Information Security
@sec_nerd_en
421 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
421 subscribers
Information Security
https://www.youtube.com/watch?v=nNBktKw9Is4
YouTube
Hardware Wallet Hack: Ledger Nano S - f00dbabe
It was found that the Ledger Nano S bootloader can be tricked into flashing and executing untrusted firmware.

Research Site: https://wallet.fail/
Twitter: https://twitter.com/walletfail
Thomas Roth: https://twitter.com/stacksmashing
original wallet.fail…
108 views
Information Security
https://bo0om.ru/icloud-phishers
101 views
Information Security
https://medium.com/@br4nsh/a-meterpreter-and-windows-proxy-case-4af2b866f4a1
Medium
A Meterpreter and Windows proxy case
Introduction
97 views
Information Security
No Privilege Escalating through standard methods ?

whoami /priv

If you got one of these == win 😏


SeBackupPrivilege, SeDebugPrivilege, SeTakeOwnershipPrivilege, SeTcbPrivilege, SeCreateToken Privilege, SeLoadDriver Privilege, SeImpersonate

#infosec #pentest #redteam
106 views
Information Security
https://www.cybereason.com/blog/excel4.0-macros-now-with-twice-the-bits
Cybereason
Excel4.0 Macros - Now with Twice The Bits!
In this research, we outline how to enable the execution of 64-bit shellcode via Excel 4.0 macros and previous research on 32-bit shellcode.
99 views
Information Security
https://www.youtube.com/watch?v=O7CuFlM4V54
YouTube
How a packet moves through network
How a packet moves through network
108 views
Information Security
https://github.com/saferwall/saferwall
GitHub
GitHub - saferwall/saferwall: :cloud: Collaborative Malware Analysis Platform at Scale
:cloud: Collaborative Malware Analysis Platform at Scale - GitHub - saferwall/saferwall: :cloud: Collaborative Malware Analysis Platform at Scale
109 views
Information Security
https://tryhackme.com/
TryHackMe
TryHackMe | Cyber Security Training
TryHackMe is a free online platform for learning cyber security, using hands-on exercises and labs, all through your browser!
109 views
Information Security
Some Old is Gold #bugbountytips blogs

https://t.co/BytIaQyyZ6
https://t.co/bgLAhywjUX
https://t.co/jQGhQaIh9X
https://t.co/3HmSyYtcF9
https://t.co/yhDXByNAI4
https://t.co/fIvV5DnIr8
https://t.co/QCNYtr9YSF
https://t.co/C45vHqJAJz
https://t.co/F3mP5L8jPr
https://t.co/wteg0h1ytk
Medium
Web Application Security & Bug Bounty (Methodology, Reconnaissance, Vulnerabilities, Reporting)
Hello Folks , Hope everyone is doing good. This blog is basically for Web Security Methodology (WSM).
135 viewsedited  
Information Security
https://pwnrules.com/flickr-from-sql-injection-to-rce/
105 views
Information Security
https://medium.com/bugbountywriteup/sql-injection-to-lfi-to-rce-536bed29a862
Medium
SQL injection to RCE
In the next lines I will expose a curious case that I experimented in a customer penetration testing days ago…
109 views
Information Security
https://twitter.com/Naategh_/status/1238164376491675648
#bugbounty #bugbountytips
Twitter
Naategh
While hunting on a Node js target always pass '%ff' as URL like target.com/%ff, Most times it causes an error that leaks full path of the site and some bb programs accept it as a valid issue. I earned more than 400$ via this simple trick! #bugbounty #bugbountytips
105 views
Information Security
https://itm4n.github.io/cve-2020-0787-windows-bits-eop/
itm4n’s blog
CVE-2020-0787 - Windows BITS - An EoP Bug Hidden in an Undocumented RPC Function
This post is about an arbitrary file move vulnerability I found in the Background Intelligent Transfer Service. This is yet another example of a privileged file operation abuse in Windows 10. There is nothing really new but the bug itself is quite interesting…
97 views
Information Security
https://github.com/knightmare2600/SMBGhost
GitHub
knightmare2600/SMBGhost
Scanner for CVE-2020-0796 - SMBv3 RCE. Contribute to knightmare2600/SMBGhost development by creating an account on GitHub.
109 views
Information Security
https://www.synacktiv.com/posts/exploit/im-smbghost-daba-dee-daba-da.html
89 views
Information Security
Account takeover

https://t.co/YCK3GB5sJk
https://t.co/eRlkj3n6w2
https://t.co/tuQ3xEpIYc
https://t.co/vApKQSS7Ru
https://t.co/7l7wxb9btx
https://t.co/ETHFuyLd1v
https://t.co/z4FmmyO8xy
https://t.co/5EYYOudexQ
https://t.co/KBYLYDvon3
https://t.co/uim3l7JKir

#bugbounty
Medium
Got *Bounty* with Account takeover (ATO ) Unicode-Case Mapping Collision !
Hey hunters ! Recently I discovered a Unicode-Case Mapping Collision vulnerability on a private program.
107 views
Information Security
https://www.bleepingcomputer.com/news/security/new-coronavirus-ransomware-acts-as-cover-for-kpot-infostealer/
BleepingComputer
New CoronaVirus Ransomware Acts as Cover for Kpot Infostealer
A new ransomware called CoronaVirus is has been distributed through a fake web site pretending to promote the system optimization software and utilities from WiseCleaner.
96 views
Information Security
https://github.com/ioncodes/SMBGhost
GitHub
GitHub - ioncodes/SMBGhost: Scanner for CVE-2020-0796 - A SMBv3.1.1 + SMB compression RCE
Scanner for CVE-2020-0796 - A SMBv3.1.1 + SMB compression RCE - GitHub - ioncodes/SMBGhost: Scanner for CVE-2020-0796 - A SMBv3.1.1 + SMB compression RCE
104 views
Information Security
Top #OSINT tools I used last project:

SEcraper - scrape many search engines at once vs query or keyword
https://github.com/zerobyte-id/SEcraper

Spiderfoot
https://spiderfoot.net

http://OSINT.link

Cheat Sheet
https://inteltechniques.com/JE/OSINT_Packet_2019.pdf


Quick Cloudflare bypass
http://crimeflare.org:82/cfs.html
GitHub
GitHub - zerobyte-id/SEcraper: Search engine scraper tool with BASH script.
Search engine scraper tool with BASH script. Contribute to zerobyte-id/SEcraper development by creating an account on GitHub.
115 views
Information Security
https://medium.com/@testbnull/the-art-of-deserialization-gadget-hunting-part-3-how-i-found-cve-2020-2555-by-known-tools-67819b29cb63
Medium
The Art of Deserialization Gadget Hunting [part 3] (How I found CVE-2020–2555 by known tools!)
Vậy là ngày 05/03 vừa rồi, ZDI đã publish bài phân tích chi tiết về CVE-2020–2555…
117 views