Information Security
@sec_nerd_en
408 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
408 subscribers
Information Security
https://rezo.blog/hacking/2019/11/29/rce-via-imagetragick.html
130 views
Information Security
https://github.com/johnjohnsp1/Shellcode-Via-HTA
GitHub
GitHub - johnjohnsp1/Shellcode-Via-HTA: How To Execute Shellcode via HTA
How To Execute Shellcode via HTA. Contribute to johnjohnsp1/Shellcode-Via-HTA development by creating an account on GitHub.
130 views
Information Security
https://sandboxescaper.blogspot.com/p/disclosures_8.html
112 viewsedited  
Information Security
How I hacked 92k+ users Information using open s3 bucket


https://link.medium.com/R4um5AuO21


#bugbounty #infosec #SRT #security #Databreach #Synack #hackerone #bugcrowd #whitehat #hacked #securityengineer #databreach
Medium
How I hacked 92k users Information using open s3 bucket
First of all this is my biggest hack I did in my life.The website I found few day ago while I am looking for bus ticket.After booking Bus…
141 viewsedited  
Information Security
https://github.com/hackerschoice/thc-tesla-powerwall2-hack/blob/master/README.md
GitHub
hackerschoice/thc-tesla-powerwall2-hack
TESLA PowerWall 2 Security Shenanigans . Contribute to hackerschoice/thc-tesla-powerwall2-hack development by creating an account on GitHub.
121 views
Information Security
https://3xpl01tc0d3r.blogspot.com/2019/11/managed-dll-exports-and-run-via-rundll32.html
Blogspot
Managed DLL Exports and run via rundll32
Blogs related to information security.
118 views
Information Security
https://www.networkinghub.in/2019/02/ip-routing-basic-by-networking-hub.html
Networking Hub
IP Routing Basics by Networking Hub.
types of networking, networking tutorials, networking basics, what is networking and example, networking pdf, networking people, networking courses
119 views
Information Security
https://github.com/0ang3el/websocket-smuggle
GitHub
GitHub - 0ang3el/websocket-smuggle: Issues with WebSocket reverse proxying allowing to smuggle HTTP requests
Issues with WebSocket reverse proxying allowing to smuggle HTTP requests - 0ang3el/websocket-smuggle
143 views
Information Security
https://blackcloud.me/Win32-shellcode-hashed/
BlackCloud
Win32 Shellcode - Hashed Reverse Shell
142 views
Information Security
https://github.com/facebookincubator/WEASEL
GitHub
GitHub - facebookarchive/WEASEL: DNS covert channel implant for Red Teams.
DNS covert channel implant for Red Teams. Contribute to facebookarchive/WEASEL development by creating an account on GitHub.
110 views
Information Security
https://medium.com/@d.bougioukas/red-team-diary-entry-3-custom-malware-development-establish-a-shell-through-the-browser-bed97c6398a5
Medium
Red Team Diary, Entry #3: Custom Malware Development (Establish A Shell Through the Browser)
Repurposing BeEF and AutoIt for stealthy malware development
131 views
Information Security
https://devblogs.microsoft.com/scripting/use-powershell-to-interact-with-the-windows-api-part-1/

https://devblogs.microsoft.com/scripting/use-powershell-to-interact-with-the-windows-api-part-2/

https://devblogs.microsoft.com/scripting/use-powershell-to-interact-with-the-windows-api-part-3/
Microsoft News
Use PowerShell to Interact with the Windows API: Part 1
Summary: Guest blogger, Matt Graeber, discusses how to use Windows PowerShell to interact with Windows API functions in Part 1 of a three-part series. Microsoft Scripting Guy, Ed Wilson, is here. Guest blogger, Matt Graeber, is back. Matt first joined us…
95 views
Information Security
https://staaldraad.github.io/post/2019-11-24-argument-injection/
92 views
Information Security
https://h0mbre.github.io/Learn-C-By-Creating-A-Rootkit/
The Human Machine Interface
Creating a Rootkit to Learn C
Background Information This post is my solution for the last assignment in my Learning-C repository. I thought a good way to cap off a repo designed to introduce people to very basic C programming would be to take those very basic techinques and make a simple…
93 views
Information Security
https://medium.com/@adam.toscher/top-five-ways-i-got-domain-admin-on-your-internal-network-before-lunch-2018-edition-82259ab73aaa
Medium
Top Five Ways I Got Domain Admin on Your Internal Network before Lunch (2018 Edition)
Yes it’s still easy to get Domain Admin “before lunch” as it was when I first started.
108 views
Information Security
https://blog.stealthbits.com/creating-persistence-with-dcshadow/
Insider Threat Security Blog
Creating Persistence with DCShadow | Insider Threat Security Blog
Now that we understand the basics of the DCShadow feature, let’s look at some ways in which attackers can leverage DCShadow in a real world attack scenario.  As we learned, DCShadow requires elevated rights such as Domain Admin, so you can assume an attacker…
94 views
Information Security
https://twitter.com/mame82/status/1202224133217624065?s=20
Twitter
Marcus Mengs
Dump AES keys from wireless Logitech receivers using Chrome Browser. Demo page: https://t.co/NRojyJTkg0 Source: https://t.co/oiqY50npOA https://t.co/yHjXFZTJ5v
99 views
Information Security
https://cpr-zero.checkpoint.com/vulns/cprid-2137/
CPR-Zero
CPR-Zero: CVE-2019-1256
Check Point Research Vulnerability Repository
109 views
Information Security
https://www.cobaltstrike.com/downloads/csmanual40.pdf
103 views
Information Security
https://www.youtube.com/watch?v=N0Ne623fKWc
YouTube
Reverse Engineering WhatsApp Encryption for Chat Manipulation and More
We managed to reverse engineer WhatsApp web source code and successfully decrypted WhatsApp traffic. During the process we translated all WhatsApp web functions to python and created Burpsuit extension that you can use to investigate WhatsApp traffic and…
121 views