Information Security
@sec_nerd_en
413 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
413 subscribers
Information Security
https://itm4n.github.io/cve-2020-0787-windows-bits-eop/
itm4n’s blog
CVE-2020-0787 - Windows BITS - An EoP Bug Hidden in an Undocumented RPC Function
This post is about an arbitrary file move vulnerability I found in the Background Intelligent Transfer Service. This is yet another example of a privileged file operation abuse in Windows 10. There is nothing really new but the bug itself is quite interesting…
97 views
Information Security
https://github.com/knightmare2600/SMBGhost
GitHub
knightmare2600/SMBGhost
Scanner for CVE-2020-0796 - SMBv3 RCE. Contribute to knightmare2600/SMBGhost development by creating an account on GitHub.
109 views
Information Security
https://www.synacktiv.com/posts/exploit/im-smbghost-daba-dee-daba-da.html
89 views
Information Security
Account takeover

https://t.co/YCK3GB5sJk
https://t.co/eRlkj3n6w2
https://t.co/tuQ3xEpIYc
https://t.co/vApKQSS7Ru
https://t.co/7l7wxb9btx
https://t.co/ETHFuyLd1v
https://t.co/z4FmmyO8xy
https://t.co/5EYYOudexQ
https://t.co/KBYLYDvon3
https://t.co/uim3l7JKir

#bugbounty
Medium
Got *Bounty* with Account takeover (ATO ) Unicode-Case Mapping Collision !
Hey hunters ! Recently I discovered a Unicode-Case Mapping Collision vulnerability on a private program.
107 views
Information Security
https://www.bleepingcomputer.com/news/security/new-coronavirus-ransomware-acts-as-cover-for-kpot-infostealer/
BleepingComputer
New CoronaVirus Ransomware Acts as Cover for Kpot Infostealer
A new ransomware called CoronaVirus is has been distributed through a fake web site pretending to promote the system optimization software and utilities from WiseCleaner.
96 views
Information Security
https://github.com/ioncodes/SMBGhost
GitHub
GitHub - ioncodes/SMBGhost: Scanner for CVE-2020-0796 - A SMBv3.1.1 + SMB compression RCE
Scanner for CVE-2020-0796 - A SMBv3.1.1 + SMB compression RCE - GitHub - ioncodes/SMBGhost: Scanner for CVE-2020-0796 - A SMBv3.1.1 + SMB compression RCE
104 views
Information Security
Top #OSINT tools I used last project:

SEcraper - scrape many search engines at once vs query or keyword
https://github.com/zerobyte-id/SEcraper

