Information Security
@sec_nerd_en
420 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
420 subscribers
Information Security
<div onpointerrawupdate=alert(1) style=width:100%;height:100%;position:absolute;background-color:red>test

http://portswigger-labs.net/xss/xss.php?x=%3Cdiv%20onpointerrawupdate=alert(1)%20style=width:100%;height:100%;position:absolute;background-color:red%3Etest
158 views
Information Security
https://github.com/1N3/BruteX
GitHub
GitHub - 1N3/BruteX: Automatically brute force all services running on a target.
Automatically brute force all services running on a target. - 1N3/BruteX
145 views
Information Security
https://embeddedbits.org/reverse-engineering-router-firmware-with-binwalk/
150 views
Information Security
https://docs.google.com/presentation/d/1s2VP_z6qctCJfEpqtp0uauj5WGZDeiHAoVWKRHR6pFY/edit
Google Docs
Server Side Request Forgery (SSRF)
Server Side Request Forgery (SSRF) Nishith K (@busk3r)
212 views
Information Security
https://github.com/s1egesystems/GoProcessInject0r
GitHub
GitHub - s1egesystems/GoProcessInject0r: Proof of concept for single/multiple shellcode process injection malware in Go language.
Proof of concept for single/multiple shellcode process injection malware in Go language. - GitHub - s1egesystems/GoProcessInject0r: Proof of concept for single/multiple shellcode process injection ...
118 views
Information Security
https://medium.com/@markmotig/overwrite-strings-in-an-exe-av-evasion-maybe-f28935078911
Medium
Overwrite Strings in an EXE (AV Evasion maybe)
This is a quick and dirty POC with no frills, no guard rails and almost no testing 😊
114 views
Information Security
https://www.pentagrid.ch/en/blog/local-privilege-escalation-in-ricoh-printer-drivers-for-windows-cve-2019-19363/
Pentagrid AG
Local Privilege Escalation in many Ricoh Printer Drivers for Windows (
A local privilege escalation in Ricoh Windows printer drivers is affecting many Ricoh printer models.
102 views
Information Security
https://github.com/embedded-sec/halucinator
GitHub
GitHub - embedded-sec/halucinator
Contribute to embedded-sec/halucinator development by creating an account on GitHub.
100 views
Information Security
https://posts.specterops.io/revisiting-remote-desktop-lateral-movement-8fb905cb46c3
Medium
Revisiting Remote Desktop Lateral Movement
It’s no secret that attackers are looking for new techniques to execute lateral movement. However, there are only a handful of publicly…
98 views
Information Security
https://mahmoudsec.blogspot.com/2018/07/sql-injection-and-silly-waf.html
Blogspot
SQL Injection and A silly WAF
Hi Folks, Today I'll be writing about some interesting SQL injection vulnerabilities I recently found. This is a private program so ...
105 views
Information Security
OK Google: bypass the authentication!
https://techblog.mediaservice.net/2020/01/ok-google-bypass-the-authentication

Escalating reflected XSS with HTTP Smuggling
https://hazana.xyz/posts/escalating-reflected-xss-with-http-smuggling

Hyperlink Injection - Easy Money (sometimes) by @abhishake100

https://link.medium.com/gw16BqBeU3

#bugbounty
129 views
Information Security
Weird XSS filter bypass today:
<embed><embed src="jav&Tab;ascript:al&Tab;ert()"

Reflected as:
<embed src="jav&Tab;ascript:al&Tab;ert()">
117 views
Information Security
https://blog.grimm-co.com/post/analyzing-the-linux-kernel-in-userland-with-afl-and-klee/
113 views
Information Security
https://medium.com/@petergombos/smb-named-pipe-pivoting-in-meterpreter-462580fd41c5
Medium
SMB Named Pipe Pivoting in Meterpreter
A hidden feature of Metasploit, is the ability to add SMB Named Pipe listeners in a meterpreter session to pivot on an internal network…
119 views
Information Security
https://medium.com/@abhishake100/hyperlink-injection-easy-money-sometimes-cc1104655300
Medium
Hyperlink Injection - Easy Money (sometimes)
What is Hyperlink Injection, its basically spoofing or injecting a link while sending an email…
114 views
Information Security
https://hackerone.com/reports/499348
HackerOne
X / xAI disclosed on HackerOne: Twitter lite(Android): Vulnerable...
**Summary:** com.twitter.android.lite.TwitterLiteActivity is set to exported and doesn't validate data pass to intent due to which this activity vulnerable to steal users local files, javascript...
107 views
Information Security
https://www.cyberark.com/threat-research-blog/follow-the-link-exploiting-symbolic-links-with-ease/
CyberArk
Follow the Link: Exploiting Symbolic Links with Ease | CyberArk
Symbolic Link attacks can lead to the escalation of privilege. They are easy to execute and have the potential to cause some serious damage.
111 views
Information Security
Serious back door Vulnerabilities spotted in Tik Tok
https://link.medium.com/iPG0rFpKV3

How to Find Vulnerable Webcams Across the Globe Using Shodan

https://link.medium.com/w897KubuU3

6 Interesting APIs to Check Out in 2020
https://codeburst.io/6-interesting-apis-to-check-out-in-2018-5d6830063f29

#cybersecurity
Medium
Serious back door Vulnerabilities spotted in TikTok
The security flaws were identified by a cybersecurity firm Check Point, which the company claims to have fixed
105 viewsedited  
Information Security
https://github.com/hausec/ADAPE-Script
GitHub
GitHub - hausec/ADAPE-Script: Active Directory Assessment and Privilege Escalation Script
Active Directory Assessment and Privilege Escalation Script - hausec/ADAPE-Script
107 views
Information Security
https://pr0cf5.github.io/ctf/2020/02/09/exploiting-a-bug-in-radare-plugin.html
105 views