Information Security
414 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
Simple bash script to take screenshots

#!/bin/bash
file="/path/urls.txt"
while IFS= read line
do
echo "$line"
firefox -screenshot "$line".png "$line"
&>/dev/null
done < "$file"




#linux
#bash
#terminal


@sec_nerd
Layered and obfuscated PowerShell that injects a reverse TCP shell into memory.

https://pastebin.com/17GEj4eP
Just released a new #mimikatz version to support Windows 10 1803 to bypass the Credential Guard authentication chain

https://github.com/gentilkiwi/mimikatz/releases


#windows
#mimikatz
JuicyPotato - A useful tool to Escalate from Windows Service Account to NT AUTHORITY\SYSTEM

ohpe.it/juicy-potato/

#windows

@sec_nerd_en
SQL injection, Oracle and full-width characters

https://bit.ly/2In4Xik


#sqli
#Oracle
a new metasploit post module for gathering information stored by #git. Pillage credentials, SSH keys, and locate internal git services for lateral moves.

https://bit.ly/2xFKIbe


#msf
ScriptBlock based functionnal AMSI bypass PoC tested today on a freshly updated #Windows10

https://pastebin.com/raw/iFVpKim5
https://github.com/kmkz/Pentesting/blob/master/Pentest-cheat-sheet
Local policies restrictions/Defender/#AMSI bypass using WMI and p0wnedShell + Meterpreter session

https://cobbr.io/ScriptBlock-Logging-Bypass.html