Information Security
@sec_nerd_en
415 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
415 subscribers
Information Security
Top 10 Web Hacking Techniques of 2017

https://portswigger.net/blog/top-10-web-hacking-techniques-of-2017
PortSwigger Research
Top 10 Web Hacking Techniques of 2017
The verdict is in! Following 37 nominations whittled down to a shortlist of 15 by a community vote, our panel of experts has conferred and selected the top 10 web hacking techniques of 2017 (and 2016)
38 views
Information Security
windows
35 views
Information Security
When you’ve slept for 2 hours and think that coffee will help.
43 views
Information Security
Extending Burp to Find Struts and XXE Vulnerabilities

https://www.irongeek.com/i.php?page=videos/derbycon8/stable-21-extending-burp-to-find-struts-and-xxe-vulnerabilities-chris-elgee
Irongeek
Extending Burp to Find Struts and XXE Vulnerabilities - Chris Elgee Derbycon 2018 (Hacking Illustrated Series InfoSec Tutorial…
Irongeek's Information Security site with tutorials, articles and other information.
45 views
Information Security
#fun
43 views
Information Security
#fun
49 views
Information Security
Windows oneliners to download remote payload and execute arbitrary code


https://arno0x0x.wordpress.com/2017/11/20/windows-oneliners-to-download-remote-payload-and-execute-arbitrary-code/
arno0x0x
Windows oneliners to download remote payload and execute arbitrary code
In the wake of the recent buzz and trend in using DDE for executing arbitrary command lines and eventually compromising a system, I asked myself « what are the coolest command lines an a…
44 views
Information Security
https://www.bis.cz/aktuality/koudelka-bis-prispela-k-odkryti-a-vypnuti-hackerskych-serveru-hizballahu-017f44eb.html
38 views
Information Security
https://www.zdnet.com/article/around-62-of-all-internet-sites-will-run-an-unsupported-php-version-in-10-weeks/
ZDNET
Around 62 percent of all Internet sites will run an unsupported PHP version in 10 weeks
The highly popular PHP 5.x branch will stop receiving security updates at the end of the year.
37 views
Information Security
https://medium.com/walmartlabs/vba-stomping-advanced-maldoc-techniques-612c484ab278
Medium
VBA Stomping — Advanced Maldoc Techniques
Authors: Kirk Sayre (@bigmacjpg), Harold Ogden (@haroldogden) and Carrie Roberts (@OrOneEqualsOne)
38 views
Information Security
http://www.itv.com/news/2018-10-14/julian-assanges-communications-partly-restored-by-ecuadorian-government/
ITV News
Julian Assange’s communications partly restored by Ecuadorian government
The Ecuadorian government has decided to partly restore communications for WikiLeaks founder Julian Assange.They were cut in March, denying him access to the internet or phones and limiting visitors to members of his legal team.He has been living inside Ecuador’s…
41 views
Information Security
https://motherboard.vice.com/en_us/article/8xvzyp/hacking-team-investor-saudi-arabia
Vice
Hacking Team Is Still Alive Thanks to a Mysterious Investor From Saudi Arabia
An investor from Saudi Arabia is apparently behind a company that bought a stake in the controversial spyware vendor.
43 views
Information Security
https://www.endgame.com/blog/technical-blog/kernel-mode-threats-practical-defenses-part-2
Elastic Blog
Introducing Elastic Endpoint Security
42 views
Information Security
https://pdfs.semanticscholar.org/37ea/54247bb3bedd356f5171ee5f8e1a83662dfc.pdf
50 views
Information Security
Auto-Root-Exploit

https://github.com/nilotpalbiswas/Auto-Root-Exploit


#privesc
#linux


@sec_nerd
309 views
Information Security
Packet capture on Windows without drivers

https://www.nospaceships.com/2018/09/19/packet-capture-on-windows-without-drivers.html
NoSpaceships Ltd
Packet capture on Windows without drivers
Introduction
56 views
Information Security
exploitation notes for CVE-2018-17456 (.gitmodules RCE)

CVE-2018-17456

https://gist.github.com/joernchen/38dd6400199a542bc9660ea563dcf2b6
Gist
CVE-2018-17456
CVE-2018-17456. GitHub Gist: instantly share code, notes, and snippets.
45 views
Information Security
47 views
Information Security
Abusing the COM Registry Structure: CLSID, LocalServer32, & InprocServer32

https://bohops.com/2018/06/28/abusing-com-registry-structure-clsid-localserver32-inprocserver32/
46 views
Information Security
Abusing the COM Registry Structure (Part 2): Hijacking & Loading Techniques

https://bohops.com/2018/08/18/abusing-the-com-registry-structure-part-2-loading-techniques-for-evasion-and-persistence/
49 views
Information Security
Undetectable C# & C++ Reverse Shells

https://medium.com/@Bank_Security/undetectable-c-c-reverse-shells-fab4c0ec4f15
Medium
Undetectable C# & C++ Reverse Shells
Technical overview of different way to spawn a reverse shell on a victim machine
64 views