Information Security
@sec_nerd_en
412 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
412 subscribers
Information Security
Lots to dive into this week's CryptOsint.

U.S. Treasury tries its hand at graphic design, Paul Singer & Jack Dorsey make up, AND Russian oligarchs are investing in Telegram's ICO.


https://mailchi.mp/782847570f22/us-treasury-shows-how-chinese-nationals-launder-money-for-dprk
111 views
Information Security
https://www.youtube.com/watch?v=nNBktKw9Is4
YouTube
Hardware Wallet Hack: Ledger Nano S - f00dbabe
It was found that the Ledger Nano S bootloader can be tricked into flashing and executing untrusted firmware.

Research Site: https://wallet.fail/
Twitter: https://twitter.com/walletfail
Thomas Roth: https://twitter.com/stacksmashing
original wallet.fail…
108 views
Information Security
https://bo0om.ru/icloud-phishers
101 views
Information Security
https://medium.com/@br4nsh/a-meterpreter-and-windows-proxy-case-4af2b866f4a1
Medium
A Meterpreter and Windows proxy case
Introduction
97 views
Information Security
No Privilege Escalating through standard methods ?

whoami /priv

If you got one of these == win 😏


SeBackupPrivilege, SeDebugPrivilege, SeTakeOwnershipPrivilege, SeTcbPrivilege, SeCreateToken Privilege, SeLoadDriver Privilege, SeImpersonate

#infosec #pentest #redteam
106 views
Information Security
https://www.cybereason.com/blog/excel4.0-macros-now-with-twice-the-bits
Cybereason
Excel4.0 Macros - Now with Twice The Bits!
In this research, we outline how to enable the execution of 64-bit shellcode via Excel 4.0 macros and previous research on 32-bit shellcode.
99 views
Information Security
https://www.youtube.com/watch?v=O7CuFlM4V54
YouTube
How a packet moves through network
How a packet moves through network
108 views
Information Security
https://github.com/saferwall/saferwall
GitHub
GitHub - saferwall/saferwall: :cloud: Collaborative Malware Analysis Platform at Scale
:cloud: Collaborative Malware Analysis Platform at Scale - GitHub - saferwall/saferwall: :cloud: Collaborative Malware Analysis Platform at Scale
109 views
Information Security
https://tryhackme.com/
TryHackMe
TryHackMe | Cyber Security Training
TryHackMe is a free online platform for learning cyber security, using hands-on exercises and labs, all through your browser!
109 views
Information Security
Some Old is Gold #bugbountytips blogs

https://t.co/BytIaQyyZ6
https://t.co/bgLAhywjUX
https://t.co/jQGhQaIh9X
https://t.co/3HmSyYtcF9
https://t.co/yhDXByNAI4
https://t.co/fIvV5DnIr8
https://t.co/QCNYtr9YSF
https://t.co/C45vHqJAJz
https://t.co/F3mP5L8jPr
https://t.co/wteg0h1ytk
Medium
Web Application Security & Bug Bounty (Methodology, Reconnaissance, Vulnerabilities, Reporting)
Hello Folks , Hope everyone is doing good. This blog is basically for Web Security Methodology (WSM).
135 viewsedited  
Information Security
https://pwnrules.com/flickr-from-sql-injection-to-rce/
105 views
Information Security
https://medium.com/bugbountywriteup/sql-injection-to-lfi-to-rce-536bed29a862
Medium
SQL injection to RCE
In the next lines I will expose a curious case that I experimented in a customer penetration testing days ago…
109 views
Information Security
https://twitter.com/Naategh_/status/1238164376491675648
#bugbounty #bugbountytips
Twitter
Naategh
While hunting on a Node js target always pass '%ff' as URL like target.com/%ff, Most times it causes an error that leaks full path of the site and some bb programs accept it as a valid issue. I earned more than 400$ via this simple trick! #bugbounty #bugbountytips
105 views
Information Security
https://itm4n.github.io/cve-2020-0787-windows-bits-eop/
itm4n’s blog
CVE-2020-0787 - Windows BITS - An EoP Bug Hidden in an Undocumented RPC Function
This post is about an arbitrary file move vulnerability I found in the Background Intelligent Transfer Service. This is yet another example of a privileged file operation abuse in Windows 10. There is nothing really new but the bug itself is quite interesting…
97 views
Information Security
https://github.com/knightmare2600/SMBGhost
GitHub
knightmare2600/SMBGhost
Scanner for CVE-2020-0796 - SMBv3 RCE. Contribute to knightmare2600/SMBGhost development by creating an account on GitHub.
109 views
Information Security
https://www.synacktiv.com/posts/exploit/im-smbghost-daba-dee-daba-da.html
89 views
Information Security
Account takeover

https://t.co/YCK3GB5sJk
https://t.co/eRlkj3n6w2
https://t.co/tuQ3xEpIYc
https://t.co/vApKQSS7Ru
https://t.co/7l7wxb9btx
https://t.co/ETHFuyLd1v
https://t.co/z4FmmyO8xy
https://t.co/5EYYOudexQ
https://t.co/KBYLYDvon3
https://t.co/uim3l7JKir

#bugbounty
Medium
Got *Bounty* with Account takeover (ATO ) Unicode-Case Mapping Collision !
Hey hunters ! Recently I discovered a Unicode-Case Mapping Collision vulnerability on a private program.
107 views
Information Security
https://www.bleepingcomputer.com/news/security/new-coronavirus-ransomware-acts-as-cover-for-kpot-infostealer/
BleepingComputer
New CoronaVirus Ransomware Acts as Cover for Kpot Infostealer
A new ransomware called CoronaVirus is has been distributed through a fake web site pretending to promote the system optimization software and utilities from WiseCleaner.
96 views
Information Security
https://github.com/ioncodes/SMBGhost
GitHub
GitHub - ioncodes/SMBGhost: Scanner for CVE-2020-0796 - A SMBv3.1.1 + SMB compression RCE
Scanner for CVE-2020-0796 - A SMBv3.1.1 + SMB compression RCE - GitHub - ioncodes/SMBGhost: Scanner for CVE-2020-0796 - A SMBv3.1.1 + SMB compression RCE
104 views
Information Security
Top #OSINT tools I used last project:

SEcraper - scrape many search engines at once vs query or keyword
https://github.com/zerobyte-id/SEcraper

Spiderfoot
https://spiderfoot.net

http://OSINT.link

Cheat Sheet
https://inteltechniques.com/JE/OSINT_Packet_2019.pdf


Quick Cloudflare bypass
http://crimeflare.org:82/cfs.html
GitHub
GitHub - zerobyte-id/SEcraper: Search engine scraper tool with BASH script.
Search engine scraper tool with BASH script. Contribute to zerobyte-id/SEcraper development by creating an account on GitHub.
115 views