Information Security
@sec_nerd_en
415 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
415 subscribers
Information Security
CasperStager


https://github.com/ustayready/CasperStager
GitHub
GitHub - ustayready/CasperStager: PoC for persisting .NET payloads in Windows Notification Facility (WNF) state names using low…
PoC for persisting .NET payloads in Windows Notification Facility (WNF) state names using low-level Windows Kernel API calls. - ustayready/CasperStager
49 views
Information Security
Privilege Escalation & Post-Exploitation

https://rmusser.net/docs/Privilege%20Escalation%20&%20Post-Exploitation.html
56 views
Information Security
SleuthQL Description

SleuthQL is a python3 script to identify parameters and values that contain SQL-like syntax. Once identified, SleuthQL will then insert SQLMap identifiers (*) into each parameter where the SQL-esque variables were identified.


https://github.com/RhinoSecurityLabs/SleuthQL

https://youtu.be/Sp3FevOAmCs
GitHub
GitHub - RhinoSecurityLabs/SleuthQL: Python3 Burp History parsing tool to discover potential SQL injection points. To be used in…
Python3 Burp History parsing tool to discover potential SQL injection points. To be used in tandem with SQLmap. - RhinoSecurityLabs/SleuthQL
62 views
Information Security
OMG. Quit vim button on new MacBook 🤣
269 views
Information Security
RID HIJACKING: Maintaining Access on Windows Machines #DerbyCon

https://github.com/r4wd3r/RID-Hijacking/blob/master/slides/derbycon-8.0/RID_HIJACKING_DERBYCON_2018.pdf
GitHub
r4wd3r/RID-Hijacking
Windows RID Hijacking persistence technique. Contribute to r4wd3r/RID-Hijacking development by creating an account on GitHub.
48 views
Information Security
Building Your Own Dedicated IPSEC VPN in Less Than 10 Minutes

https://danielmiessler.com/blog/building-your-own-dedicated-ipsec-vpn-in-less-than-10-minutes/
54 views
Information Security
How to bypass AMSI and execute ANY malicious Powershell code

https://0x00-0x00.github.io/research/2018/10/28/How-to-bypass-AMSI-and-Execute-ANY-malicious-powershell-code.html
zc00l blog
How to bypass AMSI and execute ANY malicious Powershell code
Hello again. In my previous posts I detailed how to manually get SYSTEM shell from Local Administrators users. That’s interesting but very late game during a penetration assessment as it is presumed that you already owned the target machine.
56 views
Information Security
Using Empire with a Reverse Proxy

https://glanfield.co.uk/using-empire-with-a-reverse-proxy/
Liam Glanfield
Using Empire with a Reverse Proxy
Here is an example of how I use Empire, in this example I won't be running through setting up HTTPS but will only document the HTTP approach. I am using Ubuntu 16.04 LTS and cloning Empire from the master  branch. Installing and Configuring LXC I prefer to…
62 views
Information Security
internet of shit
71 views
Information Security
This media is not supported in your browser
VIEW IN TELEGRAM
So, what's your password?


#Cybersecurity #cyber #hack #hacking #Hacked #hacker #informationsecurity #infosec #informationtechnology #infowars #socialengineering #cybersecurityawareness #cyberawareness #digitalsecurity #password
67 views
Information Security
Lateral Movement using WSHController/WSHRemote objects (IWSHController and IWSHRemote interfaces)

http://www.hexacorn.com/blog/2018/08/18/lateral-movement-using-wshcontroller-wshremote-objects-iwshcontroller-and-iwshremote-interfaces/
55 views
Information Security
56 views
Information Security
https://saelo.github.io/presentations/blackhat_us_18_attacking_client_side_jit_compilers.pdf
55 views
Information Security
https://blogs.securiteam.com/index.php/archives/3783
55 views
Information Security
https://blogs.securiteam.com/index.php/archives/3786
58 views
Information Security
https://www.zdnet.com/article/google-launches-recaptcha-v3-that-detects-bad-traffic-without-user-interaction/
ZDNET
Google launches reCAPTCHA v3 that detects bad traffic without user interaction
reCAPTCHA v3 assigns incoming site visitors a risk score and lets webmasters takes custom actions based on this score.
62 views
Information Security
#fun
51 views
Information Security
A website that helps to understand even the wildest C/C++ declarations :) https://cdecl.org
59 views
Information Security
new phrack paper

http://phrack.org/papers/viewer_discretion_advised.html
53 views
Information Security
hashcat-brain - A Docker container for running a hashcat brain server

https://hub.docker.com/r/singelet/hashcat-brain/
52 views