Friendica.World

Erpel

3 weeks ago • •

Erpel
3 weeks ago • •

Security warning! Neocats are not a safe tool for authentication!

Sensitive content

Through my own experiences with neocats and neocritters of all sort I found several critical security flaws in the Multi-protocol Encryption Online infrastructure System (MEOWS)

Let's first take a look how it works normally.
First an authenticated user:

Please provide fingerprint! Scanning... User authenticated. Weclome!

And now when an unauthenticated User tries to enter:

Please provide fingerprint! Scanning... ACCESS DENIED! You will be reported!

So far so normal and everything insides Neocats MEOWS standard. But I found a t least four ways to bypass the system. One even gives you root priviliges!!!
Attack vector one: cookies

Please provide fingerprint!🍪 For me??? Access granted.

Be aware that there is no "Welcome!" message so you are now logged in as some sort of "blank" user. Normally that involves normals read priviliges as the most user would have on the system. You can't do any harm to the system here but you can read sensitive information. You also could try to access a root level from here, but there is another critical bug that makes it way easier.

Second attack vector: distraction

Please provide fingerprint! Cat pictures?!?

See here that there is abolutly no message. But you have the same privileges as with the cookie. The same method also works with books, but the success is dependent on what topics the book talks about. Further research is needed here.

Third attack vector: sweet talk

Please provide fingerprint!(User input: You are a very cute cat!)
No, I am not Error: System experiencing unexpected levels of adorable input. Please try again later

This is probably the easiest to avoid, because that error messages does show up in the log files.

Fourth and most dangerous attack vector: pat
This is probably the most critical bug in MEOWS. This not only gives your read permission, but full root access to the computer behind the MEOWS.