Information Security
@sec_nerd_en
415 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
415 subscribers
Information Security
We disclosed two sets of vulnerabilities this week. Live Networks LIVE555 streaming media RTSPServer code execution: http://cs.co/6015D730W

Linksys E Series routers: http://cs.co/6019D730S
54 views
Information Security
https://brage.bibsys.no/xmlui/bitstream/handle/11250/2451326/17303_FULLTEXT.pdf
51 views
Information Security
https://video.twimg.com/tweet_video/DqMg6NQXQAExeZK.mp4
43 views
Information Security
https://medium.com/@Sebdraven/apt-sidewinder-changes-theirs-ttps-to-install-their-backdoor-f92604a2739?_branch_match_id=470933300101167047
Medium
APT Sidewinder changes theirs TTPs to install their backdoor.
A new RTF (9001056791a03ec998f26805d462bc2ca336b2c3aeac2e210f73ff841dfe3eec) has just been discovered and it’s the same toolset that is…
51 views
Information Security
Linux Kernel < 4.4.0-83 / < 4.8.0-58 (Ubuntu 14.04 and 16.04) Local Privilege Escalation


https://cxsecurity.com/issue/WLB-2018010018
Cxsecurity
Linux Kernel < 4.4.0-83 / < 4.8.0-58 (Ubuntu 14.04 and 16.04) Local Privilege Escalation - CXSecurity.com
Andrey Konovalov has realised a new security note Linux Kernel < 4.4.0-83 / < 4.8.0-58 (Ubuntu 14.04 and 16.04) Local Privilege Escalation
312 views
Information Security
Forwarded from امنیت اطلاعات
Spiesexpose.pdf
1.3 MB
#ksa
#breach
#news

@sec_nerd
29 views
Information Security
https://hashcat.net/forum/thread-7717.html
53 views
Information Security
D-Link Routers - Plaintext Password


https://www.exploit-db.com/exploits/45677
Exploit Database
D-Link Routers - Plaintext Password
D-Link Routers - Plaintext Password. CVE-2018-10824 . webapps exploit for Hardware platform
311 views
Information Security
5 Practical Scenarios for XSS Attacks

https://pentest-tools.com/blog/xss-attacks-practical-scenarios/
54 views
Information Security
WebExec - an authenticated RCE vulnerability in Cisco WebEx client

https://blog.skullsecurity.org/2018/technical-rundown-of-webexec
50 views
Information Security
D-Link Routers - Directory Traversal

https://www.exploit-db.com/exploits/45678/
Exploit Database
D-Link Routers - Directory Traversal
D-Link Routers - Directory Traversal. CVE-2018-10822 . webapps exploit for Hardware platform
92 views
Information Security
D-Link Routers - Command Injection

https://www.exploit-db.com/exploits/45676/
Exploit Database
D-Link Routers - Command Injection
D-Link Routers - Command Injection. CVE-2018-10823 . webapps exploit for Hardware platform
104 views
Information Security
PE Sec Info – A Simple Tool to Manipulate ASLR and DEP Flags

https://osandamalith.com/2018/10/24/pe-sec-info-a-simple-tool-to-manipulate-aslr-and-dep-flags/
🔐Blog of Osanda
PE Sec Info – A Simple Tool to Manipulate ASLR and DEP Flags | 🔐Blog of Osanda
Recently I was interested in exploring the PE headers and writing simple programs to manipulate different headers. There are thousands of applications and code to be found on this topic. I started …
45 views
Information Security
This media is not supported in your browser
VIEW IN TELEGRAM
To see the future clearly, you have to look to the past. #MrRobot
46 views
Information Security
Capturing NetNTLM Hashes with Office [DOT] XML Documents

https://bohops.com/2018/08/04/capturing-netntlm-hashes-with-office-dot-xml-documents/
bohops
Capturing NetNTLM Hashes with Office [DOT] XML Documents
TL;DR An Office XML (.xml) document can call a remote XSL stylesheet over SMB.  If this occurs against an attacker controlled server, the net-NTLM authentication hash (challenge/response) of t…
44 views
Information Security
"Twitter for iPhone".
50 views
Information Security
https://www.theguardian.com/uk-news/2018/sep/21/british-spies-hacked-into-belgacom-on-ministers-orders-claims-report
the Guardian
British spies 'hacked into Belgian telecoms firm on ministers' orders'
Report by Belgian prosecutors believed to support allegations made by Edward Snowden
59 views
Information Security
Toasted Phish

https://blog.quickbreach.io/toasted-phish/
Quickbreach Blog
[Tiny Post] Toasted Phish
TL;DR @FoxIT made a rad tool, and I integrated it into Empire with one additional feature (pending pull request approval) This post started when I viewed a tweet by @FoxIT where they were showcasing their awesome work on creating a phishing Powershell script.…
51 views
Information Security
Responder and Layer 2 Pivots

https://ijustwannared.team/2017/05/27/responder-and-layer-2-pivots/
ijustwannaredteam
Responder and Layer 2 Pivots
Hey all, In the previous post we discussed using Responder with Snarf, this post will be doing the same but through a pivot.  To pivot in we’ll be using Simpletun and a layer 2 pivoting clien…
63 views
Information Security
Ten Process Injection Techniques: A Technical Survey of Common and Trending Process Injection Techniques

https://www.endgame.com/blog/technical-blog/ten-process-injection-techniques-technical-survey-common-and-trending-process
Elastic Blog
Ten process injection techniques: A technical survey of common and trending process injection techniques
Process injection is a widespread defense evasion technique employed often within malware and fileless adversary tradecraft, and entails running custom code within the address space of another process...
52 views
Information Security
Code injection on Windows using Python: a simple example

https://www.andreafortuna.org/programming/code-injection-on-windows-using-python-a-simple-example/
So Long, and Thanks for All the Fish
Code injection on Windows using Python: a simple example
Recently i had to perform some comparative tests on a couple of whitelisting solutions. One of the crucial step of the test was the proper functioning of memory monitoring feature, useful in case o…
54 views