Information Security
@sec_nerd_en
414 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
414 subscribers
Information Security
SleuthQL Description

SleuthQL is a python3 script to identify parameters and values that contain SQL-like syntax. Once identified, SleuthQL will then insert SQLMap identifiers (*) into each parameter where the SQL-esque variables were identified.


https://github.com/RhinoSecurityLabs/SleuthQL

https://youtu.be/Sp3FevOAmCs
GitHub
GitHub - RhinoSecurityLabs/SleuthQL: Python3 Burp History parsing tool to discover potential SQL injection points. To be used in…
Python3 Burp History parsing tool to discover potential SQL injection points. To be used in tandem with SQLmap. - RhinoSecurityLabs/SleuthQL
62 views
Information Security
OMG. Quit vim button on new MacBook 🤣
269 views
Information Security
RID HIJACKING: Maintaining Access on Windows Machines #DerbyCon

https://github.com/r4wd3r/RID-Hijacking/blob/master/slides/derbycon-8.0/RID_HIJACKING_DERBYCON_2018.pdf
GitHub
r4wd3r/RID-Hijacking
Windows RID Hijacking persistence technique. Contribute to r4wd3r/RID-Hijacking development by creating an account on GitHub.
48 views
Information Security
Building Your Own Dedicated IPSEC VPN in Less Than 10 Minutes

https://danielmiessler.com/blog/building-your-own-dedicated-ipsec-vpn-in-less-than-10-minutes/
54 views
Information Security
How to bypass AMSI and execute ANY malicious Powershell code

https://0x00-0x00.github.io/research/2018/10/28/How-to-bypass-AMSI-and-Execute-ANY-malicious-powershell-code.html
zc00l blog
How to bypass AMSI and execute ANY malicious Powershell code
Hello again. In my previous posts I detailed how to manually get SYSTEM shell from Local Administrators users. That’s interesting but very late game during a penetration assessment as it is presumed that you already owned the target machine.
56 views
Information Security
Using Empire with a Reverse Proxy

https://glanfield.co.uk/using-empire-with-a-reverse-proxy/
Liam Glanfield
Using Empire with a Reverse Proxy
Here is an example of how I use Empire, in this example I won't be running through setting up HTTPS but will only document the HTTP approach. I am using Ubuntu 16.04 LTS and cloning Empire from the master  branch. Installing and Configuring LXC I prefer to…
62 views
Information Security
internet of shit
71 views
Information Security
This media is not supported in your browser
VIEW IN TELEGRAM
So, what's your password?


#Cybersecurity #cyber #hack #hacking #Hacked #hacker #informationsecurity #infosec #informationtechnology #infowars #socialengineering #cybersecurityawareness #cyberawareness #digitalsecurity #password
67 views
Information Security
Lateral Movement using WSHController/WSHRemote objects (IWSHController and IWSHRemote interfaces)

http://www.hexacorn.com/blog/2018/08/18/lateral-movement-using-wshcontroller-wshremote-objects-iwshcontroller-and-iwshremote-interfaces/
55 views
Information Security
56 views
Information Security
https://saelo.github.io/presentations/blackhat_us_18_attacking_client_side_jit_compilers.pdf
55 views
Information Security
https://blogs.securiteam.com/index.php/archives/3783
55 views
Information Security
https://blogs.securiteam.com/index.php/archives/3786
58 views
Information Security
https://www.zdnet.com/article/google-launches-recaptcha-v3-that-detects-bad-traffic-without-user-interaction/
ZDNET
Google launches reCAPTCHA v3 that detects bad traffic without user interaction
reCAPTCHA v3 assigns incoming site visitors a risk score and lets webmasters takes custom actions based on this score.
62 views
Information Security
#fun
51 views
Information Security
A website that helps to understand even the wildest C/C++ declarations :) https://cdecl.org
59 views
Information Security
new phrack paper

http://phrack.org/papers/viewer_discretion_advised.html
53 views
Information Security
hashcat-brain - A Docker container for running a hashcat brain server

https://hub.docker.com/r/singelet/hashcat-brain/
52 views
Information Security
63 views
Information Security
We just updated our fork of MSF to the latest version. Meterpreter with DNS tunnel transport. Still not integrated into main branch of Rapid7.... so only fork


https://github.com/defcon-russia/metasploit-framework
https://github.com/defcon-russia/metasploit-payloads
https://asintsov.blogspot.com/2017/12/data-exfiltration-in-metasploit.html
GitHub
GitHub - defcon-russia/metasploit-framework: Metasploit Framework
Metasploit Framework. Contribute to defcon-russia/metasploit-framework development by creating an account on GitHub.
57 views
Information Security
a Constrained Language Mode implementation of Base64 that can be used in WMI Implant.

https://github.com/FortyNorthSecurity/CLM-Base64/blob/master/CLM-Base64.ps1
GitHub
CLM-Base64/CLM-Base64.ps1 at master · FortyNorthSecurity/CLM-Base64
This project provides Base64 encoding and decoding functionality to PowerShell within Constrained Language Mode - CLM-Base64/CLM-Base64.ps1 at master · FortyNorthSecurity/CLM-Base64
55 views