Information Security
@sec_nerd_en
415 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
415 subscribers
Information Security
https://github.com/projectzeroindia/CVE-2019-11510


Exploit for Arbitrary File Read on Pulse Secure SSL VPN (CVE-2019-11510)
GitHub
GitHub - projectzeroindia/CVE-2019-11510: Exploit for Arbitrary File Read on Pulse Secure SSL VPN (CVE-2019-11510)
Exploit for Arbitrary File Read on Pulse Secure SSL VPN (CVE-2019-11510) - projectzeroindia/CVE-2019-11510
76 views
Information Security
Windows oneliners to download remote payload and execute arbitrary code

https://arno0x0x.wordpress.com/2017/11/20/windows-oneliners-to-download-remote-payload-and-execute-arbitrary-code/amp/
arno0x0x
Windows oneliners to download remote payload and execute arbitrary code
In the wake of the recent buzz and trend in using DDE for executing arbitrary command lines and eventually compromising a system, I asked myself « what are the coolest command lines an a…
98 views
Information Security
https://blog.hunniccyber.com/ektron-cms-remote-code-execution-xslt-transform-injection-java/
Hunnic Cyber Blog
XSLT Injection Basics - Saxon
Recently I was tasked with doing a web app test for a large organization. The application itself was not of great interest given that it…
120 views
Information Security
Cloudflare #XSS #Bypass

<img src onerror=%26emsp;prompt`${document.domain}`>
278 views
Information Security
https://github.com/mzfr/gtfo

Tool to search exploitable binaries/exe on windows and linux
264 views
Information Security
https://blog.netspi.com/10-evil-user-tricks-for-bypassing-anti-virus/
NetSPI
10 Evil User Tricks for Bypassing Anti-Virus
Many anti-virus solutions are deployed with weak configurations that provide end-users with the ability to quickly disable or work around the product if they wish. As a result, even users without super hacker skills can run malicious executables (intentionally…
277 views
Information Security
CVE-2019-12527: Code Execution on Squid Proxy Through a Buffer Overflow

https://www.zerodayinitiative.com/blog/2019/8/22/cve-2019-12527-code-execution-on-squid-proxy-through-a-heap-buffer-overflow
Zero Day Initiative
Zero Day Initiative — CVE-2019-12527: Code Execution on Squid Proxy Through a Buffer Overflow
In this excerpt of a Trend Micro Vulnerability Research Service report, Saran Neti and Sivathmican Sivakumaran of the Trend Micro Research Team detail a recent buffer overflow vulnerability in the Squid web proxy. A remote, unauthenticated attacker could…
287 views
Information Security
https://github.com/JoelGMSec/AutoRDPwn
GitHub
GitHub - JoelGMSec/AutoRDPwn: The Shadow Attack Framework
The Shadow Attack Framework. Contribute to JoelGMSec/AutoRDPwn development by creating an account on GitHub.
306 views
Information Security
Hashcatch: A script to capture handshakes of nearby wifi networks as you walk
down the street.


https://github.com/staz0t/hashcatch
GitHub
GitHub - staz0t/hashcatch: Capture handshakes of nearby WiFi networks automatically
Capture handshakes of nearby WiFi networks automatically - staz0t/hashcatch
122 views
Information Security
WMImplant is a PowerShell based tool that leverages WMI to both perform actions against targeted machines, but also as the C2 channel for issuing commands and receiving results. WMImplant will likely require local administrator permissions on the targeted machine.


https://github.com/FortyNorthSecurity/WMImplant
GitHub
GitHub - RedSiege/WMImplant: This is a PowerShell based tool that is designed to act like a RAT. Its interface is that of a shell…
This is a PowerShell based tool that is designed to act like a RAT. Its interface is that of a shell where any command that is supported is translated into a WMI-equivalent for use on a network/rem...
94 views
Information Security
Escalating privileges with ACLs in Active Directory

https://blog.fox-it.com/2018/04/26/escalating-privileges-with-acls-in-active-directory/
Fox-IT International blog
Escalating privileges with ACLs in Active Directory
Researched and written by Rindert Kramer and Dirk-jan Mollema Introduction During internal penetration tests, it happens quite often that we manage to obtain Domain Administrative access within a f…
103 views
Information Security
https://i.blackhat.com/USA-19/Wednesday/us-19-Tsai-Infiltrating-Corporate-Intranet-Like-NSA.pdf
108 views
Information Security
https://www.youtube.com/watch?v=v7JUMb70ON4
YouTube
Pulse Secure SSL VPN PreAuth Remote Code Execution with Compromising All the Connected VPN Clients
It chained the CVE-2019-11510 and CVE-2019-11539 to a preAuth RCE! We also demonstrate how to leverage the logon script feature to compromise back all the connected VPN clients!

More details can be found from the slides "Infiltrating Corporate Intranet Like…
115 views
Information Security
Testing Race Conditions in Web Applications

https://securingtomorrow.mcafee.com/business/testing-race-conditions-web-applications/
104 views
Information Security
PoC for CVE-2018-1792 IBM MQ privilege escalation

https://github.com/mirchr/security-research/blob/master/vulnerabilities/IBM/CVE-2018-1792.sh
GitHub
mirchr/security-research
Security Research. Contribute to mirchr/security-research development by creating an account on GitHub.
102 views
Information Security
Datajack Proxy

Datajack Proxy a tool to intercept non-HTTP traffic between a native application and a server.


https://github.com/nccgroup/DatajackProxy
GitHub
GitHub - nccgroup/DatajackProxy: Datajack Proxy allows you to intercept TLS traffic in native x86 applications across platforms
Datajack Proxy allows you to intercept TLS traffic in native x86 applications across platforms - nccgroup/DatajackProxy
110 views
Information Security
Vulnado - an intentionally vulnerable Java application

https://github.com/ScaleSec/vulnado
GitHub
GitHub - ScaleSec/vulnado: Purposely vulnerable Java application to help lead secure coding workshops
Purposely vulnerable Java application to help lead secure coding workshops - ScaleSec/vulnado
102 views
Information Security
OSINT Resources for 2019

https://medium.com/@micallst/osint-resources-for-2019-b15d55187c3f
Medium
OSINT Resources for 2019
Let’s take a look at some essential OSINT resources plus recent developments in the areas of data, tooling, content and community.
106 views
Information Security
Got Meterpreter? PivotPowPY!


https://rsolutions.com/2017/02/23/got-meterpreter-pivotpowpy/
98 views
Information Security
Converting an EXE to a DLL

https://osandamalith.com/2019/08/26/converting-an-exe-to-a-dll/
🔐Blog of Osanda
Converting an EXE to a DLL | 🔐Blog of Osanda
I’ve been doing some crazy experiments on running an EXE as a DLL. Here are some parts of my research. Case #1 Let’s take a simple example like a MessageBox. [crayon-68f15dcfa8509788512837/] After …
112 views
Information Security
https://defuse.ca/race-conditions-in-web-applications.htm

https://medium.com/@ciph3r7r0ll/race-condition-bug-in-web-app-a-use-case-21fd4df71f0e

https://github.com/aaronhnatiw/race-the-web
defuse.ca
Practical Race Condition (TOCTTOU) Vulnerabilities in Web Applications - Defuse Security
Query-level race conditions can lead to serious but hard to find vulnerabilities in web applications.
102 views