Information Security
@sec_nerd_en
414 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
414 subscribers
Information Security
Abusing the COM Registry Structure: CLSID, LocalServer32, & InprocServer32

https://bohops.com/2018/06/28/abusing-com-registry-structure-clsid-localserver32-inprocserver32/
46 views
Information Security
Abusing the COM Registry Structure (Part 2): Hijacking & Loading Techniques

https://bohops.com/2018/08/18/abusing-the-com-registry-structure-part-2-loading-techniques-for-evasion-and-persistence/
49 views
Information Security
Undetectable C# & C++ Reverse Shells

https://medium.com/@Bank_Security/undetectable-c-c-reverse-shells-fab4c0ec4f15
Medium
Undetectable C# & C++ Reverse Shells
Technical overview of different way to spawn a reverse shell on a victim machine
64 views
Information Security
https://www.gchq.gov.uk/news-article/gchq-engineering-accelerator-seeks-tech-talent-manchester?pk_campaign=20181019&pk_kwd=engacc
54 views
Information Security
Useful resources for #iOS #pentesting / pwning http://file.allitebooks.com/20170130/iOS%20Penetration%20Testing.pdf
60 views
Information Security
47 views
Information Security
Portable car hacking box
56 views
Information Security
https://www.youtube.com/watch?v=JzJEUaSuAQM&feature=youtu.be
YouTube
Track 3 06 VBA Stomping Advanced Malware Techniques Carrie Roberts Kirk Sayre Harold Ogden
These are the videos from Derbycon 2018:
http://www.irongeek.com/i.php?page=videos/derbycon8/mainlist

Patreon:
https://www.patreon.com/irongeek
54 views
Information Security
Invisi-Shell

Hide your powershell script in plain sight! Invisi-Shell bypasses all of Powershell security features (ScriptBlock logging, Module logging, Transcription, AMSI) by hooking .Net assemblies. The hook is performed via CLR Profiler API.

https://github.com/OmerYa/Invisi-Shell
GitHub
GitHub - OmerYa/Invisi-Shell: Hide your Powershell script in plain sight. Bypass all Powershell security features
Hide your Powershell script in plain sight. Bypass all Powershell security features - OmerYa/Invisi-Shell
54 views
Information Security
https://www.twitch.tv/malwaretechblog
Twitch
MalwareTechBlog - Twitch
Cybersecurity, Tech, and General Discussions with Marcus Hutchins AKA MalwareTech. About Me: https://escapingtech.com/about/
51 views
Information Security
We disclosed two sets of vulnerabilities this week. Live Networks LIVE555 streaming media RTSPServer code execution: http://cs.co/6015D730W

Linksys E Series routers: http://cs.co/6019D730S
54 views
Information Security
https://brage.bibsys.no/xmlui/bitstream/handle/11250/2451326/17303_FULLTEXT.pdf
51 views
Information Security
https://video.twimg.com/tweet_video/DqMg6NQXQAExeZK.mp4
43 views
Information Security
https://medium.com/@Sebdraven/apt-sidewinder-changes-theirs-ttps-to-install-their-backdoor-f92604a2739?_branch_match_id=470933300101167047
Medium
APT Sidewinder changes theirs TTPs to install their backdoor.
A new RTF (9001056791a03ec998f26805d462bc2ca336b2c3aeac2e210f73ff841dfe3eec) has just been discovered and it’s the same toolset that is…
51 views
Information Security
Linux Kernel < 4.4.0-83 / < 4.8.0-58 (Ubuntu 14.04 and 16.04) Local Privilege Escalation


https://cxsecurity.com/issue/WLB-2018010018
Cxsecurity
Linux Kernel < 4.4.0-83 / < 4.8.0-58 (Ubuntu 14.04 and 16.04) Local Privilege Escalation - CXSecurity.com
Andrey Konovalov has realised a new security note Linux Kernel < 4.4.0-83 / < 4.8.0-58 (Ubuntu 14.04 and 16.04) Local Privilege Escalation
312 views
Information Security
Forwarded from امنیت اطلاعات
Spiesexpose.pdf
1.3 MB
#ksa
#breach
#news

@sec_nerd
29 views
Information Security
https://hashcat.net/forum/thread-7717.html
53 views
Information Security
D-Link Routers - Plaintext Password


https://www.exploit-db.com/exploits/45677
Exploit Database
D-Link Routers - Plaintext Password
D-Link Routers - Plaintext Password. CVE-2018-10824 . webapps exploit for Hardware platform
311 views
Information Security
5 Practical Scenarios for XSS Attacks

https://pentest-tools.com/blog/xss-attacks-practical-scenarios/
54 views
Information Security
WebExec - an authenticated RCE vulnerability in Cisco WebEx client

https://blog.skullsecurity.org/2018/technical-rundown-of-webexec
50 views