Information Security
@sec_nerd_en
415 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
415 subscribers
Information Security
https://shhnjk.blogspot.com/2019/09/nonce-based-csp-service-worker-csp.html
Blogspot
Nonce-based CSP + Service Worker = CSP bypass?
Service Worker is a great technology that allows you to develop web app's offline experience and increase performance of your website. B...
126 views
Information Security
https://twitter.com/sayadarijawa/status/1175665926311534593
Twitter
rizal.
Bypass CloudFront WAF #bugbounty #bugbountytips <object/data="javascript&colon;alert/**/(document.domain)">//
140 views
Information Security
https://medium.com/@rsatter/decoding-the-gru-indictment-bfb2c08fe362
Medium
Decoding the GRU indictment
The July 13, 2018 indictment of 12 GRU operatives provided extraordinary insight into how Fancy Bear operates. But it left several…
123 views
Information Security
https://blog.firosolutions.com/exploits/counter-strike-go/
Firo Solutions
Counter-Strike Global Offensive CVE-2019-15943
120 views
Information Security
This media is not supported in your browser
VIEW IN TELEGRAM
Henry Chen
@chybeta
CVE-2019-8451 Unauthorized SSRF via REST API /plugins/servlet/gadgets/makeRequest

use @ to bypass the whitelisting !

https://jira.atlassian.com/browse/JRASERVER-70001?filter=13085
127 views
Information Security
https://github.com/peewpw/Invoke-PSImage
130 views
Information Security
https://twitter.com/GCHQ/status/1176138397636792320
Twitter
GCHQ
Ever wanted to encrypt messages with Enigma and decode them with the Bombe? Give our new features in #CyberChef a try! https://t.co/OxLcQQbePa
128 views
Information Security
https://blog.ropnop.com/attacking-default-installs-of-helm-on-kubernetes/
ropnop blog
Attacking Default Installs of Helm on Kubernetes
Default installations of Helm on Kubernetes can make it trivial for attackers to escalate to cluster admin. In this post I’ll demonstrate how.
118 views
Information Security
https://posts.specterops.io/shhmon-silencing-sysmon-via-driver-unload-682b5be57650
Medium
Shhmon — Silencing Sysmon via Driver Unload
Sysmon is an incredibly powerful tool to aide in data collection beyond Windows’ standard event logging capabilities. It presents a…
118 views
Information Security
vb5.py
820 B
# vBulletin 5.x 0day pre-auth RCE exploit
#
# This should work on all versions from 5.0.0 till 5.5.4
180 views
Information Security
Tesla
PowerPack
124 views
Information Security
https://nullsweep.com/pivot-cheatsheet-for-pentesters/
Null Sweep
A Pivot Cheatsheet for Pentesters
Quick walkthrough of pivot techniques including ssh, meterpreter, ncat, and netcat.
369 views
Information Security
Information Security
https://medium.com/101-writeups/hacking-json-web-token-jwt-233fe6c862e6
https://github.com/pinnace/burp-jwt-fuzzhelper-extension


JWT FuzzHelper for Burp
GitHub
GitHub - pinnace/burp-jwt-fuzzhelper-extension: JWT Fuzzer for BurpSuite. Adds an Intruder hook for on-the-fly JWT fuzzing.
JWT Fuzzer for BurpSuite. Adds an Intruder hook for on-the-fly JWT fuzzing. - pinnace/burp-jwt-fuzzhelper-extension
113 views
Information Security
bypass360mimikatz_x64:--

Method: change resources, add a digital signature
Unzip password: 6613kris


https://github.com/ianxtianxt/bypass360mimikatz_x64
GitHub
GitHub - ianxtianxt/bypass360mimikatz_x64
Contribute to ianxtianxt/bypass360mimikatz_x64 development by creating an account on GitHub.
125 views
Information Security
Information Security
vb5.py
https://viz.greynoise.io/query/?gnql=tags%3A%22vBulletin%205.x%20RCE%22
121 views
Information Security
https://pentestmag.com/knocking-the-door-to-server-side-template-injection-part-1/
Pentestmag
Knocking the door to Server-side Template Injection. Part 1 - Pentestmag
Knocking the door to Server-side Template Injection. Part 1 by Mohamed Habib Jawadi # Hands on guide on Server-Side Template …
120 views
Information Security
https://www.youtube.com/watch?v=Vz4F8ITjY-M&feature=youtu.be
YouTube
Owning Cody's First Blog (RCE) on Hacker101 and hacking on FFH from BugBountyNotes.com (IDOR)
Live Every Tuesday, Saturday and Sunday on Twitch: https://twitch.tv/nahamsec Signup for HackerOne: https://nahamsec.stream/HackerOne Signup for Hacker101: h...
113 views
Information Security
http://www.auxy.xyz/
Auxy’s Blog
Miku Fan and Program Abalysis
102 views
Information Security
Forwarded from امنیت اطلاعات
This media is not supported in your browser
VIEW IN TELEGRAM
#fun
#chrome


@sec_nerd
10 views
Information Security
Information Security
vb5.py
https://github.com/Frint0/mass-pwn-vbulletin
126 views
Information Security
https://github.com/exodusintel/CVE-2019-0808
GitHub
GitHub - exodusintel/CVE-2019-0808: Win32k Exploit by Grant Willcox
Win32k Exploit by Grant Willcox. Contribute to exodusintel/CVE-2019-0808 development by creating an account on GitHub.
109 views