Information Security
@sec_nerd_en
408 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
408 subscribers
Information Security
Weird XSS filter bypass today:
<embed><embed src="jav&Tab;ascript:al&Tab;ert()"

Reflected as:
<embed src="jav&Tab;ascript:al&Tab;ert()">
117 views
Information Security
https://blog.grimm-co.com/post/analyzing-the-linux-kernel-in-userland-with-afl-and-klee/
113 views
Information Security
https://medium.com/@petergombos/smb-named-pipe-pivoting-in-meterpreter-462580fd41c5
Medium
SMB Named Pipe Pivoting in Meterpreter
A hidden feature of Metasploit, is the ability to add SMB Named Pipe listeners in a meterpreter session to pivot on an internal network…
119 views
Information Security
https://medium.com/@abhishake100/hyperlink-injection-easy-money-sometimes-cc1104655300
Medium
Hyperlink Injection - Easy Money (sometimes)
What is Hyperlink Injection, its basically spoofing or injecting a link while sending an email…
114 views
Information Security
https://hackerone.com/reports/499348
HackerOne
X / xAI disclosed on HackerOne: Twitter lite(Android): Vulnerable...
**Summary:** com.twitter.android.lite.TwitterLiteActivity is set to exported and doesn't validate data pass to intent due to which this activity vulnerable to steal users local files, javascript...
107 views
Information Security
https://www.cyberark.com/threat-research-blog/follow-the-link-exploiting-symbolic-links-with-ease/
CyberArk
Follow the Link: Exploiting Symbolic Links with Ease | CyberArk
Symbolic Link attacks can lead to the escalation of privilege. They are easy to execute and have the potential to cause some serious damage.
111 views
Information Security
Serious back door Vulnerabilities spotted in Tik Tok
https://link.medium.com/iPG0rFpKV3

How to Find Vulnerable Webcams Across the Globe Using Shodan

https://link.medium.com/w897KubuU3

6 Interesting APIs to Check Out in 2020
https://codeburst.io/6-interesting-apis-to-check-out-in-2018-5d6830063f29

#cybersecurity
Medium
Serious back door Vulnerabilities spotted in TikTok
The security flaws were identified by a cybersecurity firm Check Point, which the company claims to have fixed
105 viewsedited  
Information Security
https://github.com/hausec/ADAPE-Script
GitHub
GitHub - hausec/ADAPE-Script: Active Directory Assessment and Privilege Escalation Script
Active Directory Assessment and Privilege Escalation Script - hausec/ADAPE-Script
107 views
Information Security
https://pr0cf5.github.io/ctf/2020/02/09/exploiting-a-bug-in-radare-plugin.html
105 views
Information Security
Continuing the iOS exploit development series:

Part 1: Heap Exploit Development: https://azeria-labs.com/heap-exploit-development-part-1/

Part 2: Heap Overflows and the iOS Kernel Heap https://azeria-labs.com/heap-overflows-and-the-ios-kernel-heap/

✨
NEW: Part 3: Grooming the iOS Kernel Heap https://azeria-labs.com/grooming-the-ios-kernel-heap/
Azeria-Labs
Heap Exploit Development
113 views
Information Security
https://enigma0x3.net/2020/01/15/avira-vpn-local-privilege-escalation-via-insecure-update-location/
enigma0x3
Avira VPN Local Privilege Escalation via Insecure Update Location
Product Version: Avira VPN Operating System tested on: Windows 10 1709 (x64) Vulnerability: Avira VPN Service Local Privilege Escalation Brief Description: When the Phantom VPN Service (Avira.VPNSe…
116 views
Information Security
https://iamalsaher.tech/posts/2020-02-08-cve-2019-18634/
iamalsaher
A CVE Journey: From Crash to Local Privilege Escalation
This post is a complete walkthrough for the process of writing an exploit for CVE 2019-18634. I will talk about the methodologies used and why is it such a good bug to begin your real world exploitation skills. This bug allows for Local Privilege Escalation…
114 views
Information Security
https://x-c3ll.github.io/posts/UAF-PHP-disable_functions/
149 views
Information Security
https://www.dionach.com/blog/how-to-use-owasp-amass-an-extensive-tutorial/
120 views
Information Security
Shell scripts for automating the tasks
https://github.com/shibli2700/Rekon

Cheatsheet God
https://github.com/OlivierLaflamme/Cheatsheet-God

Recon tool made for the #OSCP labs
https://github.com/codingo/Reconnoitre

Vuln Scanner
https://github.com/future-architect/vuls

Vulnhub Cheatsheet
https://github.com/Ignitetechnologies/Privilege-Escalation

#cybersecurity,#bugbounty
GitHub
GitHub - shiblisec/Rekon: The project contains multiple shell scripts for automating the tasks during recon.
The project contains multiple shell scripts for automating the tasks during recon. - GitHub - shiblisec/Rekon: The project contains multiple shell scripts for automating the tasks during recon.
138 views
Information Security
https://azeria-labs.com/heap-exploit-development-part-1/
Azeria-Labs
Heap Exploit Development
120 views
Information Security
https://github.com/etlownoise/xolo
GitHub
GitHub - etlownoise/xolo: Tool to crawl, visualize and interact with SQL server links in a d3 graph to help in your red/blue/purple/.../risk…
Tool to crawl, visualize and interact with SQL server links in a d3 graph to help in your red/blue/purple/.../risk assessments pentest hacking team exercises. - GitHub - etlownoise/xolo: Tool to...
122 views
Information Security
Facebook BugBounty

https://t.co/4QlXy2yJNv
https://t.co/Q5jr56KM7H
https://t.co/4dgyrgffYn
https://t.co/z4FmmyO8xy
https://t.co/2XBTxHQ0dK
https://t.co/mXYxn4kpTJ
https://t.co/IcOkvpSKNx
https://t.co/cplMUSfyXm

#bugbountytips
Medium
Facebook New Account Verification Bypass
On September 22, 2019, at 11:30 pm, I was preparing for my board exam and I feel tired reading all those stuff. Then I think to open…
118 views
Information Security
Easy Asset discovery

curl -s -X POST --data "url=$1&Submit1=Submit" https://suip.biz/?act=amass | grep $1 | cut -d ">" -f 2 | awk 'NF' | uniq

curl -s -X POST --data "url=$1&Submit1=Submit" https://suip.biz/?act=subfinder | grep $1 | cut -d ">" -f 2 | awk 'NF' | uniq
120 views
Information Security
https://sid-500.com/2020/02/11/powershell-manipulate-strings-bulk-in-text-files-for-further-processing/
SID-500.COM
PowerShell: Manipulate Strings (Bulk) in Text Files for further processing
Lately, I’ve prepared some PowerPoint slides for the scripting module of a course for ongoing system engineers. Now it’s time to share my work with the PowerShell community. The slides …
113 views