Information Security
@sec_nerd_en
414 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
414 subscribers
Information Security
https://www.youtube.com/watch?v=JzJEUaSuAQM&feature=youtu.be
YouTube
Track 3 06 VBA Stomping Advanced Malware Techniques Carrie Roberts Kirk Sayre Harold Ogden
These are the videos from Derbycon 2018:
http://www.irongeek.com/i.php?page=videos/derbycon8/mainlist

Patreon:
https://www.patreon.com/irongeek
54 views
Information Security
Invisi-Shell

Hide your powershell script in plain sight! Invisi-Shell bypasses all of Powershell security features (ScriptBlock logging, Module logging, Transcription, AMSI) by hooking .Net assemblies. The hook is performed via CLR Profiler API.

https://github.com/OmerYa/Invisi-Shell
GitHub
GitHub - OmerYa/Invisi-Shell: Hide your Powershell script in plain sight. Bypass all Powershell security features
Hide your Powershell script in plain sight. Bypass all Powershell security features - OmerYa/Invisi-Shell
54 views
Information Security
https://www.twitch.tv/malwaretechblog
Twitch
MalwareTechBlog - Twitch
Cybersecurity, Tech, and General Discussions with Marcus Hutchins AKA MalwareTech. About Me: https://escapingtech.com/about/
51 views
Information Security
We disclosed two sets of vulnerabilities this week. Live Networks LIVE555 streaming media RTSPServer code execution: http://cs.co/6015D730W

Linksys E Series routers: http://cs.co/6019D730S
54 views
Information Security
https://brage.bibsys.no/xmlui/bitstream/handle/11250/2451326/17303_FULLTEXT.pdf
51 views
Information Security
https://video.twimg.com/tweet_video/DqMg6NQXQAExeZK.mp4
43 views
Information Security
https://medium.com/@Sebdraven/apt-sidewinder-changes-theirs-ttps-to-install-their-backdoor-f92604a2739?_branch_match_id=470933300101167047
Medium
APT Sidewinder changes theirs TTPs to install their backdoor.
A new RTF (9001056791a03ec998f26805d462bc2ca336b2c3aeac2e210f73ff841dfe3eec) has just been discovered and it’s the same toolset that is…
51 views
Information Security
Linux Kernel < 4.4.0-83 / < 4.8.0-58 (Ubuntu 14.04 and 16.04) Local Privilege Escalation


https://cxsecurity.com/issue/WLB-2018010018
Cxsecurity
Linux Kernel < 4.4.0-83 / < 4.8.0-58 (Ubuntu 14.04 and 16.04) Local Privilege Escalation - CXSecurity.com
Andrey Konovalov has realised a new security note Linux Kernel < 4.4.0-83 / < 4.8.0-58 (Ubuntu 14.04 and 16.04) Local Privilege Escalation
312 views
Information Security
Forwarded from امنیت اطلاعات
Spiesexpose.pdf
1.3 MB
#ksa
#breach
#news

@sec_nerd
29 views
Information Security
https://hashcat.net/forum/thread-7717.html
53 views
Information Security
D-Link Routers - Plaintext Password


https://www.exploit-db.com/exploits/45677
Exploit Database
D-Link Routers - Plaintext Password
D-Link Routers - Plaintext Password. CVE-2018-10824 . webapps exploit for Hardware platform
311 views
Information Security
5 Practical Scenarios for XSS Attacks

https://pentest-tools.com/blog/xss-attacks-practical-scenarios/
54 views
Information Security
WebExec - an authenticated RCE vulnerability in Cisco WebEx client

https://blog.skullsecurity.org/2018/technical-rundown-of-webexec
50 views
Information Security
D-Link Routers - Directory Traversal

https://www.exploit-db.com/exploits/45678/
Exploit Database
D-Link Routers - Directory Traversal
D-Link Routers - Directory Traversal. CVE-2018-10822 . webapps exploit for Hardware platform
92 views
Information Security
D-Link Routers - Command Injection

https://www.exploit-db.com/exploits/45676/
Exploit Database
D-Link Routers - Command Injection
D-Link Routers - Command Injection. CVE-2018-10823 . webapps exploit for Hardware platform
104 views
Information Security
PE Sec Info – A Simple Tool to Manipulate ASLR and DEP Flags

https://osandamalith.com/2018/10/24/pe-sec-info-a-simple-tool-to-manipulate-aslr-and-dep-flags/
🔐Blog of Osanda
PE Sec Info – A Simple Tool to Manipulate ASLR and DEP Flags | 🔐Blog of Osanda
Recently I was interested in exploring the PE headers and writing simple programs to manipulate different headers. There are thousands of applications and code to be found on this topic. I started …
45 views
Information Security
This media is not supported in your browser
VIEW IN TELEGRAM
To see the future clearly, you have to look to the past. #MrRobot
46 views
Information Security
Capturing NetNTLM Hashes with Office [DOT] XML Documents

https://bohops.com/2018/08/04/capturing-netntlm-hashes-with-office-dot-xml-documents/
bohops
Capturing NetNTLM Hashes with Office [DOT] XML Documents
TL;DR An Office XML (.xml) document can call a remote XSL stylesheet over SMB.  If this occurs against an attacker controlled server, the net-NTLM authentication hash (challenge/response) of t…
44 views
Information Security
"Twitter for iPhone".
50 views
Information Security
https://www.theguardian.com/uk-news/2018/sep/21/british-spies-hacked-into-belgacom-on-ministers-orders-claims-report
the Guardian
British spies 'hacked into Belgian telecoms firm on ministers' orders'
Report by Belgian prosecutors believed to support allegations made by Edward Snowden
59 views
Information Security
Toasted Phish

https://blog.quickbreach.io/toasted-phish/
Quickbreach Blog
[Tiny Post] Toasted Phish
TL;DR @FoxIT made a rad tool, and I integrated it into Empire with one additional feature (pending pull request approval) This post started when I viewed a tweet by @FoxIT where they were showcasing their awesome work on creating a phishing Powershell script.…
51 views