Information Security
@sec_nerd_en
408 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
408 subscribers
Information Security
https://n4r1b.netlify.com/en/posts/2020/01/dissecting-the-windows-defender-driver-wdfilter-part-1/
107 views
Information Security
“Mastering the Skills of Bug Bounty” by Vickie Li https://link.medium.com/6pvcq3t0Z3
Medium
Mastering the Skills of Bug Bounty
Your syllabus for going from newbie to top hacker
112 views
Information Security
https://securityboulevard.com/2020/02/checkmarx-research-soundcloud-api-security-advisory/
Security Boulevard
Checkmarx Research: SoundCloud API Security Advisory - Security Boulevard
Recently, the Checkmarx Security Research team investigated the online music platform SoundCloud. According to their website, “As the world’s largest music and audio platform, SoundCloud lets people discover and enjoy the greatest selection of music from…
114 views
Information Security
https://github.com/malrev/ABD
GitHub
GitHub - malrev/ABD: Course materials for Advanced Binary Deobfuscation by NTT Secure Platform Laboratories
Course materials for Advanced Binary Deobfuscation by NTT Secure Platform Laboratories - malrev/ABD
110 views
Information Security
https://github.com/randorisec/MobileHackingCheatSheet
GitHub
GitHub - randorisec/MobileHackingCheatSheet: Basics on commands/tools/info on how to assess the security of mobile applications
Basics on commands/tools/info on how to assess the security of mobile applications - randorisec/MobileHackingCheatSheet
116 views
Information Security
https://twitter.com/pyn3rd/status/1227604675467202561?s=20
Twitter
pyn3rd
#CVE-2019-17564 Apache Dubbo deserialization RCE https://t.co/3JiuKTo7Sl
114 views
Information Security
https://research.securitum.com/css-data-exfiltration-in-firefox-via-single-injection-point/
research.securitum.com
CSS data exfiltration in Firefox via a single injection point - research.securitum.com
A few months ago I identified a security issue in Firefox known as CVE-2019-17016. During analysis of the issue, I’ve come up with a new technique of CSS data exfiltration in Firefox via a single injection point which I’m going to share in this blog post.
110 views
Information Security
https://medium.com/@swapmaurya20/a-simple-idor-to-account-takeover-88b8a1d2ec24
Medium
A Simple IDOR to Account Takeover
Getting Started with IDOR, What is IDOR?
110 views
Information Security
https://github.com/504ensicsLabs/LiME
GitHub
GitHub - 504ensicsLabs/LiME: LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory…
LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquir...
122 views
Information Security
“Recon Everything” by SACHIN GROVER https://link.medium.com/ReykAnzk23
Medium
Recon Everything
Bug Bounty Hunting Tip #1- Always read the Source Code
111 views
Information Security
https://n4r1b.netlify.com/posts/2020/01/dissecting-the-windows-defender-driver-wdfilter-part-1/
104 views
Information Security
https://github.com/SinaKarvandi/Misc/tree/master/Message%20Tracing
GitHub
SinaKarvandi/Misc
This is a place to share my miscellaneous projects. - SinaKarvandi/Misc
100 views
Information Security
https://about.gitlab.com/blog/2020/02/12/plundering-gcp-escalating-privileges-in-google-cloud-platform
about.gitlab.com
Google Cloud privilege escalation & post-exploitation tactics
A Red Team exercise on exploiting design decisions on GCP.
100 views
Information Security
https://github.com/merrychap/shellen
GitHub
GitHub - merrychap/shellen: :cherry_blossom: Interactive shellcoding environment to easily craft shellcodes
:cherry_blossom: Interactive shellcoding environment to easily craft shellcodes - merrychap/shellen
95 views
Information Security
http://www.hexacorn.com/blog/2020/02/13/run-lola-bin-run/
94 views
Information Security
https://ajxchapman.github.io/bugbounty/2020/02/10/on-full-time-bug-bounty-hunting.html
103 views
Information Security
https://www.secjuice.com/modsecurity-vulnerability-cve-2019-19886/
102 views
Information Security
http://www.phrack.org/papers/emulating_hypervisors_samsung_rkp.html
phrack.org
.:: Phrack Magazine ::.
Phrack staff website.
108 views
Information Security
https://www.praetorian.com/blog/running-a-net-assembly-in-memory-with-meterpreter
Praetorian
Running a .NET Assembly in Memory with Meterpreter
In this blog post I will discuss leveraging Meterpreter’s powershell module to execute .NET assemblies in-memory. Metasploit and Meterpreter are effective and useful tools, but occasionally one encounters a situation where they lack features. Cobalt Strike…
119 views
Information Security
https://0x00sec.org/t/anti-virus-exploitation-malwarebytes-4-0-4-protection-not-found-hijacking-malwarebytes-via-com-ipc/18766
0x00sec - The Home of the Hacker
Anti-virus Exploitation: Malwarebytes 4.0.4 - Protection Not Found - Hijacking Malwarebytes via COM IPC
Hijacking Malwarebytes via COM IPC Attacking K7 Security was my first attempt at discovering, analysing, and exploiting software at the protocol level. It made me curious as to how other vendors designed and developed their inter-process communication (IPC)…
111 views