raptor, 6 months ago to Mitel

Remote code execution and elevation of local privileges in #Mitel Unify #OpenStage and #OpenScape VoIP phones

https://www.pentagrid.ch/en/blog/rce-and-local-root-in-openstage-and-openscape-phones/

I especially like attack number 5 “OpenScape – Secure Shell Privilege escalation to root via SetUID programs”

• Manipulate the framebuffer, so a screenshot results in an executable file.
• Overwrite a system file with that screenshot tool.
• Add a script to that gets executed with root privilege while booting.

https://github.com/pentagridsec/openstage-exploit-chain/blob/main/openstage-fakedls-server.py

pentagrid, 6 months ago to infosec

RCE and LPE in a wide range of Mitel Unify #OpenStage and #OpenScape VoIP phones with default config: https://www.pentagrid.ch/en/blog/rce-and-local-root-in-openstage-and-openscape-phones/ #itsecurity #infosec #pentesting #voip #unify

coffee_nebula, 7 months ago to random

Today's the day: I'm presenting about Soundscape, Openscape, and the general class of app at the first AT confrence held by the New York Public Library. Nervus but incredibly excited. I'll post a link here in a bit. #ATNYC #soundscape #openscape

JesseF8693, 11 months ago (edited 11 months ago) to iOS

For those of you who have been itching to try out #OpenScape for #iOS, more beta slots have opened up.
You can join the #Testflight here.
https://testflight.apple.com/join/tjZ5iAPo
#Apple #Blind #A11y #Accessibility #Development #Beta

coffee_nebula, 11 months ago to random

Heck yeah. Days work paying off - I just got Openscape to successfully import Soundscape’s markers and routes! #openscape #soundscape #indidev

coffee_nebula, 1 year ago to random

Just submitted the first build of #openscape, a community revival of #soundscape, a spacial audio navigation app to test flight. Then… Forgot to send this post… Oops. Anyhow I got approval.
That’s the ‘app’ part down… Now I guess the rest is development. #iosdev