Information Security
@sec_nerd_en
420 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
420 subscribers
Information Security
Channel created
Information Security
Information Security News

we are @sec_nerd twin brother and we will be covering cyber incidents, exploits and articles about information security in english.


#start


@sec_nerd_en
290 views
Information Security
This #PHP #security issue is very nice

https://bugs.php.net/bug.php?id=76582


#php
#security

@sec_nerd_en
93 views
Information Security
Information Security pinned «Information Security News we are @sec_nerd twin brother and we will be covering cyber incidents, exploits and articles about information security in english. #start @sec_nerd_en»
Information Security
RDP Pivoting with Metasploit

http://www.hackingarticles.in/rdp-pivoting-metasploit/


#msf
#rdp
#windows
#pivoting

@sec_nerd_en
Hacking Articles
RDP Pivoting with Metasploit - Hacking Articles
In our previous tutorial we had discussed on SSH pivoting and today we are going to discuss RDP pivoting. From Offensive Security Pivoting is a technique
75 views
Information Security
Practical case: Buffer Overflow 0x01


https://maxkersten.nl/binary-analysis-course/assembly-basics/practical-case-buffer-overflow-0x01/


#aslr
#gdb

@sec_nerd_en
67 views
Information Security
"If you don't stop asking me if we are nearly there yet, I will turn this bus round; and none of you will get to see Salisbury cathedral. Do you hear me?"


#fun
#russia

@sec_nerd_en
58 views
Information Security
https://upload.wikimedia.org/wikipedia/commons/7/70/Portable_Executable_32_bit_Structure_in_SVG.svg


#PE32 Structure
#Windowns Internals


@sec_nerd_en
61 viewsedited  
Information Security
https://resources.infosecinstitute.com/2-malware-researchers-handbook-demystifying-pe-file/#gref

#PE32_Extended
#Windows_Internals


@sec_nerd_en
Infosecinstitute
Malware researcher’s handbook (demystifying PE file) | Infosec
(For the Introduction, click here)
PE file
Portable executable file format is a type of format that is used in Windows (both x86 and x64).

As per Wikipe
102 viewsedited  
Information Security
This media is not supported in your browser
VIEW IN TELEGRAM
A Chinese company is developing software that can read lips - likely to be used alongside facial recognition tech at some point

#facial_recognition
#china
#ai

@sec_nerd_en
78 views
Information Security
Hide an ADS in a folder > create a sub-folder > the hidden #ADS is automatically duplicated in the new sub-folder! Is this a feature or a bug? #DFIR


#windows
#cmd


@sec_nerd_en
50 views
Information Security
VLAN Hopping and Mitigation

https://www.alienvault.com/blogs/security-essentials/vlan-hopping-and-mitigation


#network
#vlon_hopping
#pentest
#pivoting


@sec_nerd_en
Alienvault
VLAN Hopping: How to Prevent an Attack
We’ll start with a few concepts:


VLAN

A virtual local area network (VLAN) is used to share the physical network while creating virtual segmentations to divide specific groups. For example, a host on VLAN 1 is separated from any host on VLAN 2. Any packets…
49 views
Information Security
Subdomain Takeover worth 200$

https://medium.com/@alirazzaq/subdomain-takeover-worth-200-ed73f0a58ffe


#bugbounty
#subdomain

@sec_nerd_en
Medium
Subdomain Takeover worth 200$
Hi! My name is Ali and i am security researcher from Pakistan.
43 views
Information Security
#fun

@sec_nerd_en
42 views
Information Security
https://twitter.com/russian_market/status/1040320403422498822

#spyStories
#Fun


@sec_nerd_en
Twitter
Russian Market
Once upon a time two Russians flew 4 hours from Moscow to London, then travelled 1.5 hour by train to Salisbury to see a local church with its 132m spire... https://t.co/B7RbpfRguE
42 viewsedited  
Information Security
Blockchain betting app mocks competitor for getting hacked. Gets hacked four days later


hacker going online by the pseudonym of "aabbccddeefg" has exploited a vulnerability to steal over 24,400 EOS coins ($125,000) from a blockchain-based betting app.

The hack took place last night, and the targeted app is called EOSBet Dice, run by a company named EOSBet Cassino. The app lets users bet EOS cryptocurrency as part of a classic dice game


The game has been running online for a few months, but yesterday, a Reddit user spotted that an EOS user named aabbccddeefg had siphoned a large stack of funds from the EOSBet Dice's shared money pool.

The Redditor says he identified a vulnerability in the dice game's source code --which, in turn, was based on an open source EOS dice-betting game called Fair Dice.

The hacker operated by sending a transaction to the EOSBet main game account, which exploited a lack of proper parameter checks that allowed the hacker to trick the game into sending back fake earnings.



https://www.zdnet.com/article/blockchain-betting-app-mocks-competitor-for-getting-hacked-gets-hacked-four-days-later/


#news
#breach
#btc
#cryptocurrency


@sec_nerd_en
ZDNet
Blockchain betting app mocks competitor for getting hacked. Gets hacked four days later
Hacker steals roughly $220,000 from blockchain-based online gambling app by exploiting vulnerability in EOS smart contract (game's source code).
45 views
Information Security
Backup solution provider Veeam are notifying customers of a security breach of one of the customer databases #infosec #security

#news
#breach

@sec_nerd_en
42 views