Resources

People often ask me "How did you learn how to hack?" The answer: by reading. This page is a collection of the blog posts and other articles that I have accumulated over the years of my journey. Enjoy!

Synology DSM AppArmor synosearchagent misconfiguration vulnerability- 481

TalosPosted 4 Years Ago
  • Synology DiskStation Manager is the Linux-based operating system for every Synology NAS. AppArmor is a Linux kernel security module that allows the system to restrict the capabilities on a per-profile basis.
  • The vulnerability is a simple misconfiguration of AppArmor. The profile for the synosearchagent profile did not restrict access to loading kernel modules. Now, by using the insmod command it is trivial to run code inside of the kernel.