Information Security
@sec_nerd_en
414
subscribers
157
photos
5
videos
9
files
2.28K
links
Information Security News
we are
@sec_nerd
twin brother
Download Telegram
Join
Information Security
414 subscribers
Information Security
https://medium.com/@ch3ckm4te/self-xss-to-account-takeover-72c89775cf8f
Medium
Self XSS to Account Takeover
Exploiting Self Stored XSS to escalate and achieve Account Takeover using Logout CSRF & oAuth functionality to Steal Cookies or Change…
Information Security
https://www.hackingarticles.in/credential-dumping-wireless/
Hacking Articles
Credential Dumping: Wireless
Learn how attackers dump credentials from wireless networks and devices, and how to prevent such attacks in your wireless environment.
Information Security
https://www.secjuice.com/hiding-javascript-in-png-csp-bypass/
Information Security
https://medium.com/swlh/diving-into-unserialize-more-than-rce-d48d371db7da
Medium
Diving into unserialize(): More than RCE
Achieving authentication bypass and SQL injection using PHP’s unserialize()
Information Security
https://snyk.io/blog/prototype-pollution-minimist/
Snyk
Prototype pollution vulnerability in minimist npm package | Snyk
This post discusses the prototype pollution vulnerability, explains how certain applications can be subject to it, and describes the rationale behind its severity classification.
Information Security
https://medium.com/rungo/how-to-write-a-simple-go-program-13fd104f3018
Medium
How to write a simple Go Program
In this tutorial, we are going to look at the basic structure of a Go program and run a simple Hello World program.
Information Security
https://raelize.com/posts/d-link-dsl-2640b-security-advisories/
Information Security
https://www.hahwul.com/2018/08/attack-json-csrf-with-swfactionscript.html
Information Security
https://labs.f-secure.com/blog/pth-attacks-against-ntlm-authenticated-web-applications/
Information Security
#coronavirus
Information Security
https://natedotred.wordpress.com/2020/03/28/cve-2020-8816-pi-hole-remote-code-execution/
Nate's Blog
CVE-2020-8816 – Pi-hole Remote Code Execution
Impact Pi-hole is affected by a Remote Code Execution vulnerability. An authenticated user of the Web portal can execute arbitrary command with the underlying server with the privileges of the loca…
Information Security
https://xss.pwnfunction.com/challenges/me-and-the-bois/
PwnFunction
XSS Game - Me and the Bois | PwnFunction
XSS Game: Learn Cross Site Scripting (XSS) by completing challenges!
Information Security
https://www.synacktiv.com/posts/pentest/how-to-exploit-liferay-cve-2020-7961-quick-journey-to-poc.html
Information Security
https://www.hahwul.com/2020/03/recon-using-fzf-and-other-tools-for-bugbounty.html
Information Security
https://about.gitlab.com/blog/2020/03/30/how-to-exploit-parser-differentials/
about.gitlab.com
How to exploit parser differentials
Your guide to abusing 'language barriers' between web components.
Information Security
https://research.nccgroup.com/2020/03/30/impact-of-dns-over-https-doh-on-dns-rebinding-attacks/
Nccgroup
Cyber Security Research
Cutting-edge cyber security research from NCC Group. Find public reports, technical advisories, analyses, & other novel insights from our global experts.
Information Security
https://www.activecyber.us/activelabs/docker-desktop-local-privilege-escalation-cve-2020-10665
Active Cyber
Docker Desktop Local Privilege Escalation (CVE-2020-10665)
Docker is a tool designed to make it easier to create, deploy, and run applications by using containers. Containers allow a developer to package an application with all of the parts it needs, such...
Information Security
https://twitter.com/ameenmaali/status/1244886922796740608
Twitter
Ameen
Messed around a bit more since I needed to load in a script for CSP bypass as well and somehow this bypasses Akamai <SCr%00Ipt>confirm`1`</scR%00ipt> (can load scripts with src as well)
🤔
#bugbountytips #bugbountytip
Information Security
https://blog.securitybreached.org/2020/03/31/microsoft-rce-bugbounty/
Security Breached Blog
Microsoft Apache Solr RCE Velocity Template | Bug Bounty POC - Security Breached Blog
Hey guys so this blog post is about RCE issue reported to Microsoft bug bounty program, Remote Code execution issue existed in microsoft.com subdomain running Apache Solr.
Information Security
https://techanarchy.net/blog/cve-2020-10560-ossn-arbitrary-file-read
techanarchy.net
CVE-2020-10560 - OSSN Arbitrary File Read | TechAnarchy
Just another DFIR Blog
