Information Security
@sec_nerd_en
414 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
414 subscribers
Information Security
https://securelist.com/the-teamspy-crew-attacks-abusing-teamviewer-for-cyberespionage-8/35520/
Securelist
The TeamSpy Crew Attacks – Abusing TeamViewer for Cyberespionage
Earlier today, the Laboratory of Cryptography and System Security (CrySyS Lab), together with the Hungarian National Security Authority (NFB), published details on a high profile targeted attack against Hungary. The details about the exact targets are not…
37 views
Information Security
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2018/03/20134928/theteamspystory_final_t2.pdf
36 views
Information Security
just because you can put anything in containers

doesn't mean you should put everything in containers
35 views
Information Security
parse #formbook PCAPs containing HTTP requests to C&C.extracting: * Beaconing requests * Intercepted HTML forms * Password Recoveries * Clipboard data * Screenshot

https://bit.ly/2Czyy8c
40 views
Information Security
Active Directory Assessment and Privilege Escalation Script

https://github.com/hausec/ADAPE-Script/tree/master
35 views
Information Security
pypykatz

Mimikatz implementation in pure Python. -offline minidump parsing currently-
Runs on all OS's which support python>=3.6

https://github.com/skelsec/pypykatz
GitHub
GitHub - skelsec/pypykatz: Mimikatz implementation in pure Python
Mimikatz implementation in pure Python. Contribute to skelsec/pypykatz development by creating an account on GitHub.
37 views
Information Security
Forwarded from امنیت اطلاعات
This media is not supported in your browser
VIEW IN TELEGRAM
syn flood

#ddos
#fun

@sec_nerd
3 views
Information Security
CVE-2018-8120 Windows LPE PoC

https://github.com/alpha1ab/CVE-2018-8120/tree/master/CVE-2018-8120
GitHub
CVE-2018-8120/CVE-2018-8120 at master · alpha1ab/CVE-2018-8120
CVE-2018-8120 Exploit for Win2003 Win2008 WinXP Win7 - CVE-2018-8120/CVE-2018-8120 at master · alpha1ab/CVE-2018-8120
47 views
Information Security
https://www.nbcnews.com/news/china/china-s-hackers-are-stealing-secrets-u-s-firms-again-n917836
NBC News
They're back: Chinese hackers are stealing from U.S. firms again
A report by the cybersecurity firm CrowdStrike says China is ramping up efforts to steal U.S. intellectual property under Trump.
46 views
Information Security
Now DLL_to_EXE supports also 64bit DLLs:

https://github.com/hasherezade/dll_to_exe
GitHub
GitHub - hasherezade/dll_to_exe: Converts a DLL into EXE
Converts a DLL into EXE. Contribute to hasherezade/dll_to_exe development by creating an account on GitHub.
50 views
Information Security
Top 10 Web Hacking Techniques of 2017

https://portswigger.net/blog/top-10-web-hacking-techniques-of-2017
PortSwigger Research
Top 10 Web Hacking Techniques of 2017
The verdict is in! Following 37 nominations whittled down to a shortlist of 15 by a community vote, our panel of experts has conferred and selected the top 10 web hacking techniques of 2017 (and 2016)
38 views
Information Security
windows
35 views
Information Security
When you’ve slept for 2 hours and think that coffee will help.
43 views
Information Security
Extending Burp to Find Struts and XXE Vulnerabilities

https://www.irongeek.com/i.php?page=videos/derbycon8/stable-21-extending-burp-to-find-struts-and-xxe-vulnerabilities-chris-elgee
Irongeek
Extending Burp to Find Struts and XXE Vulnerabilities - Chris Elgee Derbycon 2018 (Hacking Illustrated Series InfoSec Tutorial…
Irongeek's Information Security site with tutorials, articles and other information.
45 views
Information Security
#fun
43 views
Information Security
#fun
49 views
Information Security
Windows oneliners to download remote payload and execute arbitrary code


https://arno0x0x.wordpress.com/2017/11/20/windows-oneliners-to-download-remote-payload-and-execute-arbitrary-code/
arno0x0x
Windows oneliners to download remote payload and execute arbitrary code
In the wake of the recent buzz and trend in using DDE for executing arbitrary command lines and eventually compromising a system, I asked myself « what are the coolest command lines an a…
44 views
Information Security
https://www.bis.cz/aktuality/koudelka-bis-prispela-k-odkryti-a-vypnuti-hackerskych-serveru-hizballahu-017f44eb.html
38 views
Information Security
https://www.zdnet.com/article/around-62-of-all-internet-sites-will-run-an-unsupported-php-version-in-10-weeks/
ZDNET
Around 62 percent of all Internet sites will run an unsupported PHP version in 10 weeks
The highly popular PHP 5.x branch will stop receiving security updates at the end of the year.
37 views
Information Security
https://medium.com/walmartlabs/vba-stomping-advanced-maldoc-techniques-612c484ab278
Medium
VBA Stomping — Advanced Maldoc Techniques
Authors: Kirk Sayre (@bigmacjpg), Harold Ogden (@haroldogden) and Carrie Roberts (@OrOneEqualsOne)
38 views