Information Security
@sec_nerd_en
408 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
408 subscribers
Information Security
https://medium.com/think-stack/preventing-lateral-movement-using-network-access-groups-7e8d539a9029
Medium
Preventing Lateral Movement Using Network Access Groups
At least once a week I get on a rant about network segmentation. After all, it is one of the NSA Top Ten Cybersecurity Mitigation…
101 views
Information Security
On modern #Windows systems one can capture traffic without sniffer, just by "netsh trace start capture=yes" command => ETL file created.
90 views
Information Security
Exploit of the day Bluekeep CVE-2019-0708

https://blog.firosolutions.com/exploits/bluekeep/
Firosolutions
Bluekeep CVE-2019-0708
106 views
Information Security
nmap-bootstrap-xsl

A Nmap XSL implementation with Bootstrap.

https://github.com/honze-net/nmap-bootstrap-xsl/
GitHub
GitHub - honze-net/nmap-bootstrap-xsl: A Nmap XSL implementation with Bootstrap.
A Nmap XSL implementation with Bootstrap. Contribute to honze-net/nmap-bootstrap-xsl development by creating an account on GitHub.
94 views
Information Security
Pass-The-Hash with RDP in 2019

https://shellz.club/pass-the-hash-with-rdp-in-2019/
93 views
Information Security
https://osint.support/
87 views
Information Security
This media is not supported in your browser
VIEW IN TELEGRAM
Technical Advisory: Bypassing Workflows Protection Mechanisms - Remote Code Execution on SharePoint

bit.ly/2PoFU0H
89 views
Information Security
86 views
Information Security
https://github.com/staz0t/hashcatch
82 views
Information Security
GUI_UAC_bypassX
https://github.com/sailay1996/GUI_UAC_bypassX/blob/master/README.md
GitHub
sailay1996/GUI_UAC_bypassX
gui uac bypass (netplwiz.exe). Contribute to sailay1996/GUI_UAC_bypassX development by creating an account on GitHub.
87 views
Information Security
PAExec is a free, redistributable and open source equivalent to Microsoft's popular PsExec application:


https://github.com/poweradminllc/PAExec
GitHub
GitHub - poweradminllc/PAExec: Remote execution, like PsExec
Remote execution, like PsExec. Contribute to poweradminllc/PAExec development by creating an account on GitHub.
85 views
Information Security
https://zerodium.com/program.html#changelog
92 views
Information Security
Lateral Movement Using internetexplorer.Application Object ( COM )

https://homjxi0e.wordpress.com/2018/02/15/lateral-movement-using-internetexplorer-application-object-com/
matthomjxi0e
Lateral Movement Using internetexplorer.Application Object ( COM )
introduction Use Object COM ( InternetExplorer.Application ) For Execute using Types Exploit-internet Explorer For Execute ==> in Add On Internet Explorer For Get Execute Code using Lateral Move…
88 views
Information Security
https://medium.com/@markmotig/command-prompt-with-system-rights-using-schtasks-ncat-and-metame-d2d333a710aa
Medium
Command prompt with System rights using Schtasks, Ncat and Metame
This is nothing new, but it might be new to someone. Sometimes I just want to run a command prompt as system. There is always “psexec -i…
87 views
Information Security
https://rastamouse.me/2019/09/mwr-labs-c3-first-look/
92 views
Information Security
https://medium.com/@alyssa.o.herrera/pulse-secure-ssl-vpn-post-auth-rce-to-ssh-shell-2b497d35c35b
Medium
Red Teamer’s Guide to Pulse Secure SSL VPN
A quick guide on exploiting pulse secure for red teaming purposes.
105 views
Information Security
https://www.corben.io/jenkins-to-full-pwnage/
105 views
Information Security
https://azeria-labs.com/heap-exploit-development-part-1/

https://azeria-labs.com/heap-overflows-and-the-ios-kernel-heap/
Azeria-Labs
Heap Exploit Development
107 views
Information Security
This media is not supported in your browser
VIEW IN TELEGRAM
CVE-2019-5475 Nexus Repository Manager 2 - OS Command Injection (authenticated)
108 views
Information Security
https://giuliocomi.blogspot.com/2019/08/insecure-secrets-encryption-at-rest.html
Blogspot
Weak credentials encryption at rest with DPAPI: NordVPN case study
Penetration testing
Web, Wireless, Network Security
103 views