Information Security
@sec_nerd_en
408 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
408 subscribers
Information Security
https://adsecurity.org/?p=2604
Active Directory Security
Detecting Offensive PowerShell Attack Tools
At DerbyCon V (2015), I presented on Active Directory Attack & Defense and part of this included how to detect & defend against PowerShell attacks. Update: I presented at BSides Charm (Baltimore) on PowerShell attack & defense in April 2016. More information…
103 views
Information Security
https://www.hahwul.com/2019/12/run-other-application-on-burp-suiteburp.html
91 views
Information Security
This media is not supported in your browser
VIEW IN TELEGRAM
Apereo Cas 4.2.X Remote Code Execution.（execution =xxx_ZXlKaGJH...）：GIF
👇


and about the Apereo Cas 4.1.X Remote Code Execution.（execution =xxx_AAAAIg...）:
https://twitter.com/pyn3rd/status/1001758511624212480
91 views
Information Security
https://halbecaf.com/2017/05/24/exploiting-a-v8-oob-write/
90 views
Information Security
https://www.terabitweb.com/2019/03/20/analysis-of-a-chrome-zero-day-cve-2019-5786/
TerabitWeb Blog
Analysis of a Chrome Zero Day: CVE-2019-5786
Original Post from McAfee Author: Philippe Laulheret 1. Introduction On March 1st, Google published an advisory [1] for a use-after-free in the Chrome implementation of the FileReader API (CVE 2019…
99 views
Information Security
https://media.ccc.de/v/36c3-10801-sigover_alpha

SigOver + alpha. Signal overshadowing attack on LTE and its applications
media.ccc.de
SigOver + alpha
As Long-Term Evolution (LTE) communication is based on over-the-air signaling, a legitimate signal can potentially be counterfeited by a ...
99 views
Information Security
Our 36c3 presentation video :
https://media.ccc.de/v/36c3-10505-the_great_escape_of_esxi#t=708
and slides:
https://url.cn/51kIMxY
😃
It's really a nice party. Hope to see you next year.
#36c3
media.ccc.de
The Great Escape of ESXi
VMware ESXi is an enterprise-class, bare-metal hypervisor developed by VMware for deploying and serving virtual computers. As the hypervi...
106 views
Information Security
109 views
Information Security
https://github.com/theori-io/pwnjs
GitHub
GitHub - theori-io/pwnjs: A Javascript library for browser exploitation
A Javascript library for browser exploitation. Contribute to theori-io/pwnjs development by creating an account on GitHub.
130 views
Information Security
https://media.ccc.de/v/36c3-10737-sim_card_technology_from_a-z
media.ccc.de
SIM card technology from A-Z
Billions of subscribers use SIM cards in their phones. Yet, outside a relatively small circle, information about SIM card technology is n...
109 views
Information Security
“Effortlessly finding Cross Site Script Inclusion (XSSI) & JSONP for bug bounty” by Omkar Bhagwat (th3_hidd3n_mist) https://link.medium.com/KABwitzpQ2
Medium
Effortlessly finding Cross Site Script Inclusion (XSSI) & JSONP for bug bounty
Hey everyone, I recently reported a dupe for a XSSI bug on a private program which paid out $300, to the original reporter. I believe the…
110 views
Information Security
https://wildfire.blazeinfosec.com/leveraging-web-application-vulnerabilities-to-steal-ntlm-hashes-2/
Blaze Information Security - Wildfire Labs
Leveraging web application vulnerabilities to steal NTLM hashes
Introduction NTLM authentication is the de-facto standard in corporate networks running Windows. There are a plethora of well-understood local attacks that take advantage of the way Windows perform automatic NTLM authentication, and abusing this feature is…
105 views
Information Security
https://github.com/alphaSeclab/awesome-rat/blob/master/Readme_en.md
GitHub
awesome-rat/Readme_en.md at master · alphaSeclab/awesome-rat
RAT And C&C Resources. 250+ Open Source Projects, 1200+ RAT/C&C blog/video. - alphaSeclab/awesome-rat
99 views
Information Security
https://gts3.org/2019/Real-World-CTF-2019-Safari.html
Systems Software and Security Lab
Hack The Real: An exploitation chain to break the Safari browser
Exploiting type confusion bugs in latest JSC and escaping the sandbox
94 views
Information Security
https://medium.com/intigriti/how-i-got-your-phone-number-through-facebook-223b769cccf1
Medium
How I got your phone number through Facebook
Don’t have the time to read the entire article? Go to the FAQ section below for everything you should know.
95 views
Information Security
How to Takover a ldap server.
https://medium.com/@D0rkerDevil/how-i-tookover-a-ldap-server-703209161001

How PayPal helped me to generate XSS
https://medium.com/@pflash0x0punk/how-paypal-helped-me-to-generate-xss-9408c0931add

How I earned $$$$ by finding confidential customer data including plain-text passwords
https://medium.com/@saurabh5392/how-i-earned-by-finding-confidential-customer-data-including-plain-text-passwords-f93c4ce2631

#bugbounty,#bugbountytips
Medium
How I Tookover a ldap server.
Intro
115 views
Information Security
https://github.com/s1kr10s/D-Link-DIR-859-RCE/

https://medium.com/@s1kr10s/d-link-dir-859-rce-unautenticated-cve-2019-17621-en-d94b47a15104
GitHub
GitHub - s1kr10s/D-Link-DIR-859-RCE: D-Link DIR-859 - RCE UnAutenticated (CVE-2019–17621)
D-Link DIR-859 - RCE UnAutenticated (CVE-2019–17621) - s1kr10s/D-Link-DIR-859-RCE
160 views
Information Security
https://captmeelo.com/pentest/2019/12/30/lesser-known-tools-for-android-pentest.html
126 views
Information Security
https://ired.team/offensive-security/code-injection-process-injection/addressofentrypoint-code-injection-from-an-injected-dll
ired.team
AddressOfEntryPoint Code Injection from an Injected DLL
141 views
Information Security
Happy New Year!


@sec_nerd_en
123 views