Information Security
@sec_nerd_en
415 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
415 subscribers
Information Security
#fun
49 views
Information Security
Windows oneliners to download remote payload and execute arbitrary code


https://arno0x0x.wordpress.com/2017/11/20/windows-oneliners-to-download-remote-payload-and-execute-arbitrary-code/
arno0x0x
Windows oneliners to download remote payload and execute arbitrary code
In the wake of the recent buzz and trend in using DDE for executing arbitrary command lines and eventually compromising a system, I asked myself « what are the coolest command lines an a…
44 views
Information Security
https://www.bis.cz/aktuality/koudelka-bis-prispela-k-odkryti-a-vypnuti-hackerskych-serveru-hizballahu-017f44eb.html
38 views
Information Security
https://www.zdnet.com/article/around-62-of-all-internet-sites-will-run-an-unsupported-php-version-in-10-weeks/
ZDNET
Around 62 percent of all Internet sites will run an unsupported PHP version in 10 weeks
The highly popular PHP 5.x branch will stop receiving security updates at the end of the year.
37 views
Information Security
https://medium.com/walmartlabs/vba-stomping-advanced-maldoc-techniques-612c484ab278
Medium
VBA Stomping — Advanced Maldoc Techniques
Authors: Kirk Sayre (@bigmacjpg), Harold Ogden (@haroldogden) and Carrie Roberts (@OrOneEqualsOne)
38 views
Information Security
http://www.itv.com/news/2018-10-14/julian-assanges-communications-partly-restored-by-ecuadorian-government/
ITV News
Julian Assange’s communications partly restored by Ecuadorian government
The Ecuadorian government has decided to partly restore communications for WikiLeaks founder Julian Assange.They were cut in March, denying him access to the internet or phones and limiting visitors to members of his legal team.He has been living inside Ecuador’s…
41 views
Information Security
https://motherboard.vice.com/en_us/article/8xvzyp/hacking-team-investor-saudi-arabia
Vice
Hacking Team Is Still Alive Thanks to a Mysterious Investor From Saudi Arabia
An investor from Saudi Arabia is apparently behind a company that bought a stake in the controversial spyware vendor.
43 views
Information Security
https://www.endgame.com/blog/technical-blog/kernel-mode-threats-practical-defenses-part-2
Elastic Blog
Introducing Elastic Endpoint Security
42 views
Information Security
https://pdfs.semanticscholar.org/37ea/54247bb3bedd356f5171ee5f8e1a83662dfc.pdf
50 views
Information Security
Auto-Root-Exploit

https://github.com/nilotpalbiswas/Auto-Root-Exploit


#privesc
#linux


@sec_nerd
309 views
Information Security
Packet capture on Windows without drivers

https://www.nospaceships.com/2018/09/19/packet-capture-on-windows-without-drivers.html
NoSpaceships Ltd
Packet capture on Windows without drivers
Introduction
56 views
Information Security
exploitation notes for CVE-2018-17456 (.gitmodules RCE)

CVE-2018-17456

https://gist.github.com/joernchen/38dd6400199a542bc9660ea563dcf2b6
Gist
CVE-2018-17456
CVE-2018-17456. GitHub Gist: instantly share code, notes, and snippets.
45 views
Information Security
47 views
Information Security
Abusing the COM Registry Structure: CLSID, LocalServer32, & InprocServer32

https://bohops.com/2018/06/28/abusing-com-registry-structure-clsid-localserver32-inprocserver32/
46 views
Information Security
Abusing the COM Registry Structure (Part 2): Hijacking & Loading Techniques

https://bohops.com/2018/08/18/abusing-the-com-registry-structure-part-2-loading-techniques-for-evasion-and-persistence/
49 views
Information Security
Undetectable C# & C++ Reverse Shells

https://medium.com/@Bank_Security/undetectable-c-c-reverse-shells-fab4c0ec4f15
Medium
Undetectable C# & C++ Reverse Shells
Technical overview of different way to spawn a reverse shell on a victim machine
64 views
Information Security
https://www.gchq.gov.uk/news-article/gchq-engineering-accelerator-seeks-tech-talent-manchester?pk_campaign=20181019&pk_kwd=engacc
54 views
Information Security
Useful resources for #iOS #pentesting / pwning http://file.allitebooks.com/20170130/iOS%20Penetration%20Testing.pdf
60 views
Information Security
47 views
Information Security
Portable car hacking box
56 views