Information Security
@sec_nerd_en
412 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
412 subscribers
Information Security
https://captmeelo.com/pentest/2020/02/24/bypass-okhttp-cert-pinning.html
116 views
Information Security
https://en.hackndo.com/pass-the-hash/
hackndo
Pass the Hash
Pass the Hash is extremely used in internal pentests to get administrative rights on a set of hosts. We will detail here how this technique works.
109 views
Information Security
https://qy.sg/x-ctf-finals-2016-john-slick-web-25/
Quan Yang
X-CTF Finals 2016 - John Slick (Web 25)
108 views
Information Security
#XXE

https://spaceraccoon.dev/a-tale-of-two-formats-exploiting-insecure-xml-and-zip-file-parsers-to-create-a
https://0xatul.github.io/posts/2020/02/external-xml-entity-via-file-upload-svg/
https://mahmoudsec.blogspot.com/2019/08/exploiting-out-of-band-xxe-using.html
https://mohemiv.com/all/exploiting-xxe-with-local-dtd-files/
https://honoki.net/2018/12/12/from-blind-xxe-to-root-level-file-read-access
https://corben.io/XSS-to-XXE-in-Prince/
https://medium.com/@zain.sabahat/an-interesting-xxe-in-sap-8b35fec6ef33
https://medium.com/@mrnikhilsri/oob-xxe-in-prizmdoc-cve-2018-15805-dfb1e474345c
https://blog.netspi.com/xxe-in-ibms-maas360-platform
https://r00thunt.com/2018/10/05/blind-xml-external-entities-out-of-band-channel-vulnerability-paypal-case-study

#bugbountytips,#bugbounty
spaceraccoon.dev
A Tale of Two Formats: Exploiting Insecure XML and ZIP File Parsers to Create a Web Shell
While researching a bug bounty target, I came across a web application that processed a custom file type which was actually just a ZIP file that contains an XML that functions as a manifest. If handled naively, this packaging pattern creates additional security…
122 views
Information Security
105 views
Information Security
https://www.zerodayinitiative.com/blog/2020/2/24/cve-2020-0688-remote-code-execution-on-microsoft-exchange-server-through-fixed-cryptographic-keys
Zero Day Initiative
Zero Day Initiative — CVE-2020-0688: Remote Code Execution on Microsoft Exchange Server Through Fixed Cryptographic Keys
This most recent Patch Tuesday, Microsoft released an Important-rated patch to address a remote code execution bug in Microsoft Exchange Server. This vulnerability was reported to us by an anonymous researcher and affects all supported versions of Microsoft…
117 views
Information Security
Alway convert parameter to array you will get unexpected result, some times xss bypass
Like,
path=/abc to path["]=/abc
#bugbountytip
126 views
Information Security
Use path parameters if server is Apache Tomcat & running jsp pages . Like
http://site.com/test.jsp;test=<payload>
, This pages can sometimes give xss.
#bugbounty
125 views
Information Security
#WAF #ModSecurity #RCE #Payloads Detection #Bypass
;+$u+cat+/etc$u/passwd$u
;+$u+cat+/etc$u/passwd+\#
/???/??t+/???/??ss??
/?in/cat+/et?/passw?
121 views
Information Security
https://github.com/skysafe/reblog/blob/master/0000-defeating-a-laptops-bios-password/README.md
GitHub
reblog/0000-defeating-a-laptops-bios-password/README.md at main · skysafe/reblog
SkySafe Miscellaneous Reverse Engineering Blog. Contribute to skysafe/reblog development by creating an account on GitHub.
110 views
Information Security
https://research.nccgroup.com/2020/02/21/cve-2018-8611-diving-into-the-windows-kernel-transaction-manager-ktm-for-fun-and-exploitation/
NCC Group Research
CVE-2018-8611 – Diving into the Windows Kernel Transaction Manager (KTM) for fun and exploitation
Written by Cedric Halbronn On Saturday 15th February, I gave a talk titled “How CVE-2018-8611 Can be Exploited to Achieve Privilege Escalation on Windows 10 1809 (RS5) and Earlier”. Thi…
110 views
Information Security
https://mobile-security.gitbook.io/mobile-security-testing-guide/appendix/0x08-testing-tools
114 views
Information Security
https://mobile-security.gitbook.io/mobile-security-testing-guide/overview/0x04b-mobile-app-security-testing
113 views
Information Security
https://github.com/xHak9x/SocialPhish
113 views
Information Security
https://github.com/DarkSecDevelopers/HiddenEye
111 views
Information Security
https://codurance.com/2019/05/30/accessing-and-dumping-jenkins-credentials/
Codurance
Accessing and dumping Jenkins credentials | Codurance
Jenkins offers a credentials store where we can keep our secrets. Of someone stole your source code and dumped your databases, you might think it's game over, but that's not always true...
120 views
Information Security
https://blog.intigriti.com/2020/02/24/twitter-recap-1-bug-bounty-tips-by-the-intigriti-community/
Intigriti
Twitter Recap #1 - Bug Bounty Tips by the Intigriti Community
  Bug Bounty Tips Over the past years we have shared a lot of  tips to help our readers in one way or another. Thinking outside the box or trying a different approach could be the defining factor in...
134 views
Information Security
https://medium.com/@ozguralp/write-up-aws-document-signing-security-control-bypass-2b13a9c22a4d
Medium
Write-up: AWS Document Signing Security Control Bypass
While I prefer more to write/talk about far-going topics instead of just one vulnerability write-up, I decided to make an exception for…
124 views
Information Security
https://0x09al.github.io/waf/bypass/ssl/2018/07/02/web-application-firewall-bypass.html
0x09AL Security blog
Bypassing Web-Application Firewalls by abusing SSL/TLS
During the latest years Web Security has become a very important topic in the IT Security field. The advantages the web offers resulted in very critical services being developed as web applications. The business requirements for their web applications security…
134 views
Information Security
https://www.blackhat.com/docs/us-15/materials/us-15-Kettle-Server-Side-Template-Injection-RCE-For-The-Modern-Web-App-wp.pdf
136 views