Information Security
@sec_nerd_en
408 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
408 subscribers
Information Security
https://www.schneier.com/blog/archives/2020/01/sim_hijacking.html
147 views
Information Security
https://blog.fox-it.com/2018/04/26/escalating-privileges-with-acls-in-active-directory/
Fox-IT International blog
Escalating privileges with ACLs in Active Directory
Researched and written by Rindert Kramer and Dirk-jan Mollema Introduction During internal penetration tests, it happens quite often that we manage to obtain Domain Administrative access within a f…
130 views
Information Security
https://posts.specterops.io/revisiting-remote-desktop-lateral-movement-8fb905cb46c3
Medium
Revisiting Remote Desktop Lateral Movement
It’s no secret that attackers are looking for new techniques to execute lateral movement. However, there are only a handful of publicly…
128 views
Information Security
https://bitvijays.github.io/LFF-IPS-P3-Exploitation.html
202 views
Information Security
https://pentestlab.blog/tag/wmi/
Penetration Testing Lab
WMI – Penetration Testing Lab
Posts about WMI written by Administrator
121 views
Information Security
https://www.kryptoslogic.com/blog/2020/01/rdp-to-rce-when-fragmentation-goes-wrong/
Kryptoslogic
RDP to RCE: When Fragmentation Goes Wrong
Remote Desktop Gateway (RDG), previously known as Terminal Services Gateway, is a Windows Server component that provides routing for Remote Desktop (RDP). Rather then users connecting directly to an RDP Server, users instead connect and authenticate to the…
132 views
Information Security
https://github.com/rvrsh3ll/MSBuildAPICaller

https://s5.gifyu.com/images/msbuild_api.gif
GitHub
GitHub - rvrsh3ll/MSBuildAPICaller: MSBuild Without MSBuild.exe
MSBuild Without MSBuild.exe. Contribute to rvrsh3ll/MSBuildAPICaller development by creating an account on GitHub.
140 views
Information Security
HTTP request smuggling

HTTP Request Smuggling + IDOR
https://t.co/2945sopfiN

Account takeover via HTTP Request Smuggling
https://t.co/uim3l7JKir

HTTP Request Smuggling (CL.TE)
https://t.co/pI4IMcP6CF

Write up of two HTTP Requests Smuggling
https://t.co/YhVxYxtgL0

#bugbounty
hipotermia.pw
hipotermia - HTTP Request Smuggling + IDOR
A bug chain of HTTP Request Smuggling and an IDOR which allows to retrieve user sensitive data
172 views
Information Security
https://blog.tetrane.com/2020/01/22/bluekeep.html
152 views
Information Security
https://medium.com/@yogeshtantak7788/how-i-was-able-to-delete-google-gallery-data-idor-53d2f303efff
Medium
How I was able to delete Google Gallery Data [IDOR]
Hi, This is Yogesh Tantak a Security Researcher from India. Today I am writing about a critical bug that I found in Google’s new Product…
132 views
Information Security
https://github.com/gloxec/CrossC2
GitHub
GitHub - gloxec/CrossC2: generate CobaltStrike's cross-platform payload
generate CobaltStrike's cross-platform payload. Contribute to gloxec/CrossC2 development by creating an account on GitHub.
134 views
Information Security
#msf
119 views
Information Security
https://github.com/jas502n/CVE-2020-2551
GitHub
GitHub - jas502n/CVE-2020-2551: Weblogic RCE with IIOP
Weblogic RCE with IIOP. Contribute to jas502n/CVE-2020-2551 development by creating an account on GitHub.
116 views
Information Security
https://github.com/alexellis/k3sup
GitHub
GitHub - alexellis/k3sup: bootstrap K3s over SSH in < 60s 🚀
bootstrap K3s over SSH in < 60s 🚀. Contribute to alexellis/k3sup development by creating an account on GitHub.
113 views
Information Security
https://mjali.com/category/security/write-ups/
Mjali
Write-ups – Mjali
Posts about Write-ups written by Omar
126 views
Information Security
https://www.kitploit.com/2020/01/memhunter-live-hunting-of-code.html
KitPloit - PenTest & Hacking Tools
Memhunter - Live Hunting Of Code Injection Techniques
133 views
Information Security
https://github.com/trimstray/the-book-of-secret-knowledge
GitHub
GitHub - trimstray/the-book-of-secret-knowledge: A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners…
A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more. - trimstray/the-book-of-secret-knowledge
151 views
Information Security
https://github.com/charles2gan/GDA-android-reversing-Tool/wiki
GitHub
Home
the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy lea...
139 views
Information Security
https://pentestlab.blog/2018/05/08/nbns-spoofing/
Penetration Testing Lab
NBNS Spoofing
Netbios Name Service (NBT-NS) is used in Windows networks for communication between hosts. Systems will use this service when resolving names over LHOSTS and DNS fail. Abusing this service to perfo…
139 views
Information Security
https://github.com/sailay1996/awesome_windows_logical_bugs
GitHub
GitHub - sailay1996/awesome_windows_logical_bugs: collect for learning cases
collect for learning cases. Contribute to sailay1996/awesome_windows_logical_bugs development by creating an account on GitHub.
140 views