Information Security
@sec_nerd_en
414 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
414 subscribers
Information Security
https://rhinosecuritylabs.com/application-security/completeftp-server-local-privesc-cve-2019-16116/
Rhino Security Labs
CompleteFTP Server Local Privilege Escalation CVE-2019-16116
A walkthrough of CVE-2019-16116 in CompleteFTP, which allows an attacker to hijack the admin account & run arbitrary code with SYSTEM privileges.
221 views
Information Security
https://medium.com/bugbountywriteup/pulse-secure-ssl-vpn-post-auth-rce-to-ssh-shell-2b497d35c35b
Medium
Red Teamer’s Guide to Pulse Secure SSL VPN
A quick guide on exploiting pulse secure for red teaming purposes.
117 views
Information Security
https://github.com/vulnersCom/nmap-vulners
GitHub
GitHub - vulnersCom/nmap-vulners: NSE script based on Vulners.com API
NSE script based on Vulners.com API. Contribute to vulnersCom/nmap-vulners development by creating an account on GitHub.
135 views
Information Security
This media is not supported in your browser
VIEW IN TELEGRAM
[CVE-2019-11184] NetCAT(Network Cache ATtack)

Remotely leaking keystrokes from a victim SSH session
Intel Xeon E5/E7v2 DDIO

Does not require any malicious software
Leak the arrival time of the corresponding packet.

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00290.html
124 views
Information Security
Information Security
https://medium.com/101-writeups/hacking-json-web-token-jwt-233fe6c862e6
https://intx0x80.blogspot.com/2019/10/JWT.html
Blogspot
Introduction how to Exploit JWT
Introduction how to Exploit JWT  Introduction Authentication and authorization make developer overthinking how to implemen...
125 views
Information Security
https://github.com/zer0dx/cryptondie
123 views
Information Security
https://www.praetorian.com/blog/running-a-net-assembly-in-memory-with-meterpreter
Praetorian
Running a .NET Assembly in Memory with Meterpreter
In this blog post I will discuss leveraging Meterpreter’s powershell module to execute .NET assemblies in-memory. Metasploit and Meterpreter are effective and useful tools, but occasionally one encounters a situation where they lack features. Cobalt Strike…
130 views
Information Security
https://github.com/trimstray/nginx-admins-handbook
GitHub
GitHub - trimstray/nginx-admins-handbook: How to improve NGINX performance, security, and other important things.
How to improve NGINX performance, security, and other important things. - trimstray/nginx-admins-handbook
137 views
Information Security
https://iwantmore.pizza/posts/meterpreter-psattack.html
132 views
Information Security
http://ghostlulz.com/xss-svg/?fbclid=IwAR01ZcyLPUp3iEP_rtqmc_1sS1bNn2BPfIBYWnis19o16tXliZ7FkiEQCAc
116 views
Information Security
https://www.loosebyte.com/google-cloud-vulnerability/
LooseByte
LooseByte - Google Cloud Blog Platform Vulnerability
A write-up about one vulnerability found by our team in the Google Cloud Blog platform.
127 views
Information Security
https://github.com/StrangerealIntel/CyberThreatIntel/blob/master/cybercriminal%20groups/TA505/04-10-2019/Malware%20Analysis%2004-10-2019.md
GitHub
CyberThreatIntel/Malware Analysis 04-10-2019.md at master · StrangerealIntel/CyberThreatIntel
Analysis of malware and Cyber Threat Intel of APT and cybercriminals groups - CyberThreatIntel/Malware Analysis 04-10-2019.md at master · StrangerealIntel/CyberThreatIntel
120 views
Information Security
https://github.com/blaCCkHatHacEEkr/PENTESTING-BIBLE
GitHub
GitHub - blaCCkHatHacEEkr/PENTESTING-BIBLE: articles
articles. Contribute to blaCCkHatHacEEkr/PENTESTING-BIBLE development by creating an account on GitHub.
130 views
Information Security
https://offsec.almond.consulting/windows-error-reporting-arbitrary-file-move-eop.html
113 views
Information Security
https://www.virusbulletin.com/uploads/pdf/conference_slides/2019/VB2019-KoikeChubachi.pdf
115 views
Information Security
https://github.com/CapacitorSet/box-js

box-js : A tool for studying JavaScript malware
GitHub
GitHub - CapacitorSet/box-js: A tool for studying JavaScript malware.
A tool for studying JavaScript malware. Contribute to CapacitorSet/box-js development by creating an account on GitHub.
117 views
Information Security
https://blog.sucuri.net/2019/10/an-indirect-way-to-change-cpanel-passwords.html
Sucuri Blog
An Indirect Way to Change cPanel Passwords
Our researcher describes how attackers can modify contact email addresses in cPanel to gain unauthorized access and plant backdoors on compromised websites.
119 views
Information Security
https://www.fortinet.com/blog/threat-research/d-link-routers-found-vulnerable-rce.html
Fortinet Blog
Multiple D-Link Routers Found Vulnerable To Unauthenticated Remote Code Execution
FortiGuard Labs has discovered an unauthenticated command injection vulnerability in D-Link products that could lead to Remote Code Execution (RCE) upon successful exploitation. Learn more.…
164 views
Information Security
https://portswigger.net/web-security/cross-site-scripting/cheat-sheet
portswigger.net
Cross-Site Scripting (XSS) Cheat Sheet - 2025 Edition | Web Security Academy
Interactive cross-site scripting (XSS) cheat sheet for 2025, brought to you by PortSwigger. Actively maintained, and regularly updated with new vectors.
119 views
Information Security
https://darungrim.com/research/2019-10-10-vulnerability-root-cause-analysis-with-time-travel-debugging.html
Darungrim
Vulnerability Root Cause Analysis With Time Travel Debugging
There are many ways to find vulnerabilities. One of the most scalable methods is fuzzing. In essence, fuzzing is a brute-forcing. In many cases, malformed in...
109 views