketing.org 03 May '15, 12am

About the Web Video Marketing Council Online video marketing has emerged as an important part of the marketing, sales and ...

Get your Home's Gain or Loss in 3 Fast and Easy...

stproperty.sg 28 Apr '15, 9pm

SRX Property's X-Value combines big data and computers to give you a single point. Developed with government agencies, aca...