DEF CON 33 - Silent Leaks: Harvesting Secrets from Shared Linux Environments - Cernica Ionut Cosmin
Source: YouTube · DEFCONConference · published Oct 10, 2025 · 19:59
The presentation demonstrates how shared Linux environments have critical security vulnerabilities that allow unprivileged users to harvest secrets like database credentials and passwords 1:02.
Key Takeaways:
• The ps auxw command in Linux leaks sensitive process arguments due to the OS's design for transparency, allowing attackers to capture credentials in shared environments 2:06
• Web hosting providers expose user passwords and database credentials during routine operations like WordPress installations and user creation 4:53
• Common isolation systems like KJFS and chroot can be escaped using techniques like finding binaries executing outside the jail environment or exploiting undocumented commands 8:41
• Temporary files created during system operations often have world-readable permissions, allowing attackers to capture database backups and installation logs containing sensitive information 13:07
• During database restoration operations, MySQL root passwords are exposed in process arguments that can be captured by monitoring the ps command output 15:32
Security in multi-user environments requires challenging assumptions about trusted tools, as even standard Linux commands can create devastating leaks 19:08.
Sources:
- 1:02 Introduction to multi-user Linux environments and security risks
- 2:06 Process argument leaks via the
pscommand - 4:53 Examples of leaked credentials in hosting providers
- [8:41](https://www.youtube
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
It is my absolute pleasure to introduce Yonut Chenika who will be talking about silent leaks harvesting secrets from shared Linux environments. Take it away. >> Thank you. So welcome to my presentation silent leaks harvesting secrets from share Linux environments. My name is Yonus Chernika. So uh for today um so I'm a okay uh I was thinking I did an update but it's okay. Uh I'm application security engineer for UiPath and uh also I'm an AI security researcher back bounty hunter former CTF player and former entrepreneur. For today I'll have a short introduction about multi-user in Linux environments. how the process arguments are leaked through commands uh in Linux. Then I'll speak about jailing and isolation systems temporary fire leaks and a demo and closing remarks the conclusion. So mul…