Information Security
@sec_nerd_en
414 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
414 subscribers
Information Security
https://rot47.net/_s/upload/2013/10/22/3581415488cdbf66756e75dee965be22.png
128 views
Information Security
CVE-2019-5736: Escape from Docker and Kubernetes containers to root on host

https://blog.dragonsector.pl/2019/02/cve-2019-5736-escape-from-docker-and.html
blog.dragonsector.pl
CVE-2019-5736: Escape from Docker and Kubernetes containers to root on host
Introduction The inspiration to the following research was a CTF task called namespaces by _tsuro from the 35C3 CTF . While solvin...
128 views
Information Security
ghostbin.com/paste/c4dhv 1day webkit RCE
138 views
Information Security
Bypass Windows Exploit Guard ASR

https://github.com/sevagas/WindowsDefender_ASR_Bypass-OffensiveCon2019
GitHub
GitHub - sevagas/WindowsDefender_ASR_Bypass-OffensiveCon2019: Public documents related to my talk "Bypass Windows Exploit Guard…
Public documents related to my talk "Bypass Windows Exploit Guard ASR" at Offensive Con 2019. - sevagas/WindowsDefender_ASR_Bypass-OffensiveCon2019
132 views
Information Security
No nmap? No problem! Grab banners from local IPv4 listening ports.

netstat -nlt | grep 'tcp ' | grep -Eo "[1-9][0-9]*" | xargs -I {} sh -c "echo "" | nc -v -n -w1 127.0.0.1 {}"
163 views
Information Security
Web Cache Deception Attack leads to user info disclosure

https://medium.com/@kunal94/web-cache-deception-attack-leads-to-user-info-disclosure-805318f7bb29
Medium
Web Cache Deception Attack leads to user info disclosure
Hello Everyone
184 views
Information Security
Extract usernames from Cisco ASA

https://github.com/milo2012/CVE-2018-0296
GitHub
GitHub - milo2012/CVE-2018-0296: Test CVE-2018-0296 and extract usernames
Test CVE-2018-0296 and extract usernames. Contribute to milo2012/CVE-2018-0296 development by creating an account on GitHub.
202 views
Information Security
[Remote Exec | Persistence] - Hunting for remote windows service creation

https://blog.menasec.net/2019/03/threat-hunting-26-remote-windows.html
200 views
Information Security
https://www.joachim-bauch.de/tutorials/loading-a-dll-from-memory/
169 views
Information Security
pastebin_scraper

https://github.com/Critical-Start/pastebin_scraper


Automated tool to monitor pastebin for interesting information
130 views
Information Security
https://twitter.com/thezdi/status/1108442659947839488
Twitter
Zero Day Initiative
Confirmed! The @fluoroacetate team used an integer underflow and a race condition to escape the virtual machine and pop calc on the underlying OS. They earned another $35,000 and 3 points towards Master on Pwn.
115 views
Information Security
https://twitter.com/thezdi/status/1108490136046571521
173 views
Information Security
https://www.bbc.co.uk/programmes/p06pnd71
BBC
BBC Radio 5 live - 5 Live News Specials, The Real Lives of Spies
5 Live’s Nihal Arthanayake meets six spies from MI5, MI6 and GCHQ.
144 views
Information Security
https://blog.ripstech.com/2018/php-object-injection/?utm_medium=Tweet&utm_campaign=Blog&utm_term=Security&utm_content=What%20is%20PHP%20Object%20Injection&utm_source=Twitter
119 views
Information Security
https://github.com/fireeye/commando-vm
GitHub
GitHub - mandiant/commando-vm: Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual…
Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mandiant.com - mandiant/commando-vm
120 views
Information Security
https://www.evonide.com/vulncode-db-a-vulnerable-code-database/
136 views
Information Security
Extracting SSH Private Keys from Windows 10 ssh-agent


https://blog.ropnop.com/extracting-ssh-private-keys-from-windows-10-ssh-agent/
ropnop blog
Extracting SSH Private Keys From Windows 10 ssh-agent
The newest Windows 10 update includes OpenSSH utilities, including ssh-agent. Here’s how to extract unencrypted saved private keys from the registry
187 views
Information Security
https://unit42.paloaltonetworks.com/behind-the-scenes-with-oilrig/
Unit 42
Behind the Scenes with OilRig
Unit 42 digs into the recent OilRig data dump and finds new information on the breadth of attacks and OilRig’s toolset. Our analysis show OilRig attacks are broader than previously thought: 97 organizations in 27 countries, including the Middle East and China…
139 views
Information Security
https://medium.com/@mattharr0ey/remote-code-execution-on-microsoft-edge-url-protocol-a67d0f96b32d
Medium
Remote code execution On Microsoft edge using URL Protocol
Introduction
103 views
Information Security
EL3 Tour: Get the Ultimate Privilege of Android Phone

https://speakerdeck.com/hhj4ck/el3-tour-get-the-ultimate-privilege-of-android-phone
Speaker Deck
EL3 Tour: Get the Ultimate Privilege of Android Phone
Slides for INFILTRATE 2019
119 views