Information Security
@sec_nerd_en
408 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
408 subscribers
Information Security
https://tryhackme.com/
TryHackMe
TryHackMe | Cyber Security Training
TryHackMe is a free online platform for learning cyber security, using hands-on exercises and labs, all through your browser!
108 views
Information Security
Some Old is Gold #bugbountytips blogs

https://t.co/BytIaQyyZ6
https://t.co/bgLAhywjUX
https://t.co/jQGhQaIh9X
https://t.co/3HmSyYtcF9
https://t.co/yhDXByNAI4
https://t.co/fIvV5DnIr8
https://t.co/QCNYtr9YSF
https://t.co/C45vHqJAJz
https://t.co/F3mP5L8jPr
https://t.co/wteg0h1ytk
Medium
Web Application Security & Bug Bounty (Methodology, Reconnaissance, Vulnerabilities, Reporting)
Hello Folks , Hope everyone is doing good. This blog is basically for Web Security Methodology (WSM).
134 viewsedited  
Information Security
https://pwnrules.com/flickr-from-sql-injection-to-rce/
104 views
Information Security
https://medium.com/bugbountywriteup/sql-injection-to-lfi-to-rce-536bed29a862
Medium
SQL injection to RCE
In the next lines I will expose a curious case that I experimented in a customer penetration testing days ago…
108 views
Information Security
https://twitter.com/Naategh_/status/1238164376491675648
#bugbounty #bugbountytips
Twitter
Naategh
While hunting on a Node js target always pass '%ff' as URL like target.com/%ff, Most times it causes an error that leaks full path of the site and some bb programs accept it as a valid issue. I earned more than 400$ via this simple trick! #bugbounty #bugbountytips
104 views
Information Security
https://itm4n.github.io/cve-2020-0787-windows-bits-eop/
itm4n’s blog
CVE-2020-0787 - Windows BITS - An EoP Bug Hidden in an Undocumented RPC Function
This post is about an arbitrary file move vulnerability I found in the Background Intelligent Transfer Service. This is yet another example of a privileged file operation abuse in Windows 10. There is nothing really new but the bug itself is quite interesting…
96 views
Information Security
https://github.com/knightmare2600/SMBGhost
GitHub
knightmare2600/SMBGhost
Scanner for CVE-2020-0796 - SMBv3 RCE. Contribute to knightmare2600/SMBGhost development by creating an account on GitHub.
108 views
Information Security
https://www.synacktiv.com/posts/exploit/im-smbghost-daba-dee-daba-da.html
88 views
Information Security
Account takeover

https://t.co/YCK3GB5sJk
https://t.co/eRlkj3n6w2
https://t.co/tuQ3xEpIYc
https://t.co/vApKQSS7Ru
https://t.co/7l7wxb9btx
https://t.co/ETHFuyLd1v
https://t.co/z4FmmyO8xy
https://t.co/5EYYOudexQ
https://t.co/KBYLYDvon3
https://t.co/uim3l7JKir

#bugbounty
Medium
Got *Bounty* with Account takeover (ATO ) Unicode-Case Mapping Collision !
Hey hunters ! Recently I discovered a Unicode-Case Mapping Collision vulnerability on a private program.
106 views
Information Security
https://www.bleepingcomputer.com/news/security/new-coronavirus-ransomware-acts-as-cover-for-kpot-infostealer/
BleepingComputer
New CoronaVirus Ransomware Acts as Cover for Kpot Infostealer
A new ransomware called CoronaVirus is has been distributed through a fake web site pretending to promote the system optimization software and utilities from WiseCleaner.
95 views
Information Security
https://github.com/ioncodes/SMBGhost
GitHub
GitHub - ioncodes/SMBGhost: Scanner for CVE-2020-0796 - A SMBv3.1.1 + SMB compression RCE
Scanner for CVE-2020-0796 - A SMBv3.1.1 + SMB compression RCE - GitHub - ioncodes/SMBGhost: Scanner for CVE-2020-0796 - A SMBv3.1.1 + SMB compression RCE
103 views
Information Security
Top #OSINT tools I used last project:

