<transcript><audio_40>underlying servers step in our chain another tool to escalate how much damage we can do once we have a foothold</transcript><transcript><audio_41>yeah exactly excellent what level of access were you using to get that remote remote code execution where you just a regular user and able to escalate that far so in some cases like alexander explained for certain</transcript><transcript><audio_42>just having um an account in sharepoint like a regular user account allows you to create your own site and then you can control the template or the aspx page in this case for sharepoint and then you can use that to get remote code execution on the underlying</transcript><transcript><audio_43>server in other cases like x wiki just a regular user as well other systems like for example atlassian confluence you were required to be administrator in order to edit a template so in those systems either you are an administrator so it's kind of</transcript><transcript><audio_44>more like an insider attack or maybe those systems are vulnerable as i explained before you find a cross-site scripting vulnerability and you can escalate from cross-site scripting to remote code execution by being able to fool the the victim in</transcript> underlying servers step in our chain another tool to escalate how much damage we can do once we have a foothold yeah exactly excellent what level of access were you using to get that remote remote code execution where you just a regular user and able to escalate that far so in some cases like alexander explained for certain just having um an account in sharepoint like a regular user account allows you to create your own site and then you can control the template or the aspx page in this case for sharepoint and then you can use that to get remote code execution on the underlying server in other cases like x wiki just a regular user as well other systems like for example atlassian confluence you were required to be administrator in order to edit a template so in those systems either you are an administrator so it's kind of more like an insider attack or maybe those systems are vulnerable as i explained before you find a cross-site scripting vulnerability and you can escalate from cross-site scripting to remote code execution by being able to fool the the victim in
{"source": "grass-yt-cc-by.-XOs_bnZjgg|shard_10044_53|create_multimodal_data.extract_yt_and_generate_transcripts.49|shard_10044|create_multimodal_data.generate_captions.49|shard_10044|create_multimodal_data.generate_captions.49", "params": {"id": "-XOs_bnZjgg", "channel_id": "UC6Om9kAkl32dWlDSNlDS9Iw", "duration": 1905, "view_count": 281, "age_limit": 0, "like_count": 4, "channel_follower_count": 319000, "license": "Creative Commons Attribution license (reuse allowed)", "uploader_id": "@DEFCONConference", "yt_tar_file": "/leonardo_work/EUHPC_E03_068/audio/fixed_download/grass-yt-cc-by//shard_10044/-XOs_bnZjgg.tar.gz"}}