Information Security
@sec_nerd_en
415 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
415 subscribers
Information Security
PAExec is a free, redistributable and open source equivalent to Microsoft's popular PsExec application:


https://github.com/poweradminllc/PAExec
GitHub
GitHub - poweradminllc/PAExec: Remote execution, like PsExec
Remote execution, like PsExec. Contribute to poweradminllc/PAExec development by creating an account on GitHub.
86 views
Information Security
https://zerodium.com/program.html#changelog
93 views
Information Security
Lateral Movement Using internetexplorer.Application Object ( COM )

https://homjxi0e.wordpress.com/2018/02/15/lateral-movement-using-internetexplorer-application-object-com/
matthomjxi0e
Lateral Movement Using internetexplorer.Application Object ( COM )
introduction Use Object COM ( InternetExplorer.Application ) For Execute using Types Exploit-internet Explorer For Execute ==> in Add On Internet Explorer For Get Execute Code using Lateral Move…
89 views
Information Security
https://medium.com/@markmotig/command-prompt-with-system-rights-using-schtasks-ncat-and-metame-d2d333a710aa
Medium
Command prompt with System rights using Schtasks, Ncat and Metame
This is nothing new, but it might be new to someone. Sometimes I just want to run a command prompt as system. There is always “psexec -i…
88 views
Information Security
https://rastamouse.me/2019/09/mwr-labs-c3-first-look/
93 views
Information Security
https://medium.com/@alyssa.o.herrera/pulse-secure-ssl-vpn-post-auth-rce-to-ssh-shell-2b497d35c35b
Medium
Red Teamer’s Guide to Pulse Secure SSL VPN
A quick guide on exploiting pulse secure for red teaming purposes.
106 views
Information Security
https://www.corben.io/jenkins-to-full-pwnage/
106 views
Information Security
https://azeria-labs.com/heap-exploit-development-part-1/

https://azeria-labs.com/heap-overflows-and-the-ios-kernel-heap/
Azeria-Labs
Heap Exploit Development
108 views
Information Security
This media is not supported in your browser
VIEW IN TELEGRAM
CVE-2019-5475 Nexus Repository Manager 2 - OS Command Injection (authenticated)
109 views
Information Security
https://giuliocomi.blogspot.com/2019/08/insecure-secrets-encryption-at-rest.html
Blogspot
Weak credentials encryption at rest with DPAPI: NordVPN case study
Penetration testing
Web, Wireless, Network Security
104 views
Information Security
https://www.bbc.com/news/science-environment-49584941
BBC News
Raspberry Pi computer looks down on Earth
UK satellite company SSTL is taking pictures of the planet with the small educational computer.
127 views
Information Security
https://github.com/zerosum0x0/CVE-2019-0708/blob/master/poc/cve_2019_0708_bluekeep.py
170 views
Information Security
https://medium.com/101-writeups/hacking-json-web-token-jwt-233fe6c862e6
Medium
Hacking JSON Web Token (JWT)
Hey,
132 views
Information Security
Information Security
https://medium.com/101-writeups/hacking-json-web-token-jwt-233fe6c862e6
https://www.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2019/january/jwt-attack-walk-through/
123 views
Information Security
https://twitter.com/gerhart_x/status/1172975805447757826
Twitter
gerhart
Good job! Short exploit modification allows inject unsigned dll to protected (SignatureLevel+MitigationFlags) Hyper-V guest OS process (vmwp.exe) in Windows Server 2019, when Secure Boot option is enabled for host OS. https://t.co/gbqHu4eEiY
114 views
Information Security
https://medium.com/@vickieli/deserialization-bugs-in-the-wild-fe37149a7ee1
Medium
Deserialization Bugs in the Wild
A totally unscientific analysis of deserialization vulns found in the wild
97 views
Information Security
https://twitter.com/Steve_MSFT/status/1174394196184068097
Twitter
Steve Lee
Coming in #PowerShell7 Preview4, you can use `Invoke-DscResource` directly without LCM! Work in progress with some limitations! https://t.co/IpgGASst7g
102 views
Information Security
https://staaldraad.github.io/
95 views
Information Security
Scrapyd Unauthenticated Remote Code Execution

https://github.com/vulhub/vulhub/tree/master/scrapy/scrapyd-unacc
99 views
Information Security
https://twitter.com/RedDrip7/status/1174963799545090048
Twitter
RedDrip Team
#APT A decoy document, pretending to have content regarding conference held in #Kherson Oblast, seems created by #Gamaredon to target #Ukraine. Template injection has been used to avoid being detected. https://t.co/LxJnkx9VlF
100 views