Information Security
@sec_nerd_en
414 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
414 subscribers
Information Security
Revealing software-breakpoints from memory [linux version]

https://www.matteomalvica.com/blog/2018/12/02/revealing-software-breakpoints/
79 views
Information Security
SQLi Data Exfiltration via DNS


https://www.redsiege.com/blog/2018/11/sqli-data-exfiltration-via-dns/
97 views
Information Security
Three New DDE Obfuscation Methods


https://blog.reversinglabs.com/blog/cvs-dde-exploits-and-obfuscation
ReversingLabs
Three New DDE Obfuscation Methods
Cisco Talos and ReversingLabs discover a new spam campaign spreading the Adwind 3.0 remote access tool (RAT), ReversingLabs details three new DDE obfuscation methods.
109 views
Information Security
DCOMrade. Powershell script for enumerating vulnerable DCOM Applications

https://github.com/sud0woodo/DCOMrade
GitHub
GitHub - sud0woodo/DCOMrade: Powershell script for enumerating vulnerable DCOM Applications
Powershell script for enumerating vulnerable DCOM Applications - sud0woodo/DCOMrade
91 views
Information Security
Feature, not bug: DNSAdmin to DC compromise in one line

https://medium.com/@esnesenon/feature-not-bug-dnsadmin-to-dc-compromise-in-one-line-a0f779b8dc83
Medium
Feature, not bug: DNSAdmin to DC compromise in one line
Background
99 views
Information Security
Capturing Screenshots with PowerShell and .NET

https://www.pdq.com/blog/capturing-screenshots-with-powershell-and-net/
Pdq
How to take a screenshot with PowerShell | PDQ
Tired of using the same old tools to capture your screenshots? Discover how to take local and remote screenshots using PowerShell and impress all your techy friends.
84 views
Information Security
https://github.com/GhostManager/DomainCheck
GitHub
GitHub - GhostManager/DomainCheck: DomainCheck is designed to assist operators with monitoring changes related to their domain…
DomainCheck is designed to assist operators with monitoring changes related to their domain names. This includes negative changes in categorization, VirusTotal detections, and appearances on malwar...
100 views
Information Security
Backdooring PE-File (with ASLR)

https://hansesecure.de/backdooring-pe-file-with-aslr/
101 views
Information Security
Uberducky - Wireless USB Rubber Ducky built on Ubertooth

https://github.com/mikeryan/uberducky
GitHub
GitHub - mikeryan/uberducky: Wireless USB Rubber Ducky triggered via BLE (make your Ubertooth quack!)
Wireless USB Rubber Ducky triggered via BLE (make your Ubertooth quack!) - GitHub - mikeryan/uberducky: Wireless USB Rubber Ducky triggered via BLE (make your Ubertooth quack!)
119 views
Information Security
RCE in Hubspot with EL injection in HubL

https://www.betterhacker.com/2018/12/rce-in-hubspot-with-el-injection-in-hubl.html
Betterhacker
RCE in Hubspot with EL injection in HubL
This is the story of how I was able to get remote code execution on Hubspot 's servers by exploiting a vulnerability in  HubL expression la...
91 views
Information Security
pe_to_shellcode

https://github.com/hasherezade/pe_to_shellcode
GitHub
GitHub - hasherezade/pe_to_shellcode: Converts PE into a shellcode
Converts PE into a shellcode. Contribute to hasherezade/pe_to_shellcode development by creating an account on GitHub.
86 views
Information Security
A collection of infrastructure related tests for use with #Pester & #PowerShell.


https://github.com/EvotecIT/PesterInfrastructureTests
GitHub
EvotecIT/PesterInfrastructureTests
A collection of infrastructure related tests for use with Pester & PowerShell. - EvotecIT/PesterInfrastructureTests
85 views
Information Security
Demiguise - HTA encryption tool

https://github.com/nccgroup/demiguise
GitHub
GitHub - nccgroup/demiguise: HTA encryption tool for RedTeams
HTA encryption tool for RedTeams. Contribute to nccgroup/demiguise development by creating an account on GitHub.
82 views
Information Security
Forwarded from امنیت اطلاعات
#fun
#burpsuite
#java

@sec_nerd
4 views
Information Security
Exploitation: XML External Entity (XXE) Injection

https://depthsecurity.com/blog/exploitation-xml-external-entity-xxe-injection
87 views
Information Security
Blind Command Injection Testing with Burp Collaborator


https://hk.saowen.com/a/2d57cca70a0fc0b21138211a1cb83e8c51af27b3dff57c3dbb51343549a39626
112 views
Information Security
#fun
114 views
Information Security
https://twitter.com/SparkZheng/status/1072006617174953984
Twitter
Min(Spark) Zheng
Finally, iOS 12/macOS 10.14 XNU source code released...: https://t.co/Ig6PBDS0Sd
98 views
Information Security
83 views