Information Security
@sec_nerd_en
415 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
415 subscribers
Information Security
Reflected XSS on microsoft[.]com subdomains

<script src=”<%= ResolveUrl(“~/Script.js”) %>”></script>

/(A(%22onerror='alert%601%60'testabcd))/

https://medium.com/bugbountywriteup/reflected-xss-on-microsoft-com-subdomains-4bdfc2c716df
Medium
Reflected XSS on microsoft.com subdomains
Microsoft replied that this is out of scope of their security program as well as not deemed this as a security vulnerability at all, so I…
117 views
Information Security
https://blog.securitybreached.org/2020/03/17/getting-started-in-android-apps-pentesting/
Security Breached Blog
Getting Started in Android Apps Pen-testing (Part-1)
Pen-testing android apps require different methodologies than web applications. The difference is that you have to figure out by different methods.
114 views
Information Security
https://github.com/saeeddhqan/Maryam
GitHub
GitHub - saeeddhqan/Maryam: Maryam: Open-source Intelligence(OSINT) Framework
Maryam: Open-source Intelligence(OSINT) Framework. Contribute to saeeddhqan/Maryam development by creating an account on GitHub.
113 views
Information Security
https://fidusinfosec.com/xsslash-a-tale-of-playing-quiplash-at-work/
Fidus Information Security
XSSLash - A Tale of Playing Quiplash at Work - Fidus Information Security
What do you get when you cross security consultants and playing games at lunch? XSS bypasses and a pot of really good coffee.
114 views
Information Security
https://portswigger.net/research/detecting-and-exploiting-path-relative-stylesheet-import-prssi-vulnerabilities
PortSwigger Research
Detecting and exploiting path-relative stylesheet import (PRSSI) vulnerabilities
Early last year Gareth Heyes unveiled a fascinating new technique for attacking web applications by exploiting path-relative stylesheet imports, and dubbed it ‘Relative Path Overwrite’. This attack tr
114 views
Information Security
https://medium.com/@asdqwedev/remote-image-upload-leads-to-rce-inject-malicious-code-to-php-gd-image-90e1e8b2aada
Medium
Remote Image Upload Leads to RCE (Inject Malicious Code to PHP-GD Image)
بسم الله الرحمن الرحيم
120 views
Information Security
https://posts.specterops.io/application-whitelisting-bypass-and-arbitrary-unsigned-code-execution-technique-in-winrm-vbs-c8c24fb40404
Medium
Application Whitelisting Bypass and Arbitrary Unsigned Code Execution Technique in winrm.vbs
Bypass Technique Description
130 views
Information Security
https://blog.cobaltstrike.com/2018/02/08/in-memory-evasion/
Cobalt Strike
Blog - Cobalt Strike
The Cobalt Strike Blog. Read new featured content, get updates on the latest patches, and insights into the future of red teaming tools.
127 views
Information Security
https://github.com/onSec-fr/Http-Asynchronous-Reverse-Shell
GitHub
GitHub - onSec-fr/Http-Asynchronous-Reverse-Shell: [POC] Asynchronous reverse shell using the HTTP protocol.
[POC] Asynchronous reverse shell using the HTTP protocol. - onSec-fr/Http-Asynchronous-Reverse-Shell
129 views
Information Security
XSS Payload JSON:

"}]}';alert('oBonito')</script>

#BugBounty #bugbountytips
98 views
Information Security
http://raviramesh.info/xml-attacks.html

http://raviramesh.info/mindset.html
100 views
Information Security
interesting macro samples
https://app.any.run/tasks/2be858c1-ff74-44b0-bb2a-4bb5de18a443
https://app.any.run/tasks/da537699-5942-46dd-a747-76de5e99f1ed/
app.any.run
4dd6c0a22d4b5ff8d33c8ed45c23cc23159fd7c8f6e9e19e90fce80103cbdc50.doc (MD5: 7C7386C86CFEB790FE65DC27545DA45F) - Interactive analysis…
Interactive malware hunting service. Live testing of most type of threats in any environments. No installation and no waiting necessary.
99 views
Information Security
http://blog.ptsecurity.com/2020/03/cve-2019-18683-exploiting-linux-kernel.html
99 views
Information Security
https://medium.com/@emilefugulin/http-desync-attacks-with-python-and-aws-1ba07d2c860f
Medium
HTTP Desync Attacks with Python and AWS
Tales of a preoccupied developer
95 views
Information Security
Deeplink issues:
https://youtu.be/wyIx0D-M2S8

Exploitation of exported activities (OOS on some programs, nevertheless an interesting watch)

https://youtu.be/ZUikTuoCP_M

#bugbountytip #bugbounty
YouTube
Android Deeplinks and how to exploit them
In this video we go over what deeplinks are and ways they can be exploited. PoC examples and example reports are also reviewed.
97 views
Information Security
CSRF for disabling 2FA

1. Capture request in burpsuite
2. Engagement tools> Generate CSRF POC
3. Pass null chars in token value so function will over-ride
4. Submit twice for overriding
5. 2FA disabled
92 views
Information Security
#XXE

https://spaceraccoon.dev/a-tale-of-two-formats-exploiting-insecure-xml-and-zip-file-parsers-to-create-a
https://0xatul.github.io/posts/2020/02/external-xml-entity-via-file-upload-svg/
https://mahmoudsec.blogspot.com/2019/08/exploiting-out-of-band-xxe-using.html
https://github.com/setuid0-sec/Swiss_E-Voting_Publications/blob/master/xxe_setuid0.pdf
https://mohemiv.com/all/exploiting-xxe-with-local-dtd-files/
https://honoki.net/2018/12/12/from-blind-xxe-to-root-level-file-read-access/
https://corben.io/XSS-to-XXE-in-Prince/
https://medium.com/@zain.sabahat/an-interesting-xxe-in-sap-8b35fec6ef33

#bugbounty,#bugbountytips
spaceraccoon.dev
A Tale of Two Formats: Exploiting Insecure XML and ZIP File Parsers to Create a Web Shell
While researching a bug bounty target, I came across a web application that processed a custom file type which was actually just a ZIP file that contains an XML that functions as a manifest. If handled naively, this packaging pattern creates additional security…
113 views
Information Security
Recently found a RXSS in captcha response
Resolve captcha --> capture request --> change captcha response to XSS payload --> XSS trigger

#BugBounty #BugBountyTip #BugBountyTips
110 views
Information Security
https://research.nccgroup.com/2020/03/19/ldapfragger-bypassing-network-restrictions-using-ldap-attributes/

https://github.com/fox-it/LDAPFragger
Nccgroup
Cyber Security Research
Cutting-edge cyber security research from NCC Group. Find public reports, technical advisories, analyses, & other novel insights from our global experts.
113 views
Information Security
http://www.righto.com/2020/03/inside-titan-missile-guidance-computer.html
Righto
Inside a Titan missile guidance computer
I've been studying the guidance computer from a Titan II nuclear missile. This compact computer was used in the 1970s to guide a Titan II ...
114 views