Information Security – Telegram

Information Security

408 subscribers

157 photos

5 videos

9 files

2.28K links

Information Security News

we are @sec_nerd twin brother

Download Telegram

About

Blog

Apps

Platform

Information Security

408 subscribers

Information Security

https://medium.com/tenable-techblog/bypass-windows-10-user-group-policy-and-more-with-this-one-weird-trick-552d4bc5cc1b

Bypass Windows 10 User Group Policy (and more) with this One Weird Trick

I‘m going to share an (ab)use of a Windows feature which can result in bypassing User Group Policy (as well as a few other interesting…

117 views18:37

Information Security

https://github.com/0xn0ne/weblogicScanner

GitHub - 0xn0ne/weblogicScanner: weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017…

weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-32...

206 views18:43

Information Security

Mastering the Skills of Bug Bounty
https://medium.com/swlh/mastering-the-skills-of-bug-bounty-2201eb6a9f4
From Recon to Optimizing RCE Results
https://medium.com/bugbountywriteup/from-recon-to-optimizing-rce-results-simple-story-with-one-of-the-biggest-ict-company-in-the-ea710bca487a
Exploiting WebSocket
https://medium.com/@osamaavvan/exploiting-websocket-application-wide-xss-csrf-66e9e2ac8dfa
Top 10 Operating Systems for Ethical Hackers
https://medium.com/the-lotus-fruit/top-10-operating-systems-for-ethical-hackers-and-penetration-testers-2020-list-b523b611cdbb

#BugBounty

Mastering the Skills of Bug Bounty

Your syllabus for going from newbie to top hacker

104 views18:43

Information Security

Write-up on Fanta Android malware

[In Russian]

https://group-ib.ru/blog/fanta

blog.group-ib.ru

Лейся, Fanta!

Известный Android-троян сменил тактику и «заработал» десятки миллионов рублей на российских пользователях

107 views18:45

Information Security

#PentestTools

Osmedeus
https://github.com/j3ssie/Osmedeus
lscript
https://github.com/arismelachroinos/lscript
Raccoon
https://github.com/evyatarmeged/Raccoon
xssor2
https://github.com/evilcos/xssor2
SSRF-Testing
https://github.com/cujanovic/SSRF-Testing
EggShell
https://github.com/neoneggplant/EggShell
dirmap
https://github.com/H4ckForJob/dirmap

#bugbounty,#CyberSecurity

GitHub - j3ssie/osmedeus: A Workflow Engine for Offensive Security

A Workflow Engine for Offensive Security. Contribute to j3ssie/osmedeus development by creating an account on GitHub.

135 views06:00

Information Security

https://solokeys.com/blogs/news/security-analysis-of-the-solo-firmware-by-doyensec

Security Analysis of the Solo Firmware

We engaged Doyensec to perform a security assessment of our firmware, v3.0.1 at the time of testing. During a 10 person/days project, Doyensec discovered and reported 3 vulnerabilities in our firmware. While two of the issues are considered informational…

141 views06:10

Information Security

https://www.mdsec.co.uk/2020/02/iis-raid-backdooring-iis-using-native-modules/

IIS Raid – Backdooring IIS Using Native Modules - MDSec

Introduction Back in 2018, PaloAlto Unit42 publicly documented RGDoor, an IIS backdoor used by the APT34. The article highlighted some details which sparked my interest and inspired me to write...

152 views06:19

Information Security

https://portswigger.net/burp/documentation/collaborator

portswigger.net

Burp Collaborator

Burp Collaborator is a network service that enables you to detect invisible vulnerabilities. These are vulnerabilities that don't: Trigger error messages. ...

111 views07:00

Information Security

https://github.com/monoxgas/Koppeling/

GitHub - monoxgas/Koppeling: Adaptive DLL hijacking / dynamic export forwarding

Adaptive DLL hijacking / dynamic export forwarding - monoxgas/Koppeling

106 views04:54

Information Security

For pentesting, Add this to your .bashrc file:

PS1='[date +"%d-%b-%y %T"] > '
test "$(ps -ocommand= -p $PPID | awk '{print $1}')" == 'script' || (script -f $HOME/logs/$(date +"%d-%b-%y_%H-%M-%S")_shell.log)

Now you can have a log of everything you did and when you did it.

