Information Security
@sec_nerd_en
412 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
412 subscribers
Information Security
https://about.gitlab.com/blog/2020/02/12/plundering-gcp-escalating-privileges-in-google-cloud-platform
about.gitlab.com
Google Cloud privilege escalation & post-exploitation tactics
A Red Team exercise on exploiting design decisions on GCP.
100 views
Information Security
https://github.com/merrychap/shellen
GitHub
GitHub - merrychap/shellen: :cherry_blossom: Interactive shellcoding environment to easily craft shellcodes
:cherry_blossom: Interactive shellcoding environment to easily craft shellcodes - merrychap/shellen
95 views
Information Security
http://www.hexacorn.com/blog/2020/02/13/run-lola-bin-run/
94 views
Information Security
https://ajxchapman.github.io/bugbounty/2020/02/10/on-full-time-bug-bounty-hunting.html
103 views
Information Security
https://www.secjuice.com/modsecurity-vulnerability-cve-2019-19886/
102 views
Information Security
http://www.phrack.org/papers/emulating_hypervisors_samsung_rkp.html
Phrack
Introduction
Click to read the article on phrack
108 views
Information Security
https://www.praetorian.com/blog/running-a-net-assembly-in-memory-with-meterpreter
Praetorian
Running a .NET Assembly in Memory with Meterpreter
In this blog post I will discuss leveraging Meterpreter’s powershell module to execute .NET assemblies in-memory. Metasploit and Meterpreter are effective and useful tools, but occasionally one encounters a situation where they lack features. Cobalt Strike…
119 views
Information Security
https://0x00sec.org/t/anti-virus-exploitation-malwarebytes-4-0-4-protection-not-found-hijacking-malwarebytes-via-com-ipc/18766
0x00sec - The Home of the Hacker
Anti-virus Exploitation: Malwarebytes 4.0.4 - Protection Not Found - Hijacking Malwarebytes via COM IPC
Hijacking Malwarebytes via COM IPC Attacking K7 Security was my first attempt at discovering, analysing, and exploiting software at the protocol level. It made me curious as to how other vendors designed and developed their inter-process communication (IPC)…
112 views
Information Security
https://blog.truesec.com/2020/02/12/from-s3-bucket-to-laravel-unserialize-rce/
115 views
Information Security
https://balsn.tw/ctf_writeup/20200208-codegatectf2020quals/
109 views
Information Security
different 2FA bypasses:
evilginx:https://github.com/kgretzky/evilginx2
CredSniper:https://github.com/ustayready/CredSniper
ReelPhish:https://github.com/fireeye/ReelPhish
Modlishka:https://github.com/drk1wi/Modlishka
#pentest #hacking #phishing #redteam #bugbountytip
GitHub
GitHub - kgretzky/evilginx2: Standalone man-in-the-middle attack framework used for phishing login credentials along with session…
Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication - kgretzky/evilginx2
130 views
Information Security
https://medium.com/bugbountywriteup/how-i-discovered-an-interesting-account-takeover-flaw-18a7fb1e5359
Medium
How I discovered an interesting account takeover flaw?
Hi everyone, today I will talk about an interesting account takeover flaw which I found around a year back. The root cause of this issue…
114 views
Information Security
http://www.hexacorn.com/blog/2020/02/14/run-dll-walk-this-way/
120 views
Information Security
https://gist.github.com/plasticbrain/3887245
Gist
PHP: mime types (array format)
PHP: mime types (array format). GitHub Gist: instantly share code, notes, and snippets.
113 views
Information Security
This media is not supported in your browser
VIEW IN TELEGRAM
https://portswigger.net/support/configuring-burp-suites-session-handling-rules
105 views
Information Security
CVE-2019-18683: Exploiting a Linux kernel vulnerability in the V4L2 subsystem
https://a13xp0p0v.github.io/2020/02/15/CVE-2019-18683.html


slides: https://a13xp0p0v.github.io/img/CVE-2019-18683.pdf

PoC exploit demo video: https://youtube.com/watch?v=mb4YHyLy0Zc

Enjoy!
Alexander Popov
CVE-2019-18683: Exploiting a Linux kernel vulnerability in the V4L2 subsystem
This article discloses exploitation of CVE-2019-18683, which refers to multiple five-year-old race conditions in the V4L2 subsystem of the Linux kernel. I found and fixed them at the end of 2019. Here I'm going to describe a PoC exploit for x86_64 that gains…
129 views
Information Security
https://ironnet.com/blog/dns-tunneling-series-part-3-the-siren-song-of-roguerobin/
Ironnet
DNS tunneling series, part 3: The siren song of RogueRobin
87 views
Information Security
http://www.phobosys.de/blog_february_20.html
www.phobosys.de
Writeup for Pwnable.tw Challenge #4
Writeup how to reverse elf binaries and solve pwnable.tw challenge 4
94 views
Information Security
https://github.com/maddiestone/ConPresentations/blob/master/OffensiveCon2020.BadBinder.pdf
GitHub
ConPresentations/OffensiveCon2020.BadBinder.pdf at master · maddiestone/ConPresentations
Slide decks from my conference presentations. Contribute to maddiestone/ConPresentations development by creating an account on GitHub.
85 views
Information Security
Useful for #redteam

PENTESTING-BIBLE
https://github.com/blaCCkHatHacEEkr/PENTESTING-BIBLE
Nishang
https://github.com/samratashok/nishang
Awesome Red Teaming
https://github.com/yeyintminthuhtut/Awesome-Red-Teaming
LOLBins and LOLScripts
https://github.com/LOLBAS-Project/LOLBAS
Collection Document
https://github.com/tom0li/collection-document
Venom
https://github.com/Dliv3/Venom

#bugbountytip
GitHub
GitHub - blaCCkHatHacEEkr/PENTESTING-BIBLE: articles
articles. Contribute to blaCCkHatHacEEkr/PENTESTING-BIBLE development by creating an account on GitHub.
115 views