SEcraper - scrape many search engines at once vs query or keyword
https://github.com/zerobyte-id/SEcraper

Spiderfoot
https://spiderfoot.net

http://OSINT.link

Cheat Sheet
https://inteltechniques.com/JE/OSINT_Packet_2019.pdf


Quick Cloudflare bypass
http://crimeflare.org:82/cfs.html
GitHub
GitHub - zerobyte-id/SEcraper: Search engine scraper tool with BASH script.
Search engine scraper tool with BASH script. Contribute to zerobyte-id/SEcraper development by creating an account on GitHub.
114 views
Information Security
https://medium.com/@testbnull/the-art-of-deserialization-gadget-hunting-part-3-how-i-found-cve-2020-2555-by-known-tools-67819b29cb63
Medium
The Art of Deserialization Gadget Hunting [part 3] (How I found CVE-2020–2555 by known tools!)
Vậy là ngày 05/03 vừa rồi, ZDI đã publish bài phân tích chi tiết về CVE-2020–2555…
117 views
Information Security
SSRF's to bypass WAF
http://⑯⑨。②⑤④。⑯⑨｡②⑤④/
http://⓪ⓧⓐ⑨｡⓪ⓧⓕⓔ｡⓪ⓧⓐ⑨｡⓪ⓧⓕⓔ:80/
http://⓪ⓧⓐ⑨ⓕⓔⓐ⑨ⓕⓔ:80/
http://②⑧⑤②⓪③⑨①⑥⑥:80/
http://④②⑤｡⑤①⓪｡④②⑤｡⑤①⓪:80/
http://⓪②⑤①。⓪③⑦⑥。⓪②⑤①。⓪③⑦⑥
125 views
Information Security
#bugbountytip The Request.queryString error in .NET avoids you to get XSS? Try the %uff1cscript%uff1ealert(‘XSS’);%uff1c/script%uff1e payload ;)
117 views
Information Security
https://github.com/solemnwarning/rehex/releases/tag/0.1.0
GitHub
solemnwarning/rehex
Reverse Engineers' Hex Editor. Contribute to solemnwarning/rehex development by creating an account on GitHub.
115 views
Information Security
https://lab.wallarm.com/graphql-batching-attack/amp/?__twitter_impression=true
Wallarm Blog
GraphQL Batching Attack - Wallarm Blog
There is a new attack surface when the app tech stack includes GraphQL. It's Batched Attacks on GraphQL APIs. How can these apps be protected? Read more to find out.
115 views
Information Security
https://honoki.net/2020/02/18/http-request-smuggling-5-practical-tips/
109 views
Information Security
https://medium.com/cognite/pwn2own-or-not2pwn-part-2-16347b2047cf
Medium
Pwn2Own or Not2Pwn, Part 2
By Fredrik Østrem, Emil Sandstø and Cim Stordal
105 views
Information Security
5 Subdomain Takeover #ProTips.pdf:
https://github.com/blaCCkHatHacEEkr/PENTESTING-BIBLE/blob/master/7-part-100-article/new_articles/5%20Subdomain%20Takeover%20%23ProTips.pdf
Finding the Balance Between Speed & Accuracy During an Internet-wide Port Scanning.pdf:
https://github.com/blaCCkHatHacEEkr/PENTESTING-BIBLE/blob/master/2-part-100-article/Finding%20the%20Balance%20Between%20Speed%20&%20Accuracy%20During%20an%20Internet-wide%20Port%20Scanning.pdf
Phishing With a Rogue Wi-Fi Access Point.pdf
https://github.com/blaCCkHatHacEEkr/PENTESTING-BIBLE/blob/master/7-part-100-article/new_articles/Phishing%20With%20a%20Rogue%20Wi-Fi%20Access%20Point.pdf
#bugbountytip #Hacking #OSINT #Pentest
GitHub
blaCCkHatHacEEkr/PENTESTING-BIBLE
This repository was created and developed by Ammar Amer @cry__pto Only. Updates to this repository will continue to arrive until the number of links reaches 10000 links & 10000 pdf files .L...
107 views