Information Security
@sec_nerd_en
408 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
408 subscribers
Information Security
https://ired.team/offensive-security/credential-access-and-credential-dumping/intercepting-logon-credentials-by-hooking-msv1_0-spacceptcredentials
www.ired.team
Intercepting Logon Credentials by Hooking msv1_0!SpAcceptCredentials | Red Team Notes
Hooking, Credential Stealing
132 views
Information Security
https://jlajara.gitlab.io/posts/2020/01/25/XSS_tag_event_analyzer.html
242 views
Information Security
https://www.cybereason.com/blog/dcom-lateral-movement-techniques
Cybereason
New lateral movement techniques abuse DCOM technology
The arsenal of lateral movement techniques was expanded with new methods that abuse the DCOM functionality of Windows applications.
123 views
Information Security
https://pentestlaboratories.com/2020/01/27/msbuild-without-msbuild/
Pentest Laboratories
MSBuild without MSBuild
MSBuild is a trusted Windows binary that is part of Microsoft .NET framework and can be utilized to build applications in environments where Visual Studio is not installed. From the perspective of …
121 views
Information Security
https://twitter.com/mrgretzky/status/1221809489608921090?s=20
Twitter
Kuba Gretzky
pwndrop - The new fast & fun way to set up an HTTP/WebDAV server for your payloads is coming! python -m SimpleHTTPServer may soon be retiring. Stay tuned! Here is a quick sneak peek: https://t.co/bzVV6E9oyT
118 views
Information Security
https://sid-500.com/2020/01/28/office-365-add-user-accounts-and-mailboxes-with-powershell/
SID-500.COM
Office 365: Add User Accounts and Mailboxes with PowerShell
More and more companies are moving to the cloud. Subscribing cloud services means less hardware maintenance, more comfort, and an “always-on” feeling. As an administrator, you have to g…
112 views
Information Security
https://blog.netspi.com/attacking-application-specific-sql-server-instances/
NetSPI Blog
Attacking Application Specific SQL Server Instances
This blog walks through how to quickly identify SQL Server instances used by 3rd party applications that are configured with default passwords using PowerUpSQL.
111 views
Information Security
https://www.netmeister.org/blog/ops-lessons.html
www.netmeister.org
(A few) Ops Lessons We All Learn The Hard Way
Ops is hard. What have learned so far?
114 views
Information Security
https://github.com/luxunator/weebmyip
GitHub
GitHub - luxunator/weebmyip: Website with an API to get information on IP addresses, and of course an anime girl to read you it
Website with an API to get information on IP addresses, and of course an anime girl to read you it - GitHub - luxunator/weebmyip: Website with an API to get information on IP addresses, and of cour...
123 views
Information Security
https://github.com/outflanknl/Zipper
GitHub
GitHub - outflanknl/Zipper: Zipper, a CobaltStrike file and folder compression utility.
Zipper, a CobaltStrike file and folder compression utility. - outflanknl/Zipper
126 views
Information Security
Some Lateral Movement Methods:

-Pass the Hash/Relay ((Net-)NTLM)
-Pass the Ticket (Silver/Golden)
-RDP (Legit creds)
-Remote Services (VNC/SSH)
-(D)COM (Remote sched tasks, Services, WMI)
-Remote Service Vuln (EB)
-Admin Shares (PSExec)
-Webshell (Chopper)
-WinRM (PS Remoting)
154 views
Information Security
https://medium.com/@reegun/curl-exe-is-the-new-rundll32-exe-lolbin-3f79c5f35983
129 views
Information Security
#OSINT :
Built With:https://builtwith.com
Google Dorks:https://exploit-db.com/google-hacking-database/
Metagoofil:https://code.google.com/archive/p/metagoofil
Censys:https://censys.io
URLScan:https://urlscan.io
DNSStuff:https://dnsstuff.com/tools
Netcraft:https://searchdns.netcraft.com
#bugbountytips #redteam #BugBountyTip
BuiltWith
Find out what websites are BuiltWith
153 views
Information Security
Subdomain Takeover

https://t.co/5m9oDoTHQZ
https://t.co/Q7mEFPn33S
https://t.co/K2vaBNyvx0
https://t.co/U2pR9LUPlZ
https://t.co/O7WewUuj6u
https://t.co/Ix1MeUXm9O
https://t.co/aQrm9dW6qc
https://t.co/MeMOdEzOPu
https://t.co/r5v8T8pWHO
https://t.co/PsBhaoQlh7

#bugbounty
Smaran Chand
Subdomain takeover via pantheon
I hope you are having a great time, I would like to share an issue which i discovered in less than 10 minutes and got rewarded $XXXX bounty within 24 hours of the submission. So the story begins wh…
130 views
Information Security
Parameter tampering

https://t.co/qUyDVS7cON
https://t.co/MvYCAJHnvh
https://t.co/S7cjVw1wVc
https://t.co/QQ1tKjs1ww
https://t.co/gvP1bCRvXY
https://t.co/cHy7ZqsHr7
https://t.co/C8Qii9WG5E
https://t.co/jsS8CHp9Vb
https://t.co/7QMCAbzLg1
https://t.co/JBdqNPVGTV

#bugbounty
Security Breached Blog
Improper Input Validation | Add Custom Text and URLs In SMS send by Snapchat | Bug Bounty POC - Security Breached Blog
Hey guys so this blog post is about an Issue in Snapchat's Website, due to Improper Input Validation one can add custom text & urls in SMS send by Snapchat here's a Short POC of the issue.
127 views
Information Security
https://outflank.nl/blog/2018/01/16/hunting-for-evil-detect-macros-being-executed/
123 views
Information Security
https://github.com/Mr-Un1k0d3r/PowerLessShell
GitHub
GitHub - Mr-Un1k0d3r/PowerLessShell: Run PowerShell command without invoking powershell.exe
Run PowerShell command without invoking powershell.exe - Mr-Un1k0d3r/PowerLessShell
124 views
Information Security
https://h0mbre.github.io/HEVD_AbitraryWrite_32bit/
The Human Machine Interface
HEVD Exploits – Windows 7 x86 Arbitrary Write
Introduction Continuing on with the Windows exploit journey, it’s time to start exploiting kernel-mode drivers and learning about writing exploits for ring 0. As I did with my OSCE prep, I’m mainly blogging my progress as a way for me to reinforce concepts…
131 views
Information Security
https://www.wietzebeukema.nl/blog/powershell-obfuscation-using-securestring
www.wietzebeukema.nl
PowerShell Obfuscation using SecureString
PowerShell has built-in functionality to save sensitive plaintext data to an encrypted object called SecureString. Malicious actors have exploited this functionality as a means to obfuscate PowerShell commands. This blog post discusses SecureString, examples…
140 views
Information Security
https://github.com/MayurUdiniya/Chrome-CORS
GitHub
GitHub - MayurUdiniya/Chrome-CORS: A demo vulnerable application for stealing sensitive information by abusing Google Chrome cache
A demo vulnerable application for stealing sensitive information by abusing Google Chrome cache - GitHub - MayurUdiniya/Chrome-CORS: A demo vulnerable application for stealing sensitive information...
131 views