Information Security
@sec_nerd_en
405 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
405 subscribers
Information Security
https://twitter.com/RedDrip7/status/1174963799545090048
Twitter
RedDrip Team
#APT A decoy document, pretending to have content regarding conference held in #Kherson Oblast, seems created by #Gamaredon to target #Ukraine. Template injection has been used to avoid being detected. https://t.co/LxJnkx9VlF
99 views
Information Security
https://github.com/evilAdan0s/CVE-2019-16097/
GitHub
GitHub - evilAdan0s/CVE-2019-16097: CVE-2019-16097 PoC
CVE-2019-16097 PoC. Contribute to evilAdan0s/CVE-2019-16097 development by creating an account on GitHub.
89 views
Information Security
Bypass firewalls by abusing DNS history

https://github.com/vincentcox/bypass-firewalls-by-DNS-history
104 views
Information Security
https://github.com/PowerShellMafia/PowerSploit/tree/master/Recon
GitHub
PowerSploit/Recon at master · PowerShellMafia/PowerSploit
PowerSploit - A PowerShell Post-Exploitation Framework - PowerShellMafia/PowerSploit
105 views
Information Security
https://www.kalitut.com/2019/05/Wifiphisher-evil-twin-attack.html
KaliTut
KaliTut: Wifiphisher Evil Twin Attack
Wifiphisher uses social engineering to get a password for WiFi and websites. Those. You do not need a powerful hardware for a long time for brute-force password.
107 views
Information Security
https://medium.com/bugbountywriteup/bug-bounty-tips-tricks-js-javascript-files-bdde412ea49d
Medium
Bug Bounty — Tips / Tricks / JS (JavaScript Files)
It all started in month of August when I reached out to Gerben Javado regarding a question, yes it was a basic question but a quick chat…
137 views
Information Security
https://github.com/ytdl-org/youtube-dl/
GitHub
GitHub - ytdl-org/youtube-dl: Command-line program to download videos from YouTube.com and other video sites
Command-line program to download videos from YouTube.com and other video sites - ytdl-org/youtube-dl
159 views
Information Security
https://twitter.com/bohops/status/970792894012551171
173 views
Information Security
awesome tutorial for socket programming in C

http://www.cs.rpi.edu/~moorthy/Courses/os98/Pgms/socket.html
231 views
Information Security
https://medium.com/@z3roTrust/bypassing-windows-user-account-control-9051c6a85734?aduc=5sEDRWu1568976488023
3.71K views
Information Security
Windows Hacking/Red teaming resources
https://docs.google.com/document/d/1HYPX0MMn2Qc0TNYRRIaaYU2GIbuTMXHm-JBhRR2vNMU/mobilebasic
3.67K views
Information Security
https://medium.com/@reegun/unsanitized-file-validation-leads-to-malicious-payload-download-via-office-binaries-202d02db7191


#Microsoft Office binaries #winword #excel #powerpnt added to #lolbas || #lolbin

https://lolbas-project.github.io/lolbas/OtherMSBinaries/Winword/
https://lolbas-project.github.io/lolbas/OtherMSBinaries/Powerpnt/
https://lolbas-project.github.io/lolbas/OtherMSBinaries/Excel/
Medium
Unsanitized file validation leads to Malicious payload download via Office binaries.
As a part of finding vulnerable endpoints to improve defence, I used to reckon legitimate binaries on any chance of masking for payload…
214 views
Information Security
https://github.com/OWASP/Amass


OWASP Amass Tip

For ASNs:
amass intel -org OrgName

For domain names:
amass intel -active -asn n1,n2

For subdomains and infrastructure:
amass enum -src -ip -df domains.txt
GitHub
GitHub - owasp-amass/amass: In-depth attack surface mapping and asset discovery
In-depth attack surface mapping and asset discovery - owasp-amass/amass
145 views
Information Security
https://github.com/secrary/Andromeda


android reverse engineering
GitHub
GitHub - secrary/Andromeda: Andromeda - Interactive Reverse Engineering Tool for Android Applications
Andromeda - Interactive Reverse Engineering Tool for Android Applications - secrary/Andromeda
137 views
Information Security
https://github.com/h0mbre/Learning-C
GitHub
GitHub - h0mbre/Learning-C: A series of mini-projects used to learn C for beginners
A series of mini-projects used to learn C for beginners - h0mbre/Learning-C
138 views
Information Security
https://shhnjk.blogspot.com/2019/09/nonce-based-csp-service-worker-csp.html
Blogspot
Nonce-based CSP + Service Worker = CSP bypass?
Service Worker is a great technology that allows you to develop web app's offline experience and increase performance of your website. B...
126 views
Information Security
https://twitter.com/sayadarijawa/status/1175665926311534593
Twitter
rizal.
Bypass CloudFront WAF #bugbounty #bugbountytips <object/data="javascript&colon;alert/**/(document.domain)">//
140 views
Information Security
https://medium.com/@rsatter/decoding-the-gru-indictment-bfb2c08fe362
Medium
Decoding the GRU indictment
The July 13, 2018 indictment of 12 GRU operatives provided extraordinary insight into how Fancy Bear operates. But it left several…
122 views
Information Security
https://blog.firosolutions.com/exploits/counter-strike-go/
Firo Solutions
Counter-Strike Global Offensive CVE-2019-15943
119 views
Information Security
This media is not supported in your browser
VIEW IN TELEGRAM
Henry Chen
@chybeta
CVE-2019-8451 Unauthorized SSRF via REST API /plugins/servlet/gadgets/makeRequest

use @ to bypass the whitelisting !

https://jira.atlassian.com/browse/JRASERVER-70001?filter=13085
126 views
Information Security
https://github.com/peewpw/Invoke-PSImage
129 views