Information Security
@sec_nerd_en
414 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
414 subscribers
Information Security
Subdomain enumeration

http://10degres.net/subdomain-enumeration/
Gwendal Le Coguic
Subdomain enumeration
A friend recently asked me what methods I use to find subdomains.
To be honest I was confused, like “oooohhh so much, brute force mmm… zone transfer and… brute for… wait Google and mmm… many other tools!”
What a shame that I was so inaccurate after so much…
79 views
Information Security
PowerShell Remoting from Linux to Windows

https://blog.quickbreach.io/ps-remote-from-linux-to-windows/
83 views
Information Security
Deconstructing Fileless Attacks into 4 Underlying Techniques


https://blog.minerva-labs.com/deconstructing-fileless-attacks-into-4-underlying-techniques
Minerva-Labs
Deconstructing Fileless Attacks into 4 Underlying Techniques
Let’s examine 4 specific techniques that comprise fileless attacks and why they often go undetected by existing defenses.
110 views
Information Security
Apache httpd use after free bugs (unfixed)


https://github.com/hannob/apache-uaf/
GitHub
GitHub - hannob/apache-uaf: Apache use after free bug infos / ASAN stack traces
Apache use after free bug infos / ASAN stack traces - GitHub - hannob/apache-uaf: Apache use after free bug infos / ASAN stack traces
106 views
Information Security
Remote Code Execution in apt/apt-get

https://justi.cz/security/2019/01/22/apt-rce.html
justi.cz
Remote Code Execution in apt/apt-get
tl;dr I found a vulnerability in apt that allows a network man-in-the-middle (or a malicious package mirror) to execute arbitrary code as root on a machine i...
107 views
Information Security
GitHub - 0x27/CiscoRV320Dump: CVE-2019-1653 Exploits For Dumping Cisco RV320 Configurations & Debugging Data

https://github.com/0x27/CiscoRV320Dump/
GitHub
GitHub - 0x27/CiscoRV320Dump: CVE-2019-1652 /CVE-2019-1653 Exploits For Dumping Cisco RV320 Configurations & Debugging Data AND…
CVE-2019-1652 /CVE-2019-1653 Exploits For Dumping Cisco RV320 Configurations & Debugging Data AND Remote Root Exploit! - 0x27/CiscoRV320Dump
90 views
Information Security
Found an intersting bypass:
https://x.x.x.x/WEB-INF/web.xml -> 403 Forbidden
https://x.x.x.x/./WEB-INF/web.xml -> 403 Forbidden
https://x.x.x.x/.//WEB-INF/web.xml -> 200 OK
Tomcat 8 on Windows...
84 views
Information Security
Microsoft Powerpoint as Malware Dropper

https://marcoramilli.blogspot.com/2018/11/microsoft-powerpoint-as-malware-dropper.html
80 views
Information Security
Windows2019 Bypass UAC and Defender to get system permissions


http://youtu.be/sJvDxh63Ptg
YouTube
Windows2019 Bypass UAC and Defender to get system permissions
443 views
Information Security
UAC Bypass using SystemPropertiesAdvanced.exe and DLL Hijacking (Server 2019)

https://egre55.github.io/system-properties-uac-bypass/
egre55.github.io
SystemPropertiesAdvanced.exe DLL Hijacking UAC Bypass
99 views
Information Security
A short write up about a PDF callback request, which can also be used steal NTMLv2 hashes

https://insert-script.blogspot.com/2019/01/adobe-reader-pdf-callback-via-xslt.html
Blogspot
Adobe Reader - PDF callback via XSLT stylesheet in XFA
I have seen on twitter that there is use for another PDF callback Proof-of-Concept in Adobe Reader. Last year a PDF file called " BadPDF "...
109 views
Information Security
Server Tailgating – A Chosen Plaintext Attack on RDP

https://www.blackhat.com/docs/asia-18/asia-18-Karni-Zinar-Blachman-Server-Tailgating-A-Chosen-Plaintext-Attack-on-RDP.pdf
131 views
Information Security
How to Hack an Expensive Camera and Not Get Killed by Your Wife


https://alexhude.github.io/2019/01/24/hacking-leica-m240.html
Focusing on different bits
How to Hack an Expensive Camera and Not Get Killed by Your Wife
Disclaimer
145 views
Information Security
inurl:"/secure/attachment/" jira intext:password
146 views
Information Security
Red Team Nightmare (AV Bypass)

https://techryptic.github.io/2018/07/17/Red-Team-Nightmare-(AV-Bypass)/
107 views
Information Security
https://www.fireeye.com/blog/threat-research/2019/01/apt39-iranian-cyber-espionage-group-focused-on-personal-information.html
Mandiant
APT39 | Iranian Threat Group Focused on Personal Information
APT39 is an Iranian cyber espionage group responsible for the widespread theft of personal information, setting it apart from other Iranian threat groups.
99 views
Information Security
Mimikatz HashClash

https://github.com/caseysmithrc/MimkatzCollider
GitHub
caseysmithrc/MimkatzCollider
Mimikatz HashClash. Contribute to caseysmithrc/MimkatzCollider development by creating an account on GitHub.
98 views
Information Security
https://searchsecurity.techtarget.com/answer/How-can-attacks-bypass-Windows-Driver-Signature-Enforcement?utm_campaign=ssec_security&utm_content=1548362474&utm_medium=social&utm_source=twitter
SearchSecurity
How can attacks bypass Windows Driver Signature Enforcement?
Endgame security researchers demonstrated a new fileless attack technique at Black Hat 2018. Learn from Nick Lewis how this attack can bypass Windows Driver Signature Enforcement.
109 views
Information Security
Writeup – Samsung Galaxy Apps Store RCE via MITM


https://www.adyta.pt/2019/01/29/writeup-samsung-app-store-rce-via-mitm/
105 views
Information Security
Amazing number of potential execution paths within a standard Windows folder! #LOLBINs #DFIR #WSL
84 views