Information Security
@sec_nerd_en
416 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
416 subscribers
Information Security
Apache httpd use after free bugs (unfixed)


https://github.com/hannob/apache-uaf/
GitHub
GitHub - hannob/apache-uaf: Apache use after free bug infos / ASAN stack traces
Apache use after free bug infos / ASAN stack traces - GitHub - hannob/apache-uaf: Apache use after free bug infos / ASAN stack traces
106 views
Information Security
Remote Code Execution in apt/apt-get

https://justi.cz/security/2019/01/22/apt-rce.html
justi.cz
Remote Code Execution in apt/apt-get
tl;dr I found a vulnerability in apt that allows a network man-in-the-middle (or a malicious package mirror) to execute arbitrary code as root on a machine i...
107 views
Information Security
GitHub - 0x27/CiscoRV320Dump: CVE-2019-1653 Exploits For Dumping Cisco RV320 Configurations & Debugging Data

https://github.com/0x27/CiscoRV320Dump/
GitHub
GitHub - 0x27/CiscoRV320Dump: CVE-2019-1652 /CVE-2019-1653 Exploits For Dumping Cisco RV320 Configurations & Debugging Data AND…
CVE-2019-1652 /CVE-2019-1653 Exploits For Dumping Cisco RV320 Configurations & Debugging Data AND Remote Root Exploit! - 0x27/CiscoRV320Dump
90 views
Information Security
Found an intersting bypass:
https://x.x.x.x/WEB-INF/web.xml -> 403 Forbidden
https://x.x.x.x/./WEB-INF/web.xml -> 403 Forbidden
https://x.x.x.x/.//WEB-INF/web.xml -> 200 OK
Tomcat 8 on Windows...
84 views
Information Security
Microsoft Powerpoint as Malware Dropper

https://marcoramilli.blogspot.com/2018/11/microsoft-powerpoint-as-malware-dropper.html
80 views
Information Security
Windows2019 Bypass UAC and Defender to get system permissions


http://youtu.be/sJvDxh63Ptg
YouTube
Windows2019 Bypass UAC and Defender to get system permissions
443 views
Information Security
UAC Bypass using SystemPropertiesAdvanced.exe and DLL Hijacking (Server 2019)

https://egre55.github.io/system-properties-uac-bypass/
egre55.github.io
SystemPropertiesAdvanced.exe DLL Hijacking UAC Bypass
99 views
Information Security
A short write up about a PDF callback request, which can also be used steal NTMLv2 hashes

https://insert-script.blogspot.com/2019/01/adobe-reader-pdf-callback-via-xslt.html
Blogspot
Adobe Reader - PDF callback via XSLT stylesheet in XFA
I have seen on twitter that there is use for another PDF callback Proof-of-Concept in Adobe Reader. Last year a PDF file called " BadPDF "...
109 views
Information Security
Server Tailgating – A Chosen Plaintext Attack on RDP

https://www.blackhat.com/docs/asia-18/asia-18-Karni-Zinar-Blachman-Server-Tailgating-A-Chosen-Plaintext-Attack-on-RDP.pdf
131 views
Information Security
How to Hack an Expensive Camera and Not Get Killed by Your Wife


https://alexhude.github.io/2019/01/24/hacking-leica-m240.html
Focusing on different bits
How to Hack an Expensive Camera and Not Get Killed by Your Wife
Disclaimer
145 views
Information Security
inurl:"/secure/attachment/" jira intext:password
146 views
Information Security
Red Team Nightmare (AV Bypass)

https://techryptic.github.io/2018/07/17/Red-Team-Nightmare-(AV-Bypass)/
107 views
Information Security
https://www.fireeye.com/blog/threat-research/2019/01/apt39-iranian-cyber-espionage-group-focused-on-personal-information.html
Mandiant
APT39 | Iranian Threat Group Focused on Personal Information
APT39 is an Iranian cyber espionage group responsible for the widespread theft of personal information, setting it apart from other Iranian threat groups.
99 views
Information Security
Mimikatz HashClash

https://github.com/caseysmithrc/MimkatzCollider
GitHub
caseysmithrc/MimkatzCollider
Mimikatz HashClash. Contribute to caseysmithrc/MimkatzCollider development by creating an account on GitHub.
98 views
Information Security
https://searchsecurity.techtarget.com/answer/How-can-attacks-bypass-Windows-Driver-Signature-Enforcement?utm_campaign=ssec_security&utm_content=1548362474&utm_medium=social&utm_source=twitter
SearchSecurity
How can attacks bypass Windows Driver Signature Enforcement?
Endgame security researchers demonstrated a new fileless attack technique at Black Hat 2018. Learn from Nick Lewis how this attack can bypass Windows Driver Signature Enforcement.
109 views
Information Security
Writeup – Samsung Galaxy Apps Store RCE via MITM


https://www.adyta.pt/2019/01/29/writeup-samsung-app-store-rce-via-mitm/
105 views
Information Security
Amazing number of potential execution paths within a standard Windows folder! #LOLBINs #DFIR #WSL
84 views
Information Security
Exploiting SSRF in AWS Elastic Beanstalk

https://www.notsosecure.com/exploiting-ssrf-in-aws-elastic-beanstalk/
NotSoSecure
Exploiting SSRF in AWS Elastic Beanstalk
In this blog, Sunil Yadav, our lead trainer for "Advanced Web Hacking " training class, will discuss a case study where a Server-Side Request Forgery (SSRF) vulnerability was identified and exploited
87 views
Information Security
ActiveX Exploitation in 2019 :: Instantiation is not Scripting


https://srcincite.io/blog/2019/02/01/activex-exploitation-in-2018-instantiation-is-not-scripting.html
92 views
Information Security
Extracting hard-coded credentials using managed code debugging techniques in Windbg (2012)

http://www.exploit-monday.com/2012/05/extracting-hard-coded-credentials-using.html
Exploit-Monday
Extracting hard-coded credentials using managed code debugging techniques in Windbg
tl;dr version Using some simple managed code debugging techniques, you can easily pull out hard-coded credentials from a binary claiming t...
111 views