126 views04:54

Information Security

https://shells.systems/cacti-v1-2-8-authenticated-remote-code-execution-cve-2020-8813/

Cacti v1.2.8 authenticated Remote Code Execution (CVE-2020-8813) - Shells.Systems

Estimated Reading Time: 8 minutes Summary about Cacti Cacti is a complete network graphing solution designed to harness the power of RRDTool’s data storage and graphing functionality, Cacti provides a fast poller, advanced graph templating, multiple data…

106 views04:55

Information Security

https://medium.com/@cryps1s/endpoint-isolation-with-the-windows-firewall-462a795f4cfb

Endpoint Isolation with the Windows Firewall

Over the last few weeks, I’ve had conversations with several individuals around mitigating lateral movement in a Windows environment. In…

106 views05:00

Information Security

A step-by-step Linux Kernel exploitation (4 part series)

https://blog.lexfo.fr/cve-2017-11176-linux-kernel-exploitation-part1.html

https://blog.lexfo.fr/cve-2017-11176-linux-kernel-exploitation-part2.html

https://blog.lexfo.fr/cve-2017-11176-linux-kernel-exploitation-part3.html

https://blog.lexfo.fr/cve-2017-11176-linux-kernel-exploitation-part4.html

120 views05:01

Information Security

Hacking SQL Server Stored Procedures

1: (un)Trustworthy Databases
https://blog.netspi.com/hacking-sql-server-stored-procedures-part-1-untrustworthy-databases/

2: User Impersonation
https://blog.netspi.com/hacking-sql-server-stored-procedures-part-2-user-impersonation/

3: SQL Injection
https://blog.netspi.com/hacking-sql-server-stored-procedures-part-3-sqli-and-user-impersonation/

4: Enumerating Domain Accounts
https://blog.netspi.com/hacking-sql-server-procedures-part-4-enumerating-domain-accounts/

#infosec #pentest #redteam

Hacking SQL Server Stored Procedures – Part 1: (un)Trustworthy Databases

In this blog I’ll show how database users commonly created for web applications can be used to escalate privileges in SQL Server when database ownership is poorly configured.

153 views05:03

Information Security

https://github.com/afang5472/CVE-2020-0753-and-CVE-2020-0754

GitHub - afang5472/CVE-2020-0753-and-CVE-2020-0754: Writeup and POC for CVE-2020-0753, CVE-2020-0754 and six fixed Window DOS …

Writeup and POC for CVE-2020-0753, CVE-2020-0754 and six fixed Window DOS Vulnerabilities. - afang5472/CVE-2020-0753-and-CVE-2020-0754

112 views18:09

Information Security

CSV Injection: http://ghostlulz.com/csv-injection/

ClickJacking: http://ghostlulz.com/clickjacking/

Exposed Firebase DB: http://ghostlulz.com/google-exposed-firebase-database/

Config Files: http://ghostlulz.com/exposed-log-and-configuration-files/

Kubernetes API : http://ghostlulz.com/exposed-kubernetes-api/

#bugbounty #bugbountytips #bugbountytip #redteam #pentest #infosec #xss

CSV Injection - Ghostlulz

How to use CSV injection AKA Formula injection to embed a malicous payload into to spread sheet.

120 views18:17

Information Security

95 views18:17

Information Security

#PostExploitation

Pentesting_Toolkit
https://github.com/bt3gl/Pentesting_Toolkit
pupy
https://github.com/n1nj4sec/pupy
fsociety
https://github.com/Manisso/fsociety
hacker-roadmap
https://github.com/sundowndev/hacker-roadmap
mimipenguin
https://github.com/huntergregal/mimipenguin
merlin
https://github.com/Ne0nd0g/merlin
EvilOSX
https://github.com/Marten4n6/EvilOSX

#bugbountytips

GitHub - bt3gl-labs/Pentesting-Toolkit: 🏴‍☠️ Tools for pentesting, CTFs & wargames. - 𝚋𝚢 𝚋𝚝𝟹𝚐𝚕

🏴‍☠️ Tools for pentesting, CTFs & wargames. - 𝚋𝚢 𝚋𝚝𝟹𝚐𝚕 - GitHub - bt3gl-labs/Pentesting-Toolkit: 🏴‍☠️ Tools for pentesting, CTFs & wargames. - 𝚋𝚢 𝚋𝚝𝟹𝚐𝚕

109 views18:23

Information Security

https://github.com/DimopoulosElias/alpc-mmc-uac-bypass

GitHub - DimopoulosElias/alpc-mmc-uac-bypass: UAC Bypass with mmc via alpc

UAC Bypass with mmc via alpc. Contribute to DimopoulosElias/alpc-mmc-uac-bypass development by creating an account on GitHub.

100 views18:24

Information Security

https://medium.com/tsscyber/pentesting-and-hta-bypassing-powershell-constrained-language-mode-53a42856c997

Pentesting and .hta (bypassing PowerShell Constrained Language Mode)

When I’m on an engagement and I’m given a SOE and a domain account, I usually want to use a tool like PowerShell Empire to remotely…

97 views18:26