Information Security
@sec_nerd_en
415 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
415 subscribers
Information Security
https://medium.com/@adam.toscher/top-five-ways-i-got-domain-admin-on-your-internal-network-before-lunch-2018-edition-82259ab73aaa
Medium
Top Five Ways I Got Domain Admin on Your Internal Network before Lunch (2018 Edition)
Yes it’s still easy to get Domain Admin “before lunch” as it was when I first started.
108 views
Information Security
https://blog.stealthbits.com/creating-persistence-with-dcshadow/
Insider Threat Security Blog
Creating Persistence with DCShadow | Insider Threat Security Blog
Now that we understand the basics of the DCShadow feature, let’s look at some ways in which attackers can leverage DCShadow in a real world attack scenario.  As we learned, DCShadow requires elevated rights such as Domain Admin, so you can assume an attacker…
94 views
Information Security
https://twitter.com/mame82/status/1202224133217624065?s=20
Twitter
Marcus Mengs
Dump AES keys from wireless Logitech receivers using Chrome Browser. Demo page: https://t.co/NRojyJTkg0 Source: https://t.co/oiqY50npOA https://t.co/yHjXFZTJ5v
99 views
Information Security
https://cpr-zero.checkpoint.com/vulns/cprid-2137/
CPR-Zero
CPR-Zero: CVE-2019-1256
Check Point Research Vulnerability Repository
109 views
Information Security
https://www.cobaltstrike.com/downloads/csmanual40.pdf
103 views
Information Security
https://www.youtube.com/watch?v=N0Ne623fKWc
YouTube
Reverse Engineering WhatsApp Encryption for Chat Manipulation and More
We managed to reverse engineer WhatsApp web source code and successfully decrypted WhatsApp traffic. During the process we translated all WhatsApp web functions to python and created Burpsuit extension that you can use to investigate WhatsApp traffic and…
121 views
Information Security
https://github.com/cynops/Frida-Hooks/tree/master/RDP_Rogue
GitHub
cynops/Frida-Hooks
Contribute to cynops/Frida-Hooks development by creating an account on GitHub.
113 views
Information Security
https://hackerone.com/reports/701183
HackerOne
Node.js third-party modules disclosed on HackerOne: [tree-kill] RCE...
I would like to report a `RCE` issue in the `tree-kill` module.
It allows to execute `arbitrary commands remotely inside the victim's PC`

# Module
**module name:** `tree-kill`
**version:**...
107 views
Information Security
http://download.nccst.nat.gov.tw/attachfilenew/Shaoye%20Botnet%20Affecting%20Network%20Devices%20in%20Asia-Pacific.pdf
105 views
Information Security
https://github.com/sachinkamath/ntlmrecon
GitHub
GitHub - pwnfoo/NTLMRecon: Enumerate information from NTLM authentication enabled web endpoints 🔎
Enumerate information from NTLM authentication enabled web endpoints 🔎 - pwnfoo/NTLMRecon
98 views
Information Security
http://www.peppermalware.com/2019/12/analysis-of-malicious-electrumx-servers.html
Peppermalware
Analysis of Malicious ElectrumX Servers Source Code
Blog about computer security, malware and reverse engineering.
91 views
Information Security
https://seclists.org/oss-sec/2019/q4/122
seclists.org
oss-sec: [CVE-2019-14899] Inferring and hijacking VPN-tunneled TCP connections.
95 views
Information Security
https://itm4n.github.io/localservice-privileges/
itm4n’s blog
Give Me Back My Privileges! Please?
I want to tell you the story of a service account which lost all its powers (a.k.a. privileges). Windows world is getting increasingly ruthless and when the system considers you are not worthy, this is what happens. Fortunately for our service account, all…
552 views
Information Security
https://github.com/FuzzySecurity/PowerShell-Suite
GitHub
GitHub - FuzzySecurity/PowerShell-Suite: My musings with PowerShell
My musings with PowerShell. Contribute to FuzzySecurity/PowerShell-Suite development by creating an account on GitHub.
97 views
Information Security
http://www.labofapenetrationtester.com/2014/11/powershell-for-client-side-attacks.html
Labofapenetrationtester
Using PowerShell for Client Side Attacks
Home of Nikhil SamratAshok Mittal. Posts about Red Teaming, Offensive PowerShell, Active Directory and Pen Testing.
93 views
Information Security
https://posts.specterops.io/attacking-freeipa-part-ii-enumeration-ad27224371e1
Medium
Attacking FreeIPA — Part II Enumeration
In Part I of this series, we reviewed some of the background and underlying technologies utilized by FreeIPA. We also discussed several…
98 views
Information Security
https://www.forensicfocus.com/News/article/sid=3750/
Forensic Focus
Forensic Extraction Of Data From Mobile Apple Devices
99 views
Information Security
https://labs.nettitude.com/blog/cve-2019-12750-symantec-endpoint-protection-local-privilege-escalation-part-1/
LRQA
CVE-2019-12750: Symantec Endpoint Protection Local Privilege Escalation – Part 1
A malicious application can take advantage of a vulnerability in Symantec Endpoint Protection to leak privileged information and/or execute code with higher privileges, thus taking full control over the affected host.
107 views
Information Security
CVE-2019-19609 Strapi Framework Post-Auth RCE

curl -H $'Authorization: Bearer [jwt]' ... --data {"plugin": "documentation && $(whoami > /tmp/whoami)","port":"1337"}

https://bittherapy.net/post/strapi-framework-remote-code-execution/
bittherapy.net
Strapi Framework Vulnerable to Remote Code Execution (CVE-2019-19609)
CVE: CVE-2019-19609
Vendor: Strapi (https://strapi.io)
Product: Strapi Framework
Version Affected: strapi-3.0.0-beta.17.7 and earlier
Fix PR: https://github.com/strapi/strapi/pull/4636
NPM Advisory: https://www.npmjs.com/advisories/1424
Description:
“Manage…
116 views
Information Security
https://immersivelabs.com/2019/12/04/aviatrix-vpn-client-vulnerability/
Immersive Labs
Immersive Labs Unearths Vulnerability in Aviatrix VPN - Immersive Labs
Aviatrix, an enterprise VPN company with customers including Nasa, Shell and BT, has recently patched a vulnerability uncovered by Immersive Labs researcher and content engineer Alex Seymour.
115 views