Demos & Tutorials

Palo Alto Firewall Exploit

Two Palo Alto vulnerabilities, chained together, root access in minutes. Here is what that looks like in practice.

1 min

April 1, 2025

Overview

About this attack

Here is a demonstration of a recently released Palo Alto exploit to gain root level privileges. It leverages authentication bypass (CVE-2024-0012) and a privilege escalation vulnerabilities (CVE-2024-9474) to quickly compromise a vulnerable endpoint. Administrators should be aware of how easy it is for threat actors to leverage Zero-Days, and ensure security programs have robust patching and hardware upgrade processes in place to protect the organization’s perimeter.

Meet the Hacker

The person behind this demo

Get to know the Netrix expert who built this demo.

Alex Shi

Manager, Security Advisory

Alex Shi brings experience across IT operations, security program management and hands on security testing. At Netrix Global, he leads offensive security engagements designed to help organizations better understand and address security risk.

How fast can you patch a zero-day?

We will review your patching and hardware upgrade process, then point out where a threat actor would find room to work. You get a plan either way.