Information Security
@sec_nerd_en
414 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
414 subscribers
Information Security
UAC Bypass using SystemPropertiesAdvanced.exe and DLL Hijacking (Server 2019)

https://egre55.github.io/system-properties-uac-bypass/
egre55.github.io
SystemPropertiesAdvanced.exe DLL Hijacking UAC Bypass
99 views
Information Security
A short write up about a PDF callback request, which can also be used steal NTMLv2 hashes

https://insert-script.blogspot.com/2019/01/adobe-reader-pdf-callback-via-xslt.html
Blogspot
Adobe Reader - PDF callback via XSLT stylesheet in XFA
I have seen on twitter that there is use for another PDF callback Proof-of-Concept in Adobe Reader. Last year a PDF file called " BadPDF "...
109 views
Information Security
Server Tailgating – A Chosen Plaintext Attack on RDP

https://www.blackhat.com/docs/asia-18/asia-18-Karni-Zinar-Blachman-Server-Tailgating-A-Chosen-Plaintext-Attack-on-RDP.pdf
131 views
Information Security
How to Hack an Expensive Camera and Not Get Killed by Your Wife


https://alexhude.github.io/2019/01/24/hacking-leica-m240.html
Focusing on different bits
How to Hack an Expensive Camera and Not Get Killed by Your Wife
Disclaimer
145 views
Information Security
inurl:"/secure/attachment/" jira intext:password
146 views
Information Security
Red Team Nightmare (AV Bypass)

https://techryptic.github.io/2018/07/17/Red-Team-Nightmare-(AV-Bypass)/
107 views
Information Security
https://www.fireeye.com/blog/threat-research/2019/01/apt39-iranian-cyber-espionage-group-focused-on-personal-information.html
Mandiant
APT39 | Iranian Threat Group Focused on Personal Information
APT39 is an Iranian cyber espionage group responsible for the widespread theft of personal information, setting it apart from other Iranian threat groups.
99 views
Information Security
Mimikatz HashClash

https://github.com/caseysmithrc/MimkatzCollider
GitHub
caseysmithrc/MimkatzCollider
Mimikatz HashClash. Contribute to caseysmithrc/MimkatzCollider development by creating an account on GitHub.
98 views
Information Security
https://searchsecurity.techtarget.com/answer/How-can-attacks-bypass-Windows-Driver-Signature-Enforcement?utm_campaign=ssec_security&utm_content=1548362474&utm_medium=social&utm_source=twitter
SearchSecurity
How can attacks bypass Windows Driver Signature Enforcement?
Endgame security researchers demonstrated a new fileless attack technique at Black Hat 2018. Learn from Nick Lewis how this attack can bypass Windows Driver Signature Enforcement.
109 views
Information Security
Writeup – Samsung Galaxy Apps Store RCE via MITM


https://www.adyta.pt/2019/01/29/writeup-samsung-app-store-rce-via-mitm/
105 views
Information Security
Amazing number of potential execution paths within a standard Windows folder! #LOLBINs #DFIR #WSL
84 views
Information Security
Exploiting SSRF in AWS Elastic Beanstalk

https://www.notsosecure.com/exploiting-ssrf-in-aws-elastic-beanstalk/
NotSoSecure
Exploiting SSRF in AWS Elastic Beanstalk
In this blog, Sunil Yadav, our lead trainer for "Advanced Web Hacking " training class, will discuss a case study where a Server-Side Request Forgery (SSRF) vulnerability was identified and exploited
87 views
Information Security
ActiveX Exploitation in 2019 :: Instantiation is not Scripting


https://srcincite.io/blog/2019/02/01/activex-exploitation-in-2018-instantiation-is-not-scripting.html
92 views
Information Security
Extracting hard-coded credentials using managed code debugging techniques in Windbg (2012)

http://www.exploit-monday.com/2012/05/extracting-hard-coded-credentials-using.html
Exploit-Monday
Extracting hard-coded credentials using managed code debugging techniques in Windbg
tl;dr version Using some simple managed code debugging techniques, you can easily pull out hard-coded credentials from a binary claiming t...
111 views
Information Security
RemoteRecon

https://github.com/xorrior/RemoteRecon
94 views
Information Security
Windows Exploitation Tricks: Exploiting Arbitrary Object Directory Creation for Local Elevation of Privilege


https://googleprojectzero.blogspot.com/2018/08/windows-exploitation-tricks-exploiting.html
Blogspot
Windows Exploitation Tricks: Exploiting Arbitrary Object Directory Creation for Local Elevation of Privilege
Posted by James Forshaw, Project Zero And we’re back again for another blog in my series on Windows Exploitation tricks. This time I’ll...
129 views
Information Security
SharpExchangePriv

https://github.com/panagioto/SharpExchangePriv
GitHub
GitHub - panagioto/SharpExchangePriv: A C# implementation of PrivExchange by @_dirkjan.
A C# implementation of PrivExchange by @_dirkjan. Contribute to panagioto/SharpExchangePriv development by creating an account on GitHub.
113 views
Information Security
Script to generate #AMSI bypass stager

https://github.com/airman604/amsi_bypassr
GitHub
airman604/amsi_bypassr
AMSI bypass stager generator. Contribute to airman604/amsi_bypassr development by creating an account on GitHub.
96 views
Information Security
proxysocks

https://github.com/citronneur/detours.net/tree/master/plugins/proxysocks
GitHub
detours.net/plugins/proxysocks at master · citronneur/detours.net
Hook native API with C#. Contribute to citronneur/detours.net development by creating an account on GitHub.
102 views
Information Security
https://go.recordedfuture.com/hubfs/reports/cta-2019-0206.pdf
130 views