Information Security
@sec_nerd_en
412 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
412 subscribers
Information Security
https://github.com/jas502n/CVE-2020-2551
GitHub
GitHub - jas502n/CVE-2020-2551: Weblogic RCE with IIOP
Weblogic RCE with IIOP. Contribute to jas502n/CVE-2020-2551 development by creating an account on GitHub.
116 views
Information Security
https://github.com/alexellis/k3sup
GitHub
GitHub - alexellis/k3sup: bootstrap K3s over SSH in < 60s 🚀
bootstrap K3s over SSH in < 60s 🚀. Contribute to alexellis/k3sup development by creating an account on GitHub.
113 views
Information Security
https://mjali.com/category/security/write-ups/
Mjali
Write-ups – Mjali
Posts about Write-ups written by Omar
126 views
Information Security
https://www.kitploit.com/2020/01/memhunter-live-hunting-of-code.html
KitPloit - PenTest & Hacking Tools
Memhunter - Live Hunting Of Code Injection Techniques
133 views
Information Security
https://github.com/trimstray/the-book-of-secret-knowledge
GitHub
GitHub - trimstray/the-book-of-secret-knowledge: A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners…
A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more. - trimstray/the-book-of-secret-knowledge
151 views
Information Security
https://github.com/charles2gan/GDA-android-reversing-Tool/wiki
GitHub
Home
the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy lea...
139 views
Information Security
https://pentestlab.blog/2018/05/08/nbns-spoofing/
Penetration Testing Lab
NBNS Spoofing
Netbios Name Service (NBT-NS) is used in Windows networks for communication between hosts. Systems will use this service when resolving names over LHOSTS and DNS fail. Abusing this service to perfo…
139 views
Information Security
https://github.com/sailay1996/awesome_windows_logical_bugs
GitHub
GitHub - sailay1996/awesome_windows_logical_bugs: collect for learning cases
collect for learning cases. Contribute to sailay1996/awesome_windows_logical_bugs development by creating an account on GitHub.
140 views
Information Security
https://ired.team/offensive-security/credential-access-and-credential-dumping/intercepting-logon-credentials-by-hooking-msv1_0-spacceptcredentials
www.ired.team
Intercepting Logon Credentials by Hooking msv1_0!SpAcceptCredentials | Red Team Notes
Hooking, Credential Stealing
132 views
Information Security
https://jlajara.gitlab.io/posts/2020/01/25/XSS_tag_event_analyzer.html
242 views
Information Security
https://www.cybereason.com/blog/dcom-lateral-movement-techniques
Cybereason
New lateral movement techniques abuse DCOM technology
The arsenal of lateral movement techniques was expanded with new methods that abuse the DCOM functionality of Windows applications.
123 views
Information Security
https://pentestlaboratories.com/2020/01/27/msbuild-without-msbuild/
Pentest Laboratories
MSBuild without MSBuild
MSBuild is a trusted Windows binary that is part of Microsoft .NET framework and can be utilized to build applications in environments where Visual Studio is not installed. From the perspective of …
121 views
Information Security
https://twitter.com/mrgretzky/status/1221809489608921090?s=20
Twitter
Kuba Gretzky
pwndrop - The new fast & fun way to set up an HTTP/WebDAV server for your payloads is coming! python -m SimpleHTTPServer may soon be retiring. Stay tuned! Here is a quick sneak peek: https://t.co/bzVV6E9oyT
118 views
Information Security
https://sid-500.com/2020/01/28/office-365-add-user-accounts-and-mailboxes-with-powershell/
SID-500.COM
Office 365: Add User Accounts and Mailboxes with PowerShell
More and more companies are moving to the cloud. Subscribing cloud services means less hardware maintenance, more comfort, and an “always-on” feeling. As an administrator, you have to g…
112 views
Information Security
https://blog.netspi.com/attacking-application-specific-sql-server-instances/
NetSPI Blog
Attacking Application Specific SQL Server Instances
This blog walks through how to quickly identify SQL Server instances used by 3rd party applications that are configured with default passwords using PowerUpSQL.
111 views
Information Security
https://www.netmeister.org/blog/ops-lessons.html
www.netmeister.org
(A few) Ops Lessons We All Learn The Hard Way
Ops is hard. What have learned so far?
114 views
Information Security
https://github.com/luxunator/weebmyip
GitHub
GitHub - luxunator/weebmyip: Website with an API to get information on IP addresses, and of course an anime girl to read you it
Website with an API to get information on IP addresses, and of course an anime girl to read you it - GitHub - luxunator/weebmyip: Website with an API to get information on IP addresses, and of cour...
123 views
Information Security
https://github.com/outflanknl/Zipper
GitHub
GitHub - outflanknl/Zipper: Zipper, a CobaltStrike file and folder compression utility.
Zipper, a CobaltStrike file and folder compression utility. - outflanknl/Zipper
126 views
Information Security
Some Lateral Movement Methods:

-Pass the Hash/Relay ((Net-)NTLM)
-Pass the Ticket (Silver/Golden)
-RDP (Legit creds)
-Remote Services (VNC/SSH)
-(D)COM (Remote sched tasks, Services, WMI)
-Remote Service Vuln (EB)
-Admin Shares (PSExec)
-Webshell (Chopper)
-WinRM (PS Remoting)
154 views
Information Security
https://medium.com/@reegun/curl-exe-is-the-new-rundll32-exe-lolbin-3f79c5f35983
129 views