Information Security
@sec_nerd_en
415 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
415 subscribers
Information Security
https://github.com/peewpw/Invoke-PSImage
130 views
Information Security
https://twitter.com/GCHQ/status/1176138397636792320
Twitter
GCHQ
Ever wanted to encrypt messages with Enigma and decode them with the Bombe? Give our new features in #CyberChef a try! https://t.co/OxLcQQbePa
128 views
Information Security
https://blog.ropnop.com/attacking-default-installs-of-helm-on-kubernetes/
ropnop blog
Attacking Default Installs of Helm on Kubernetes
Default installations of Helm on Kubernetes can make it trivial for attackers to escalate to cluster admin. In this post I’ll demonstrate how.
118 views
Information Security
https://posts.specterops.io/shhmon-silencing-sysmon-via-driver-unload-682b5be57650
Medium
Shhmon — Silencing Sysmon via Driver Unload
Sysmon is an incredibly powerful tool to aide in data collection beyond Windows’ standard event logging capabilities. It presents a…
118 views
Information Security
vb5.py
820 B
# vBulletin 5.x 0day pre-auth RCE exploit
#
# This should work on all versions from 5.0.0 till 5.5.4
180 views
Information Security
Tesla
PowerPack
124 views
Information Security
https://nullsweep.com/pivot-cheatsheet-for-pentesters/
Null Sweep
A Pivot Cheatsheet for Pentesters
Quick walkthrough of pivot techniques including ssh, meterpreter, ncat, and netcat.
369 views
Information Security
Information Security
https://medium.com/101-writeups/hacking-json-web-token-jwt-233fe6c862e6
https://github.com/pinnace/burp-jwt-fuzzhelper-extension


JWT FuzzHelper for Burp
GitHub
GitHub - pinnace/burp-jwt-fuzzhelper-extension: JWT Fuzzer for BurpSuite. Adds an Intruder hook for on-the-fly JWT fuzzing.
JWT Fuzzer for BurpSuite. Adds an Intruder hook for on-the-fly JWT fuzzing. - pinnace/burp-jwt-fuzzhelper-extension
113 views
Information Security
bypass360mimikatz_x64:--

Method: change resources, add a digital signature
Unzip password: 6613kris


https://github.com/ianxtianxt/bypass360mimikatz_x64
GitHub
GitHub - ianxtianxt/bypass360mimikatz_x64
Contribute to ianxtianxt/bypass360mimikatz_x64 development by creating an account on GitHub.
125 views
Information Security
Information Security
vb5.py
https://viz.greynoise.io/query/?gnql=tags%3A%22vBulletin%205.x%20RCE%22
121 views
Information Security
https://pentestmag.com/knocking-the-door-to-server-side-template-injection-part-1/
Pentestmag
Knocking the door to Server-side Template Injection. Part 1 - Pentestmag
Knocking the door to Server-side Template Injection. Part 1 by Mohamed Habib Jawadi # Hands on guide on Server-Side Template …
120 views
Information Security
https://www.youtube.com/watch?v=Vz4F8ITjY-M&feature=youtu.be
YouTube
Owning Cody's First Blog (RCE) on Hacker101 and hacking on FFH from BugBountyNotes.com (IDOR)
Live Every Tuesday, Saturday and Sunday on Twitch: https://twitch.tv/nahamsec Signup for HackerOne: https://nahamsec.stream/HackerOne Signup for Hacker101: h...
113 views
Information Security
http://www.auxy.xyz/
Auxy’s Blog
Miku Fan and Program Abalysis
102 views
Information Security
Forwarded from امنیت اطلاعات
This media is not supported in your browser
VIEW IN TELEGRAM
#fun
#chrome


@sec_nerd
10 views
Information Security
Information Security
vb5.py
https://github.com/Frint0/mass-pwn-vbulletin
126 views
Information Security
https://github.com/exodusintel/CVE-2019-0808
GitHub
GitHub - exodusintel/CVE-2019-0808: Win32k Exploit by Grant Willcox
Win32k Exploit by Grant Willcox. Contribute to exodusintel/CVE-2019-0808 development by creating an account on GitHub.
109 views
Information Security
Information Security
vb5.py
https://www.zoomeye.org/searchResult?q=app%3A%22vBulletin%22%20%22simpleversion%22
111 views
Information Security
https://securelist.com/ransomware-two-pieces-of-good-news/93355/


Kaspersky releases decrypters for the Yatron and FortuneCrypt ransomware strains
Securelist
Ransomware: two pieces of good news
Nowadays, cybercriminals have a thousand and one ways of creating and spreading ransomware. However, those fighting ransomware are not standing still either. In fact, we have two pieces of good news to share with you.
110 views
Information Security
100 views
Information Security
Information Security
vb5.py
https://github.com/r00tpgp/http-vuln-CVE-2019-16759
GitHub
GitHub - r00tpgp/http-vuln-CVE-2019-16759: Nmap NSE Script to Detect vBulletin pre-auth 5.x RCE CVE-2019-16759
Nmap NSE Script to Detect vBulletin pre-auth 5.x RCE CVE-2019-16759 - r00tpgp/http-vuln-CVE-2019-16759
105 views
Information Security
https://www.bromium.com/reawakening-of-emotet-an-analysis-of-its-javascript-downloader/
108 views