Information Security
@sec_nerd_en
412 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
412 subscribers
Information Security
https://azeria-labs.com/heap-exploit-development-part-1/

https://azeria-labs.com/heap-overflows-and-the-ios-kernel-heap/
Azeria-Labs
Heap Exploit Development
108 views
Information Security
This media is not supported in your browser
VIEW IN TELEGRAM
CVE-2019-5475 Nexus Repository Manager 2 - OS Command Injection (authenticated)
109 views
Information Security
https://giuliocomi.blogspot.com/2019/08/insecure-secrets-encryption-at-rest.html
Blogspot
Weak credentials encryption at rest with DPAPI: NordVPN case study
Penetration testing
Web, Wireless, Network Security
104 views
Information Security
https://www.bbc.com/news/science-environment-49584941
BBC News
Raspberry Pi computer looks down on Earth
UK satellite company SSTL is taking pictures of the planet with the small educational computer.
126 views
Information Security
https://github.com/zerosum0x0/CVE-2019-0708/blob/master/poc/cve_2019_0708_bluekeep.py
169 views
Information Security
https://medium.com/101-writeups/hacking-json-web-token-jwt-233fe6c862e6
Medium
Hacking JSON Web Token (JWT)
Hey,
131 views
Information Security
Information Security
https://medium.com/101-writeups/hacking-json-web-token-jwt-233fe6c862e6
https://www.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2019/january/jwt-attack-walk-through/
123 views
Information Security
https://twitter.com/gerhart_x/status/1172975805447757826
Twitter
gerhart
Good job! Short exploit modification allows inject unsigned dll to protected (SignatureLevel+MitigationFlags) Hyper-V guest OS process (vmwp.exe) in Windows Server 2019, when Secure Boot option is enabled for host OS. https://t.co/gbqHu4eEiY
114 views
Information Security
https://medium.com/@vickieli/deserialization-bugs-in-the-wild-fe37149a7ee1
Medium
Deserialization Bugs in the Wild
A totally unscientific analysis of deserialization vulns found in the wild
97 views
Information Security
https://twitter.com/Steve_MSFT/status/1174394196184068097
Twitter
Steve Lee
Coming in #PowerShell7 Preview4, you can use `Invoke-DscResource` directly without LCM! Work in progress with some limitations! https://t.co/IpgGASst7g
102 views
Information Security
https://staaldraad.github.io/
95 views
Information Security
Scrapyd Unauthenticated Remote Code Execution

https://github.com/vulhub/vulhub/tree/master/scrapy/scrapyd-unacc
99 views
Information Security
https://twitter.com/RedDrip7/status/1174963799545090048
Twitter
RedDrip Team
#APT A decoy document, pretending to have content regarding conference held in #Kherson Oblast, seems created by #Gamaredon to target #Ukraine. Template injection has been used to avoid being detected. https://t.co/LxJnkx9VlF
100 views
Information Security
https://github.com/evilAdan0s/CVE-2019-16097/
GitHub
GitHub - evilAdan0s/CVE-2019-16097: CVE-2019-16097 PoC
CVE-2019-16097 PoC. Contribute to evilAdan0s/CVE-2019-16097 development by creating an account on GitHub.
90 views
Information Security
Bypass firewalls by abusing DNS history

https://github.com/vincentcox/bypass-firewalls-by-DNS-history
105 views
Information Security
https://github.com/PowerShellMafia/PowerSploit/tree/master/Recon
GitHub
PowerSploit/Recon at master · PowerShellMafia/PowerSploit
PowerSploit - A PowerShell Post-Exploitation Framework - PowerShellMafia/PowerSploit
106 views
Information Security
https://www.kalitut.com/2019/05/Wifiphisher-evil-twin-attack.html
KaliTut
KaliTut: Wifiphisher Evil Twin Attack
Wifiphisher uses social engineering to get a password for WiFi and websites. Those. You do not need a powerful hardware for a long time for brute-force password.
108 views
Information Security
https://medium.com/bugbountywriteup/bug-bounty-tips-tricks-js-javascript-files-bdde412ea49d
Medium
Bug Bounty — Tips / Tricks / JS (JavaScript Files)
It all started in month of August when I reached out to Gerben Javado regarding a question, yes it was a basic question but a quick chat…
138 views
Information Security
https://github.com/ytdl-org/youtube-dl/
GitHub
GitHub - ytdl-org/youtube-dl: Command-line program to download videos from YouTube.com and other video sites
Command-line program to download videos from YouTube.com and other video sites - ytdl-org/youtube-dl
160 views
Information Security
https://twitter.com/bohops/status/970792894012551171
174 views