Information Security
@sec_nerd_en
408 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
408 subscribers
Information Security
https://cdn.sekurak.pl/animations/req_poisoning/
101 views
Information Security
https://www.ezequiel.tech/p/10k-host-header.html
www.ezequiel.tech
$10k host header
Website of Ezequiel Pereira, Uruguayan security enthusiast and student.
106 views
Information Security
https://medium.com/bugbountywriteup/bounty-tip-how-to-push-injection-through-json-xml-stubs-for-api-699f4959fc5
Medium
Bounty Tip : How to Push Injection through JSON/XML stubs for API
How to find vulnerabilities where no one has looked for them yet?
102 views
Information Security
https://github.com/struct/mms
GitHub
GitHub - struct/mms: Modern Memory Safety in C/C++
Modern Memory Safety in C/C++. Contribute to struct/mms development by creating an account on GitHub.
91 views
Information Security
https://twitter.com/Naategh_/status/1239466683577675777

#bugbounty #bugbountytips
Twitter
Naategh
https://t.co/dIcl2ddG9g is not only site you should check for leaks, here are some others: https://t.co/W24EggMRIl https://t.co/zXSBshpLms https://t.co/heiv3YRMLe #bugbounty #bugbountytips
95 viewsedited  
Information Security
https://medium.com/@qazbnm456/cve-2020-2551-unauthenticated-remote-code-execution-in-iiop-protocol-via-malicious-jndi-lookup-119bac7c1eb2
Medium
CVE-2020-2551: Unauthenticated Remote Code Execution in IIOP protocol via Malicious JNDI Lookup
TL;DR
97 views
Information Security
https://github.com/piotrflorczyk/cve-2019-1458_POC
GitHub
GitHub - piotrflorczyk/cve-2019-1458_POC: POC for cve-2019-1458
POC for cve-2019-1458. Contribute to piotrflorczyk/cve-2019-1458_POC development by creating an account on GitHub.
97 views
Information Security
https://medium.com/bugbountywriteup/how-i-bypassed-the-otp-verification-process-part-3-1bd49f8d76b9
Medium
How I bypassed the OTP verification process? Part - 3
Turbo Intruder - The Burp Extension I fell in love with!
111 views
Information Security
https://github.com/junorouse/ctf/blob/master/2020/confidence-pre/angry-defender.md
GitHub
ctf/angry-defender.md at master · junorouse/ctf
:grin: writeup & exploits :yum:. Contribute to junorouse/ctf development by creating an account on GitHub.
108 views
Information Security
https://brutelogic.com.br/blog/filter-bypass-in-multi-context/
Brute XSS
Filter Bypass in Multi Context - Brute XSS
Some Cross-Site Scripting (XSS) vectors arise from strict but allowed possibilities, forming tricky combinations. It’s all about contexts and sometimes the interaction between different contexts with different filters lead to some interesting bypasses. Although…
109 views
Information Security
https://medium.com/@vickieli/best-hacker-and-security-blogs-to-read-d716c43e0494
Medium
Best Hacker and Security Blogs to Read
Please accept my eternal gratitude and creepy fangirling on twitter.
118 views
Information Security
https://medium.com/@aniltom/where-is-my-train-tracking-to-hacking-d388e4b97225
Medium
Where is my Train : Tracking to Hacking !
Hello guys,
102 views
Information Security
https://spaceraccoon.dev/remote-code-execution-in-three-acts-chaining-exposed-actuators-and-h2-database
spaceraccoon.dev
Remote Code Execution in Three Acts: Chaining Exposed Actuators and H2 Database Aliases in Spring Boot 2
The Spring Boot framework is one of the most popular Java-based microservice frameworks that helps developers quickly and easily deploy Java applications. With its focus on developer-friendly tools and configurations, Spring Boot accelerates the development…
99 views
Information Security
https://twitter.com/reecdeep/status/1239893584767303680
Twitter
reecDeep
here 2nd stage sample #gozi #ISFB #malware 🇮🇹 version=214 build=125 group=2052 🔑10291029JSJUXMPP https://t.co/AcjoAIh5I5
87 views
Information Security
https://bazaar.abuse.ch/
bazaar.abuse.ch
MalwareBazaar - Malware sample exchange
Share malware samples with the community
89 views
Information Security
#bugbountytips

https://medium.com/@secureITmania/a-secret-note-to-bug-hunters-about-url-structure-and-its-parsers-2982f70ff6d6
https://medium.com/@omaidfaizyar/my-weirdest-bug-bounty-getting-pii-from-o365-b4477f4739e
https://medium.com/@sw33tlie/finding-a-p1-in-one-minute-with-shodan-io-rce-735e08123f52
https://medium.com/@thehacktivists/bypass-otp-verification-through-modifying-request-or-response-54d76cfb34c9
https://medium.com/bugbountywriteup/blocked-user-can-send-notification-due-to-logical-bug-in-instagram-first-instagram-bug-2bd09aa52f14
https://medium.com/@greedybucks/finding-confidential-documents-using-google-dorks-b09dcdd761c8
https://medium.com/bugbountywriteup/help-i-cant-find-bugs-88b005eb69a2
https://medium.com/swlh/ssrf-in-the-wild-e2c598900434
https://medium.com/@secureITmania/how-i-exploit-the-json-csrf-with-method-override-technique-71c0a9a7f3b0

#bugbounty
Medium
A secret note to Bug hunters about URL structure and its parsers.
Understanding the proper URL structure is important to every Bug bounty hunter. So lets go deep dive into the URL structure.
99 views
Information Security
https://blog.doyensec.com/2020/03/16/vscode_codeexec.html
Doyensec
Don't Clone That Repo: Visual Studio Code^2 Execution
This is the story of how I stumbled upon a code execution vulnerability in the Visual Studio Code Python extension. It currently has 16.5M+ installs reported in the extension marketplace.
77 views
Information Security
https://www.noob.ninja/2019/07/exploiting-tricky-blind-sql-injection.html?m=1
www.noob.ninja
Exploiting a Tricky Blind SQL Injection inside LIMIT clause
Exploiting a Tricky Blind SQL Injection inside LIMIT clause Hey! Everyone I know its been a long time Since I last posted an article. so T...
99 views
Information Security
https://hackademic.co.in/youtube-bug/
Hackademic
How I could have hijacked a victim’s YouTube notifications! (Google VRP Writeup) | Hackademic
Hi, So this is my first writeup, I hope you enjoy it! I was just searching around on YouTube if I could find anything but I was really tired and it was 12:30 in the night. I was poking around and I…
105 views
Information Security
https://github.com/mirchr/security-research/blob/master/vulnerabilities/CVE-2020-3950.sh
GitHub
security-research/CVE-2020-3950.sh at master · mirchr/security-research
Security Research. Contribute to mirchr/security-research development by creating an account on GitHub.
107 views