Information Security
@sec_nerd_en
414 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
414 subscribers
Information Security
Invoke-ADLabDeployer

https://github.com/outflanknl/Invoke-ADLabDeployer
GitHub
GitHub - outflanknl/Invoke-ADLabDeployer: Automated deployment of Windows and Active Directory test lab networks. Useful for red…
Automated deployment of Windows and Active Directory test lab networks. Useful for red and blue teams. - outflanknl/Invoke-ADLabDeployer
65 views
Information Security
https://www.youtube.com/watch?v=QYAl-XMWlpU
YouTube
Cracking Hashes From a Meterpreter Session with Hashcat
67 views
Information Security
Have you checked your PSReadline history lately? Do you know it stores the commands in clear-text and is persistent across reboots? This is on a Domain Controller. #PowerShell #RedTeam
62 views
Information Security
https://media.rootcon.org/ROOTCON%2012/Talks/Exploiting%20ActionScript3%20Interpreter.pdf
71 views
Information Security
https://twitter.com/pyn3rd/status/1062734592476622848
Twitter
pyn3rd
#CVE-2018-14667 RichFaces Framework 3.X through 3.3.4 Expression Language (EL) injection CC:@joaomatosf nice 👍 https://t.co/sSG7Vb7f6s
64 views
Information Security
LethalHTA - A new lateral movement technique using DCOM and HTA

https://codewhitesec.blogspot.com/2018/07/lethalhta.html
Blogspot
CODE WHITE | Blog: LethalHTA - A new lateral movement technique using DCOM and HTA
The following blog post introduces a new lateral movement technique that combines the power of DCOM and HTA. The research on this t...
60 views
Information Security
PHP_imap_open_exploit

Bypassing disabled exec functions in PHP via imap_open (Debian & Ubuntu)

https://github.com/Bo0oM/PHP_imap_open_exploit
GitHub
GitHub - Bo0oM/PHP_imap_open_exploit: Bypassing disabled exec functions in PHP (c) CRLF
Bypassing disabled exec functions in PHP (c) CRLF. Contribute to Bo0oM/PHP_imap_open_exploit development by creating an account on GitHub.
68 views
Information Security
Exploiting internal tomcat server with SSRF - Insomnihack teaser 2017 Web 50 writeup

https://blog.0daylabs.com/2017/01/22/smart-tomcat/
0Daylabs
Exploiting internal tomcat server with SSRF - Insomnihack teaser 2017 Web 50 writeup
Exploiting internal tomcat server (with default credentials) using SSRF (Insomnihack teaser 2017 Web 50 writeup)
67 views
Information Security
Known command-lines of fileless malicious executions.

https://github.com/chenerlich/FCL
GitHub
GitHub - chenerlich/FCL: FCL (Fileless Command Lines) - Known command lines of fileless malicious executions
FCL (Fileless Command Lines) - Known command lines of fileless malicious executions - chenerlich/FCL
69 views
Information Security
Red teamers, you can turn off Defender from admin powershell with ‘Set-MpPreference -DisableRealTimeMonitoring $true’ but it will result in a balloon notification for anyone logged on. Instead, use ‘Add-MpPreference -ExclusionPath “c:\temp”’ to silently add an exclusions folder.
74 views
Information Security
#CVE-2018-14667 RichFaces Framework 3.X through 3.3.4 Expression Language (EL) injection

https://www.youtube.com/watch?v=HR7-nL5G91w
YouTube
Poc of CVE-2018-14667 - Remote Code Execution in WebApps using Richfaces
PoC presented at Hackers to Hackers Conference 2018 (H2HC 2018)
More details in slides: https://www.slideshare.net/mobile/joaomatosff/a-little-bit-about-code-injection-in-webapplication-frameworks-cve201814667-h2hc-2018
CVE-2018-14667 is a Expression Language…
78 views
Information Security
Active Directory Firewall Ports – Let’s Try To Make This Simple

https://blogs.msmvps.com/acefekay/2011/11/01/active-directory-firewall-ports-let-s-try-to-make-this-simple/
78 views
Information Security
JSgen.py – bind and reverse shell JS code generator for SSJI in Node.js with filter bypass encodings

https://pentesterslife.blog/2018/06/28/jsgen/
96 views
Information Security
Undetectable C# & C++ Reverse Shells

https://medium.com/@Bank_Security/undetectable-c-c-reverse-shells-fab4c0ec4f15
85 views
Information Security
https://www.stormshield.com/relations-between-great-powers-becoming-strained-in-cyberspace/
Stormshield
The art of cyberwar and its international risks | Stormshield
After the land, the sea, the air and then space, the international climate is now stretching in cyberspace; but to what extent?
68 views
Information Security
http://www.openrce.org/reference_library/files/reference/PE%20Format.pdf
72 views
Information Security
http://www.openrce.org/articles/
69 views
Information Security
http://www.openrce.org/articles/full_view/29
69 views
Information Security
SILENTTRINITY. A post-exploitation agent powered by Python, IronPython, C#/.NET

https://github.com/byt3bl33d3r/SILENTTRINITY
81 views
Information Security
XS-Searching Google’s bug tracker to find out vulnerable source code

https://medium.com/@luanherrera/xs-searching-googles-bug-tracker-to-find-out-vulnerable-source-code-50d8135b7549
Medium
XS-Searching Google’s bug tracker to find out vulnerable source code
Or how side-channel timing attacks aren’t that impractical
70 views