Information Security
@sec_nerd_en
414 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
414 subscribers
Information Security
https://github.com/preempt/ntlm-scanner
GitHub
GitHub - preempt/ntlm-scanner: A simple python tool based on Impacket that tests servers for various known NTLM vulnerabilities
A simple python tool based on Impacket that tests servers for various known NTLM vulnerabilities - preempt/ntlm-scanner
144 views
Information Security
https://medium.com/bugbountywriteup/bypassing-googles-fix-to-access-their-internal-admin-panels-12acd3d821e3
Medium
Bypassing Google’s authentication to access their Internal Admin panels — Vishnu Prasad P G
Vishnu Prasad P G
149 views
Information Security
https://www.exploit-db.com/exploits/48272
Exploit Database
Redis - Replication Code Execution (Metasploit)
Redis - Replication Code Execution (Metasploit).. remote exploit for Linux platform
129 views
Information Security
https://www.itnews.com.au/news/zoom-for-windows-leaks-network-credentials-runs-code-remotely-545883
iTnews
Windows flaw lets Zoom leak network credentials, runs code remotely
Careful clicking on links starting with \\ in Zoom.
130 views
Information Security
https://medium.com/@shahjerry33/privilege-escalation-hello-admin-a53ac14fd388
Medium
Privilege Escalation - Hello Admin
Summary :
123 views
Information Security
https://github.com/techgaun/github-dorks
GitHub
GitHub - techgaun/github-dorks: Find leaked secrets via github search
Find leaked secrets via github search. Contribute to techgaun/github-dorks development by creating an account on GitHub.
126 views
Information Security
https://youtu.be/5ORBcUo1jqY
YouTube
Ron Chan's Secret to Finding Critical Security Issues on GitLab
In this video Ron Chan describes his process for finding critical flaws on GitLab's bug bounty program.

GitLab's bug bounty program: https://hackerone.com/gitlab
GitLab issue tracker: https://gitlab.com/gitlab-org/gitlab/issues?scope=all&utf8=%E2%9C%93&…
118 views
Information Security
https://github.com/hisxo/gitGraber
GitHub
GitHub - hisxo/gitGraber: gitGraber: monitor GitHub to search and find sensitive data in real time for different online services…
gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe... - hisxo...
131 views
Information Security
https://ibrahimdraidia.com/xmas-amazon-self-xss/
Ibrahimdraidia
Delivering more than just presents: An Xmas story of self-XSS on Amazon.com
It’s been a long time since my last blog post, as I was preparing for my OSCP. Well, I’m glad to inform you all that I’m now an Offensive Security Certified Professional.
120 views
Information Security
https://www.ryanpickren.com/webcam-hacking
Ryan Pickren
Webcam Hacking - Technical Walkthrough | Ryan Pickren
Techincal walkthrough
118 views
Information Security
https://medium.com/@intideceukelaire/hundreds-of-internal-servicedesks-exposed-due-to-covid-19-ecd0baec87bd
Medium
Hundreds of internal servicedesks exposed due to COVID-19
Countless companies are still vulnerable.
120 views
Information Security
https://github.com/ericchiang/pup
GitHub
GitHub - ericchiang/pup: Parsing HTML at the command line
Parsing HTML at the command line. Contribute to ericchiang/pup development by creating an account on GitHub.
119 views
Information Security
https://blogs.jpcert.or.jp/en/2020/04/attacks-exploiting-vulnerabilities-in-pulse-connect-secure.html
JPCERT/CC Eyes
Attacks Exploiting Vulnerabilities in Pulse Connect Secure - JPCERT/CC Eyes
In September 2019, JPCERT/CC published a security alert regarding vulnerabilities in multiple SSL-VPN products. Among the vulnerabilities pointed out in the alert, JPCERT/CC has been notified of cases leveraging CVE-2019-11510 and CVE-2019-11539 in Pulse…
117 views
Information Security
https://medium.com/bugbountywriteup/bounty-tip-how-to-bypass-authorization-in-saml-f7577a6541c4
Medium
Bounty Tip: How to bypass authorization in SAML !
Security Assertion Markup Language (SAML) is an open XML-based standard for exchanging authentication and authorization data between…
118 views
Information Security
https://medium.com/bugbountywriteup/sop-bypass-ecae7f4a5c00
Medium
SOP Bypass
Maybe you know about Same Origin Policy or not,  Mozilla describes it as: “The same-origin policy is a critical security mechanism that…
123 views
Information Security
https://github.com/andreafioraldi/frida-fuzzer
GitHub
GitHub - andreafioraldi/frida-fuzzer: This experimetal fuzzer is meant to be used for API in-memory fuzzing.
This experimetal fuzzer is meant to be used for API in-memory fuzzing. - andreafioraldi/frida-fuzzer
122 views
Information Security
https://github.com/rapid7/metasploit-framework/pull/13123
GitHub
VMWare Fusion OSX priv esc CVE-2020-3950 by h00die · Pull Request #13123 · rapid7/metasploit-framework
This adds an OSX priv esc against 2 versions of VMWare Fusion. The binary is still available, but let me know if you need it in case it gets removed. Gives an euid=0.
Of note, i'm not fam...
136 views
Information Security
#OSCP

https://github.com/OlivierLaflamme/Cheatsheet-God
https://github.com/rewardone/OSCPRepo
https://github.com/mantvydasb/RedTeam-Tactics-and-Techniques
https://github.com/ihack4falafel/OSCP
https://github.com/skavngr/rapidscan
https://github.com/0x4D31/awesome-oscp
https://github.com/frizb/Windows-Privilege-Escalation
https://github.com/AnasAboureada/Penetration-Testing-Study-Notes
https://github.com/six2dez/OSCP-Human-Guide

#bugbounty
GitHub
GitHub - OlivierLaflamme/Cheatsheet-God: Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet
Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet - OlivierLaflamme/Cheatsheet-God
168 views
Information Security
https://www.sans.org/blog/sqlmap-tamper-scripts-for-the-win/
www.sans.org
SANS Penetration Testing | SQLMAP Tamper Scripts for The Win | SANS Institute
SANS Penetration Testing blog pertaining to SQLMAP Tamper Scripts for The Win
152 views
Information Security
https://medium.com/@drag0n/sqlmap-tamper-scripts-sql-injection-and-waf-bypass-c5a3f5764cb3
Medium
SQLMap Tamper Scripts (SQL Injection and WAF bypass) Tips
Use and load all tamper scripts to evade filters and WAF :
155 views