Information Security
@sec_nerd_en
408 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
408 subscribers
Information Security
https://cpr-zero.checkpoint.com/vulns/cprid-2138/
CPR-Zero
CPR-Zero: CVE-2019-1286
Check Point Research Vulnerability Repository
107 views
Information Security
https://twitter.com/pyn3rd/status/1209446292390215681?s=20
Twitter
pyn3rd
#CVE-2019-17571 Apache Log4j 1.2.x RCE via Socket Server Deserialization https://t.co/fwfQ8c63N0
116 views
Information Security
https://support.portswigger.net/customer/portal/articles/2590739-sql-injection-bypassing-common-filters-
PortSwigger Web Security
SQL Injection: Bypassing Common Filters
In some situations, an application that is vulnerable to SQL injection (SQLi) may implement various input filters that p...
118 views
Information Security
https://pentestlab.blog/2018/04/04/dumping-clear-text-credentials/
Penetration Testing Lab
Dumping Clear-Text Credentials
Passwords in clear-text that are stored in a Windows host can allow penetration testers to perform lateral movement inside an internal network and eventually fully compromise it. Therefore in a sys…
132 views
Information Security
https://medium.com/@plenumlab/crossing-the-borders-the-illegal-trade-of-http-requests-57da188520ca?
Medium
Crossing The Borders : The illegal trade of HTTP requests
TL;DR, This blog post will be the first in a series of posts that will go through some tips and tricks about finding and exploiting http…
99 views
Information Security
Mobile Application Pentesting :

Part 1:-
https://medium.com/@patilpiyush/mobile-application-pentesting-part-1-596e82e56e83

Part 2:-
https://medium.com/@patilpiyush/mobile-application-pentesting-part-2-feda7659eb12

Part 3:-
https://medium.com/@patilpiyush/mobile-application-pentesting-part-3-a9acbb487e6

Part 4:-
https://medium.com/@patilpiyush/mobile-application-pentesting-part4-329ca80b8e4b

Part 5:-
https://medium.com/@patilpiyush/mobile-application-pentesting-part-5-3c83e7f4dfe7

Part 6:-
https://medium.com/@patilpiyush/mobile-application-pentesting-part6-542870ffc5f7
146 views
Information Security
https://www.youtube.com/watch?v=Hir5LGEAgAA
YouTube
Remote Code Execution in restricted environments (Borja Merino, Tarlogic)
El CCN-CERT (www.ccn-cert.cni.es) es la Capacidad de Respuesta a Incidentes de Seguridad de la Información del Centro Criptológico Nacional, CCN (www.ccn.cni.es). Este servicio se creó en el año 2006 como el CERT Gubernamental/Nacional español y sus funciones…
100 views
Information Security
https://fireshellsecurity.team/restricted-linux-shell-escaping-techniques/
FireShell Security Team
Restricted Linux Shell Escaping Techniques
Abstract
98 views
Information Security
https://www.pelock.com/services/reverse-engineering/decrypting-an-encrypted-database-and-database-password-recovery
Pelock
Decrypting an encrypted database & database password recovery
Decrypting an encrypted database & recovery of the database access password. Decrypt SQLite, Microsoft SQL Server Compact, Visual FoxPro, Firebird and proprietary database formats.
93 views
Information Security
https://medium.com/@knownsec404team/linux-hids-agent-summary-and-user-status-hook-1-f1bb17295456
Medium
Linux HIDS agent Summary and User Status HOOK [1]
Author: u2400@Knownsec 404 Team Chinese version: https://paper.seebug.org/1102/
106 views
Information Security
Best #firefox addons for #Hacking:
-HackBar
-Cookies Manager+
-User-Agent Switcher
-Tamper Data
-FoxyProxy Standard
-Wappalyzer:
-HttpRequester
-RESTClient:
-Tampermonkey
-XSS Me
-SQL Inject Me
-iMacros
-FirePHP
#bugbountytips #bugbountytip #hacking #OSINT #pentest
128 views
Information Security
https://medium.com/@terjanq/clobbering-the-clobbered-vol-2-fb199ad7ec41
Medium
Clobbering the clobbered vol. 2
Write-up based on “simple” XSS challenge by @terjanq
121 views
Information Security
https://blog.certcube.com/windows-privilege-escalation-methods/
Certcube labs Cyber Security Research Blogs
Windows Privilege Escalation Methods
learn step by step methodologies of windows privilege escalation including dll hijacking , kernel exploits , plain text passwords, unquoted service paths .
119 views
Information Security
https://byt3bl33d3r.github.io/practical-guide-to-ntlm-relaying-in-2017-aka-getting-a-foothold-in-under-5-minutes.html
byt3bl33d3r.github.io
Practical guide to NTLM Relaying in 2017 (A.K.A getting a foothold in under 5 minutes) // byt3bl33d3r // /dev/random > blog.py
byt3bl33d3r, /dev/random > blog.py
117 views
Information Security
https://github.com/nikic/PHP-Fuzzer
GitHub
GitHub - nikic/PHP-Fuzzer: Experimental fuzzer for PHP libraries
Experimental fuzzer for PHP libraries. Contribute to nikic/PHP-Fuzzer development by creating an account on GitHub.
120 views
Information Security
http://ghostlulz.com/cross-origin-resource-sharing-cors/
121 views
Information Security
https://secrary.com/Random/windows_process_injection/
secrary[dot]com::blog
Windows Process Injection: Poisoned Explorer
https://secrary.com - Does it matter?
115 views
Information Security
https://nullsweep.com/http-security-headers-a-complete-guide/
Null Sweep
HTTP Security Headers - A Complete Guide
A description of each security header, why it is important, and how to configure your website in a secure way.
114 views
Information Security
https://www.praetorian.com/blog/active-directory-visualization-for-blue-teams-and-threat-hunters
Praetorian
Active Directory Visualization for Blue Teams and Threat Hunters | Praetorian
As a network defender, it can be easy to attribute a certain degree of omnipotence to attackers. Advanced threats have an uncanny knack for figuring out how to move through an environment without regards for passwords, roles, permissions, or what “should”…
108 views
Information Security
https://github.com/En14c/Erebus
GitHub
En14c/Erebus
Poc for ELF64 runtime infection via GOT poisoning technique by elfmaster - En14c/Erebus
101 views