Information Security
@sec_nerd_en
412 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
412 subscribers
Information Security
https://x-c3ll.github.io/posts/UAF-PHP-disable_functions/
Doomsday Vault
From memory corruption to disable_functions bypass: understanding PHP exploits
Overview of PHP internals related with disable_functions and how common exploits works
149 views
Information Security
https://www.dionach.com/blog/how-to-use-owasp-amass-an-extensive-tutorial/
120 views
Information Security
Shell scripts for automating the tasks
https://github.com/shibli2700/Rekon

Cheatsheet God
https://github.com/OlivierLaflamme/Cheatsheet-God

Recon tool made for the #OSCP labs
https://github.com/codingo/Reconnoitre

Vuln Scanner
https://github.com/future-architect/vuls

Vulnhub Cheatsheet
https://github.com/Ignitetechnologies/Privilege-Escalation

#cybersecurity,#bugbounty
GitHub
GitHub - shiblisec/Rekon: The project contains multiple shell scripts for automating the tasks during recon.
The project contains multiple shell scripts for automating the tasks during recon. - GitHub - shiblisec/Rekon: The project contains multiple shell scripts for automating the tasks during recon.
138 views
Information Security
https://azeria-labs.com/heap-exploit-development-part-1/
Azeria-Labs
Heap Exploit Development
120 views
Information Security
https://github.com/etlownoise/xolo
GitHub
GitHub - etlownoise/xolo: Tool to crawl, visualize and interact with SQL server links in a d3 graph to help in your red/blue/purple/.../risk…
Tool to crawl, visualize and interact with SQL server links in a d3 graph to help in your red/blue/purple/.../risk assessments pentest hacking team exercises. - GitHub - etlownoise/xolo: Tool to...
122 views
Information Security
Facebook BugBounty

https://t.co/4QlXy2yJNv
https://t.co/Q5jr56KM7H
https://t.co/4dgyrgffYn
https://t.co/z4FmmyO8xy
https://t.co/2XBTxHQ0dK
https://t.co/mXYxn4kpTJ
https://t.co/IcOkvpSKNx
https://t.co/cplMUSfyXm

#bugbountytips
Medium
Facebook New Account Verification Bypass
On September 22, 2019, at 11:30 pm, I was preparing for my board exam and I feel tired reading all those stuff. Then I think to open…
118 views
Information Security
Easy Asset discovery

curl -s -X POST --data "url=$1&Submit1=Submit" https://suip.biz/?act=amass | grep $1 | cut -d ">" -f 2 | awk 'NF' | uniq

curl -s -X POST --data "url=$1&Submit1=Submit" https://suip.biz/?act=subfinder | grep $1 | cut -d ">" -f 2 | awk 'NF' | uniq
120 views
Information Security
https://sid-500.com/2020/02/11/powershell-manipulate-strings-bulk-in-text-files-for-further-processing/
SID-500.COM
PowerShell: Manipulate Strings (Bulk) in Text Files for further processing
Lately, I’ve prepared some PowerPoint slides for the scripting module of a course for ongoing system engineers. Now it’s time to share my work with the PowerShell community. The slides …
113 views
Information Security
https://n4r1b.netlify.com/en/posts/2020/01/dissecting-the-windows-defender-driver-wdfilter-part-1/
107 views
Information Security
“Mastering the Skills of Bug Bounty” by Vickie Li https://link.medium.com/6pvcq3t0Z3
Medium
Mastering the Skills of Bug Bounty
Your syllabus for going from newbie to top hacker
112 views
Information Security
https://securityboulevard.com/2020/02/checkmarx-research-soundcloud-api-security-advisory/
Security Boulevard
Checkmarx Research: SoundCloud API Security Advisory - Security Boulevard
Recently, the Checkmarx Security Research team investigated the online music platform SoundCloud. According to their website, “As the world’s largest music and audio platform, SoundCloud lets people discover and enjoy the greatest selection of music from…
114 views
Information Security
https://github.com/malrev/ABD
GitHub
GitHub - malrev/ABD: Course materials for Advanced Binary Deobfuscation by NTT Secure Platform Laboratories
Course materials for Advanced Binary Deobfuscation by NTT Secure Platform Laboratories - malrev/ABD
110 views
Information Security
https://github.com/randorisec/MobileHackingCheatSheet
GitHub
GitHub - randorisec/MobileHackingCheatSheet: Basics on commands/tools/info on how to assess the security of mobile applications
Basics on commands/tools/info on how to assess the security of mobile applications - randorisec/MobileHackingCheatSheet
116 views
Information Security
https://twitter.com/pyn3rd/status/1227604675467202561?s=20
Twitter
pyn3rd
#CVE-2019-17564 Apache Dubbo deserialization RCE https://t.co/3JiuKTo7Sl
114 views
Information Security
https://research.securitum.com/css-data-exfiltration-in-firefox-via-single-injection-point/
research.securitum.com
CSS data exfiltration in Firefox via a single injection point - research.securitum.com
A few months ago I identified a security issue in Firefox known as CVE-2019-17016. During analysis of the issue, I’ve come up with a new technique of CSS data exfiltration in Firefox via a single injection point which I’m going to share in this blog post.
110 views
Information Security
https://medium.com/@swapmaurya20/a-simple-idor-to-account-takeover-88b8a1d2ec24
Medium
A Simple IDOR to Account Takeover
Getting Started with IDOR, What is IDOR?
110 views
Information Security
https://github.com/504ensicsLabs/LiME
GitHub
GitHub - 504ensicsLabs/LiME: LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory…
LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquir...
122 views
Information Security
“Recon Everything” by SACHIN GROVER https://link.medium.com/ReykAnzk23
Medium
Recon Everything
Bug Bounty Hunting Tip #1- Always read the Source Code
111 views
Information Security
https://n4r1b.netlify.com/posts/2020/01/dissecting-the-windows-defender-driver-wdfilter-part-1/
104 views
Information Security
https://github.com/SinaKarvandi/Misc/tree/master/Message%20Tracing
GitHub
SinaKarvandi/Misc
This is a place to share my miscellaneous projects. - SinaKarvandi/Misc
100 views