Information Security
@sec_nerd_en
412 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
412 subscribers
Information Security
https://docs.google.com/presentation/d/1s2VP_z6qctCJfEpqtp0uauj5WGZDeiHAoVWKRHR6pFY/edit
Google Docs
Server Side Request Forgery (SSRF)
Server Side Request Forgery (SSRF) Nishith K (@busk3r)
212 views
Information Security
https://github.com/s1egesystems/GoProcessInject0r
GitHub
GitHub - s1egesystems/GoProcessInject0r: Proof of concept for single/multiple shellcode process injection malware in Go language.
Proof of concept for single/multiple shellcode process injection malware in Go language. - GitHub - s1egesystems/GoProcessInject0r: Proof of concept for single/multiple shellcode process injection ...
118 views
Information Security
https://medium.com/@markmotig/overwrite-strings-in-an-exe-av-evasion-maybe-f28935078911
Medium
Overwrite Strings in an EXE (AV Evasion maybe)
This is a quick and dirty POC with no frills, no guard rails and almost no testing 😊
114 views
Information Security
https://www.pentagrid.ch/en/blog/local-privilege-escalation-in-ricoh-printer-drivers-for-windows-cve-2019-19363/
Pentagrid AG
Local Privilege Escalation in many Ricoh Printer Drivers for Windows (
A local privilege escalation in Ricoh Windows printer drivers is affecting many Ricoh printer models.
102 views
Information Security
https://github.com/embedded-sec/halucinator
GitHub
GitHub - embedded-sec/halucinator
Contribute to embedded-sec/halucinator development by creating an account on GitHub.
100 views
Information Security
https://posts.specterops.io/revisiting-remote-desktop-lateral-movement-8fb905cb46c3
Medium
Revisiting Remote Desktop Lateral Movement
It’s no secret that attackers are looking for new techniques to execute lateral movement. However, there are only a handful of publicly…
98 views
Information Security
https://mahmoudsec.blogspot.com/2018/07/sql-injection-and-silly-waf.html
Blogspot
SQL Injection and A silly WAF
Hi Folks, Today I'll be writing about some interesting SQL injection vulnerabilities I recently found. This is a private program so ...
105 views
Information Security
OK Google: bypass the authentication!
https://techblog.mediaservice.net/2020/01/ok-google-bypass-the-authentication

Escalating reflected XSS with HTTP Smuggling
https://hazana.xyz/posts/escalating-reflected-xss-with-http-smuggling

Hyperlink Injection - Easy Money (sometimes) by @abhishake100

https://link.medium.com/gw16BqBeU3

#bugbounty
129 views
Information Security
Weird XSS filter bypass today:
<embed><embed src="jav&Tab;ascript:al&Tab;ert()"

Reflected as:
<embed src="jav&Tab;ascript:al&Tab;ert()">
117 views
Information Security
https://blog.grimm-co.com/post/analyzing-the-linux-kernel-in-userland-with-afl-and-klee/
113 views
Information Security
https://medium.com/@petergombos/smb-named-pipe-pivoting-in-meterpreter-462580fd41c5
Medium
SMB Named Pipe Pivoting in Meterpreter
A hidden feature of Metasploit, is the ability to add SMB Named Pipe listeners in a meterpreter session to pivot on an internal network…
119 views
Information Security
https://medium.com/@abhishake100/hyperlink-injection-easy-money-sometimes-cc1104655300
Medium
Hyperlink Injection - Easy Money (sometimes)
What is Hyperlink Injection, its basically spoofing or injecting a link while sending an email…
114 views
Information Security
https://hackerone.com/reports/499348
HackerOne
X / xAI disclosed on HackerOne: Twitter lite(Android): Vulnerable...
**Summary:** com.twitter.android.lite.TwitterLiteActivity is set to exported and doesn't validate data pass to intent due to which this activity vulnerable to steal users local files, javascript...
107 views
Information Security
https://www.cyberark.com/threat-research-blog/follow-the-link-exploiting-symbolic-links-with-ease/
CyberArk
Follow the Link: Exploiting Symbolic Links with Ease | CyberArk
Symbolic Link attacks can lead to the escalation of privilege. They are easy to execute and have the potential to cause some serious damage.
111 views
Information Security
Serious back door Vulnerabilities spotted in Tik Tok
https://link.medium.com/iPG0rFpKV3

How to Find Vulnerable Webcams Across the Globe Using Shodan

https://link.medium.com/w897KubuU3

6 Interesting APIs to Check Out in 2020
https://codeburst.io/6-interesting-apis-to-check-out-in-2018-5d6830063f29

#cybersecurity
Medium
Serious back door Vulnerabilities spotted in TikTok
The security flaws were identified by a cybersecurity firm Check Point, which the company claims to have fixed
105 viewsedited  
Information Security
https://github.com/hausec/ADAPE-Script
GitHub
GitHub - hausec/ADAPE-Script: Active Directory Assessment and Privilege Escalation Script
Active Directory Assessment and Privilege Escalation Script - hausec/ADAPE-Script
107 views
Information Security
https://pr0cf5.github.io/ctf/2020/02/09/exploiting-a-bug-in-radare-plugin.html
105 views
Information Security
Continuing the iOS exploit development series:

Part 1: Heap Exploit Development: https://azeria-labs.com/heap-exploit-development-part-1/

Part 2: Heap Overflows and the iOS Kernel Heap https://azeria-labs.com/heap-overflows-and-the-ios-kernel-heap/

✨
NEW: Part 3: Grooming the iOS Kernel Heap https://azeria-labs.com/grooming-the-ios-kernel-heap/
Azeria-Labs
Heap Exploit Development
113 views
Information Security
https://enigma0x3.net/2020/01/15/avira-vpn-local-privilege-escalation-via-insecure-update-location/
enigma0x3
Avira VPN Local Privilege Escalation via Insecure Update Location
Product Version: Avira VPN Operating System tested on: Windows 10 1709 (x64) Vulnerability: Avira VPN Service Local Privilege Escalation Brief Description: When the Phantom VPN Service (Avira.VPNSe…
116 views
Information Security
https://iamalsaher.tech/posts/2020-02-08-cve-2019-18634/
iamalsaher
A CVE Journey: From Crash to Local Privilege Escalation
This post is a complete walkthrough for the process of writing an exploit for CVE 2019-18634. I will talk about the methodologies used and why is it such a good bug to begin your real world exploitation skills. This bug allows for Local Privilege Escalation…
114 views