Information Security
@sec_nerd_en
414 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
414 subscribers
Information Security
How to bypass AMSI and execute ANY malicious Powershell code

https://0x00-0x00.github.io/research/2018/10/28/How-to-bypass-AMSI-and-Execute-ANY-malicious-powershell-code.html
zc00l blog
How to bypass AMSI and execute ANY malicious Powershell code
Hello again. In my previous posts I detailed how to manually get SYSTEM shell from Local Administrators users. That’s interesting but very late game during a penetration assessment as it is presumed that you already owned the target machine.
94 views
Information Security
https://blog.xpnsec.com/rundll32-your-dotnet/
XPN InfoSec Blog
@_xpn_ - RunDLL32 your .NET (AKA DLL exports from .NET)
In this post I wanted to look at a technique which is by no means new to .NET developers, but may prove useful to redteamers crafting their tools... exporting .NET static methods within a DLL... AKA using RunDLL32 to launch your .NET assembly.
90 views
Information Security
https://www.symantec.com/blogs/threat-intelligence/fastcash-lazarus-atm-malware
Security
FASTCash: How the Lazarus Group is Emptying Millions from ATMs
Symantec uncovers tool used by Lazarus to carry out ATM attacks.
79 views
Information Security
https://twitter.com/dvIpr/status/1060248078790287360
Twitter
Expectations v/s Reality 👨‍💻
90 views
Information Security
Post Exploitation Using WMIC (System Command)

http://www.hackingarticles.in/post-exploitation-using-wmic-system-command/
Hacking Articles
Post Exploitation Using WMIC (System Command)
This article is about Post Exploitation using the WMIC (Windows Management Instrumentation Command Line). When an Attacker gains a meterpreter session on a Remote PC,
74 views
Information Security
Kahu Security releases CMD Watcher, a tool that watches for the CMD process, suspends it, extracts the command line data, then kills it

http://www.kahusecurity.com/posts/cmd_watcher_and_maldocs.html
68 views
Information Security
Apereo CAS (Central Authentication Service) Remote Code Execution

https://github.com/frohoff/ysoserial/pull/99
79 views
Information Security
Practical guide to NTLM Relaying in 2017 (A.K.A getting a foothold in under 5 minutes)

https://byt3bl33d3r.github.io/practical-guide-to-ntlm-relaying-in-2017-aka-getting-a-foothold-in-under-5-minutes.html
byt3bl33d3r.github.io
Practical guide to NTLM Relaying in 2017 (A.K.A getting a foothold in under 5 minutes) // byt3bl33d3r // /dev/random > blog.py
byt3bl33d3r, /dev/random > blog.py
62 views
Information Security
https://medium.com/tenable-techblog/uac-bypass-by-mocking-trusted-directories-24a96675f6e
Medium
UAC Bypass by Mocking Trusted Directories
Hello Everyone,
77 views
Information Security
New LDAP & RDP Relay Vulnerabilities in NTLM

https://blog.preempt.com/new-ldap-rdp-relay-vulnerabilities-in-ntlm

https://www.youtube.com/watch?v=pKt9IJJOM3I
72 views
Information Security
Invisi-Shell

Hide your powershell script in plain sight! Invisi-Shell bypasses all of Powershell security features (ScriptBlock logging, Module logging, Transcription, AMSI) by hooking .Net assemblies. The hook is performed via CLR Profiler API.

https://github.com/OmerYa/Invisi-Shell
GitHub
GitHub - OmerYa/Invisi-Shell: Hide your Powershell script in plain sight. Bypass all Powershell security features
Hide your Powershell script in plain sight. Bypass all Powershell security features - OmerYa/Invisi-Shell
68 views
Information Security
Something special for the weekend...: A nice writeup on Universal #RCE #exploit by exploiting #Ruby 2.x #serialization


https://www.elttam.com.au/blog/ruby-deserialization/
61 views
Information Security
Feature, not bug: DNSAdmin to DC compromise in one line

https://medium.com/@esnesenon/feature-not-bug-dnsadmin-to-dc-compromise-in-one-line-a0f779b8dc83
Medium
Feature, not bug: DNSAdmin to DC compromise in one line
Background
66 views
Information Security
Invoke-ADLabDeployer

https://github.com/outflanknl/Invoke-ADLabDeployer
GitHub
GitHub - outflanknl/Invoke-ADLabDeployer: Automated deployment of Windows and Active Directory test lab networks. Useful for red…
Automated deployment of Windows and Active Directory test lab networks. Useful for red and blue teams. - outflanknl/Invoke-ADLabDeployer
65 views
Information Security
https://www.youtube.com/watch?v=QYAl-XMWlpU
YouTube
Cracking Hashes From a Meterpreter Session with Hashcat
67 views
Information Security
Have you checked your PSReadline history lately? Do you know it stores the commands in clear-text and is persistent across reboots? This is on a Domain Controller. #PowerShell #RedTeam
62 views
Information Security
https://media.rootcon.org/ROOTCON%2012/Talks/Exploiting%20ActionScript3%20Interpreter.pdf
71 views
Information Security
https://twitter.com/pyn3rd/status/1062734592476622848
Twitter
pyn3rd
#CVE-2018-14667 RichFaces Framework 3.X through 3.3.4 Expression Language (EL) injection CC:@joaomatosf nice 👍 https://t.co/sSG7Vb7f6s
64 views
Information Security
LethalHTA - A new lateral movement technique using DCOM and HTA

https://codewhitesec.blogspot.com/2018/07/lethalhta.html
Blogspot
CODE WHITE | Blog: LethalHTA - A new lateral movement technique using DCOM and HTA
The following blog post introduces a new lateral movement technique that combines the power of DCOM and HTA. The research on this t...
60 views
Information Security
PHP_imap_open_exploit

Bypassing disabled exec functions in PHP via imap_open (Debian & Ubuntu)

https://github.com/Bo0oM/PHP_imap_open_exploit
GitHub
GitHub - Bo0oM/PHP_imap_open_exploit: Bypassing disabled exec functions in PHP (c) CRLF
Bypassing disabled exec functions in PHP (c) CRLF. Contribute to Bo0oM/PHP_imap_open_exploit development by creating an account on GitHub.
68 views