Spiderfoot
https://spiderfoot.net

http://OSINT.link

Cheat Sheet
https://inteltechniques.com/JE/OSINT_Packet_2019.pdf


Quick Cloudflare bypass
http://crimeflare.org:82/cfs.html
GitHub
GitHub - zerobyte-id/SEcraper: Search engine scraper tool with BASH script.
Search engine scraper tool with BASH script. Contribute to zerobyte-id/SEcraper development by creating an account on GitHub.
115 views
Information Security
https://medium.com/@testbnull/the-art-of-deserialization-gadget-hunting-part-3-how-i-found-cve-2020-2555-by-known-tools-67819b29cb63
Medium
The Art of Deserialization Gadget Hunting [part 3] (How I found CVE-2020–2555 by known tools!)
Vậy là ngày 05/03 vừa rồi, ZDI đã publish bài phân tích chi tiết về CVE-2020–2555…
117 views
Information Security
SSRF's to bypass WAF
http://⑯⑨。②⑤④。⑯⑨｡②⑤④/
http://⓪ⓧⓐ⑨｡⓪ⓧⓕⓔ｡⓪ⓧⓐ⑨｡⓪ⓧⓕⓔ:80/
http://⓪ⓧⓐ⑨ⓕⓔⓐ⑨ⓕⓔ:80/
http://②⑧⑤②⓪③⑨①⑥⑥:80/
http://④②⑤｡⑤①⓪｡④②⑤｡⑤①⓪:80/
http://⓪②⑤①。⓪③⑦⑥。⓪②⑤①。⓪③⑦⑥
125 views
Information Security
#bugbountytip The Request.queryString error in .NET avoids you to get XSS? Try the %uff1cscript%uff1ealert(‘XSS’);%uff1c/script%uff1e payload ;)
117 views
Information Security
https://github.com/solemnwarning/rehex/releases/tag/0.1.0
GitHub
solemnwarning/rehex
Reverse Engineers' Hex Editor. Contribute to solemnwarning/rehex development by creating an account on GitHub.
115 views
Information Security
https://lab.wallarm.com/graphql-batching-attack/amp/?__twitter_impression=true
Wallarm Blog
GraphQL Batching Attack - Wallarm Blog
There is a new attack surface when the app tech stack includes GraphQL. It's Batched Attacks on GraphQL APIs. How can these apps be protected? Read more to find out.
115 views
Information Security
https://honoki.net/2020/02/18/http-request-smuggling-5-practical-tips/
109 views
Information Security
https://medium.com/cognite/pwn2own-or-not2pwn-part-2-16347b2047cf
Medium
Pwn2Own or Not2Pwn, Part 2
By Fredrik Østrem, Emil Sandstø and Cim Stordal
105 views
Information Security
5 Subdomain Takeover #ProTips.pdf:
https://github.com/blaCCkHatHacEEkr/PENTESTING-BIBLE/blob/master/7-part-100-article/new_articles/5%20Subdomain%20Takeover%20%23ProTips.pdf
Finding the Balance Between Speed & Accuracy During an Internet-wide Port Scanning.pdf:
https://github.com/blaCCkHatHacEEkr/PENTESTING-BIBLE/blob/master/2-part-100-article/Finding%20the%20Balance%20Between%20Speed%20&%20Accuracy%20During%20an%20Internet-wide%20Port%20Scanning.pdf
Phishing With a Rogue Wi-Fi Access Point.pdf
https://github.com/blaCCkHatHacEEkr/PENTESTING-BIBLE/blob/master/7-part-100-article/new_articles/Phishing%20With%20a%20Rogue%20Wi-Fi%20Access%20Point.pdf
#bugbountytip #Hacking #OSINT #Pentest
GitHub
blaCCkHatHacEEkr/PENTESTING-BIBLE
This repository was created and developed by Ammar Amer @cry__pto Only. Updates to this repository will continue to arrive until the number of links reaches 10000 links & 10000 pdf files .L...
107 views
Information Security
https://github.com/preempt/ntlm-scanner
GitHub
GitHub - preempt/ntlm-scanner: A simple python tool based on Impacket that tests servers for various known NTLM vulnerabilities
A simple python tool based on Impacket that tests servers for various known NTLM vulnerabilities - preempt/ntlm-scanner
96 views
Information Security
https://twitter.com/Hacker_Sujeet/status/1238152947055218688?s=20
Twitter
Sujeet Singh
Regular expression to find URLs within a string 1.This is the 1 I use Works for me (http|ftp|https)://([\w_-]+(?:(?:\.[\w_-]+)+))([\w.,@?^=%&:/~+#-]*[\w@?^=%&/~+#-])? 2. "(?:(?:https?|ftp):\\/\\/)?[\\w/\\-?=%.]+\\.[\\w/\\-?=%.]+" 3.((http|ftp|https):\/\/)?(([\w.…
118 views
Information Security
A good way to bypass the Akamai WAF by exploiting a redirect-based XSS is with the following payload:

javascript:new%20Function`al\ert\`1\``;

You can also obfuscate it using HTML entities

#BugBounty
116 views
Information Security
Social Distancing Survival Guide

Learn...

Reverse Engineering:
https://github.com/tylerha97/awesome-reversing

Reverse Engineering Malware:
https://malwareunicorn.org/workshops/re101.html#0
https://malwareunicorn.org/workshops/re102.html#0

Web Hacking:
https://portswigger.net/web-security
https://github.com/infoslack/awesome-web-hacking/blob/master/README.md

Exploit Development:
https://github.com/FabioBaroni/awesome-exploit-development/blob/master/README.md
GitHub
GitHub - tylerha97/awesome-reversing: A curated list of awesome reversing resources
A curated list of awesome reversing resources. Contribute to tylerha97/awesome-reversing development by creating an account on GitHub.
123 views
Information Security
APT Lifecycle:
https://azeria-labs.com/advanced-persistent-threat/


Arm Assembly:
https://azeria-labs.com/writing-arm-assembly-part-1/

Arm32 Shellcoding:
https://azeria-labs.com/writing-arm-shellcode/
https://azeria-labs.com/tcp-reverse-shell-in-assembly-arm-32-bit/

Heap Exploitaiton:
https://azeria-labs.com/heap-exploit-development-part-1/
https://azeria-labs.com/heap-overflows-and-the-ios-kernel-heap/
https://azeria-labs.com/grooming-the-ios-kernel-heap/
Azeria-Labs
Advanced Persistent Threat
109 viewsedited  
Information Security
Pentesting IoT devices

Part 1: https://blog.mindedsecurity.com/2018/09/pentesting-iot-devices-part-1-static.html

Part 2: https://blog.mindedsecurity.com/2018/10/pentesting-iot-devices-part-2-dynamic.html

Books and resources: https://github.com/V33RU/IoTSecurity101/blob/master/README.md
Mindedsecurity
Pentesting IoT devices (Part 1: Static Analysis)
Introduction Intelligent dishwashers, smart factories, connected sensors and Wi-Fi fridges, these are only a few examples of everyday ...
106 views