Information Security
@sec_nerd_en
408 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
408 subscribers
Information Security
https://medium.com/@dirtycoder0124/blind-xss-a-mind-game-to-win-the-battle-4fc67c524678
Medium
Blind Xss (A mind game to win the battle)
In this write-up, I will explain how I exploited a blind XSS in the backend portal of a program.
106 views
Information Security
https://rastamouse.me/2018/03/a-view-of-persistence/
104 views
Information Security
https://nao-sec.org/2019/12/say-hello-to-bottle-exploit-kit.html
nao-sec.org
Say hello to Bottle Exploit Kit targeting Japan - @nao_sec
106 views
Information Security
https://medium.com/@osint/tiktok-using-osint-to-discover-new-leads-f7e6c27601d1?
Medium
TikTok — Using OSINT to Discover New Leads
TikTok has been with us for a couple of years now but we haven’t seen people using it in their investigations much until now. The mobile…
235 views
Information Security
https://medium.com/@prasetia.ari/tokopedia-idor-pada-chat-inbox-berakibat-bisa-membaca-title-chat-orang-lain-503883cb9540
Medium
Tokopedia IDOR pada chat/inbox, berakibat bisa membaca title chat orang lain
Ditemukan : 2 Mei 2017
115 views
Information Security
https://github.com/itm4n/VBA-RunPE
GitHub
GitHub - itm4n/VBA-RunPE: A VBA implementation of the RunPE technique or how to bypass application whitelisting.
A VBA implementation of the RunPE technique or how to bypass application whitelisting. - itm4n/VBA-RunPE
98 views
Information Security
https://know.bishopfox.com/research/cve-2019-18935-remote-code-execution-in-telerik-ui
Bishop Fox
CVE-2019-18935: Remote Code Execution via Insecure Deserialization in…
Telerik UI for ASP.NET AJAX insecurely deserializes JSON objects resulting in arbitrary RCE. Learn how to patch and securely configure this software.
99 viewsedited  
Information Security
https://syedfarazabrar.com/2019-12-13-starctf-oob-v8-indepth/
faraz.faith
Exploiting v8: *CTF 2019 oob-v8
89 views
Information Security
https://0xrick.github.io/hack-the-box/smasher2/
0xRick's Blog
Hack The Box - Smasher2
My write-up / walkthrough for Smasher2 from Hack The Box.
84 views
Information Security
https://github.com/axi0mX/ipwndfu
GitHub
GitHub - axi0mX/ipwndfu: open-source jailbreaking tool for many iOS devices
open-source jailbreaking tool for many iOS devices - axi0mX/ipwndfu
85 views
Information Security
https://medium.com/maverislabs/cve-2019-17123-cbc946c99f8
Medium
eGain Web API Email Header Injection
CVE-2019–17123
95 views
Information Security
https://www.fireeye.com/blog/threat-research/2018/11/not-so-cozy-an-uncomfortable-examination-of-a-suspected-apt29-phishing-campaign.html
Google Cloud Blog
Not So Cozy: An Uncomfortable Examination of a Suspected APT29 Phishing Campaign | Mandiant | Google Cloud Blog
88 views
Information Security
https://oddvar.moe/2018/03/21/persistence-using-runonceex-hidden-from-autoruns-exe/
Oddvar Moe's Blog
Persistence using RunOnceEx – Hidden from Autoruns.exe
TL;DR – Found a technique to execute DLL files without being detected by autoruns.exe at logon. – Requires administrator rights and does not belong in userland. – Run this to Expl…
98 views
Information Security
https://gts3.org/2019/Real-World-CTF-2019-Safari.html
Systems Software and Security Lab
Hack The Real: An exploitation chain to break the Safari browser
Exploiting type confusion bugs in latest JSC and escaping the sandbox
93 views
Information Security
https://github.com/SofianeHamlaoui/Lockdoor-Framework
GitHub
GitHub - SofianeHamlaoui/Lockdoor-Framework: 🔐 Lockdoor Framework : A Penetration Testing framework with Cyber Security Resources
🔐 Lockdoor Framework : A Penetration Testing framework with Cyber Security Resources - SofianeHamlaoui/Lockdoor-Framework
94 views
Information Security
https://github.com/mtivadar/windows10_ntfs_crash_dos
GitHub
GitHub - mtivadar/windows10_ntfs_crash_dos: PoC for a NTFS crash that I discovered, in various Windows versions
PoC for a NTFS crash that I discovered, in various Windows versions - mtivadar/windows10_ntfs_crash_dos
102 views
Information Security
Add a file/folder to #Windows Defender exclusion list

C:\>powershell -exec bypass - "Add-MpPreference -ExclusionPath 'D:\EvilFolder\Tools'"

useful if you want to move #pentest tools to a Windows machine without Defender interfering

Admin UAC prompt required

#powershell #oscp
111 views
Information Security
https://www.slideshare.net/riyazwalikar/windows-privilege-escalation
www.slideshare.net
Windows Privilege Escalation
A collection of techniques that allow users to escalate privileges to local administrator and then to NT Authority\System. On a windows domain readers can use …
118 views
Information Security
https://github.com/padovah4ck/CVE-2019-1253
GitHub
GitHub - padovah4ck/CVE-2019-1253: Poc for CVE-2019-1253
Poc for CVE-2019-1253. Contribute to padovah4ck/CVE-2019-1253 development by creating an account on GitHub.
92 views
Information Security
https://github.com/smgorelik/Windows-RCE-exploits
GitHub
GitHub - smgorelik/Windows-RCE-exploits: The exploit samples database is a repository for **RCE** (remote code execution) exploits…
The exploit samples database is a repository for **RCE** (remote code execution) exploits and Proof-of-Concepts for **WINDOWS**, the samples are uploaded for education purposes for red and blue tea...
89 views