Information Security
@sec_nerd_en
408 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
408 subscribers
Information Security
https://medium.com/@reegun/unsanitized-file-validation-leads-to-malicious-payload-download-via-office-binaries-202d02db7191


#Microsoft Office binaries #winword #excel #powerpnt added to #lolbas || #lolbin

https://lolbas-project.github.io/lolbas/OtherMSBinaries/Winword/
https://lolbas-project.github.io/lolbas/OtherMSBinaries/Powerpnt/
https://lolbas-project.github.io/lolbas/OtherMSBinaries/Excel/
Medium
Unsanitized file validation leads to Malicious payload download via Office binaries.
As a part of finding vulnerable endpoints to improve defence, I used to reckon legitimate binaries on any chance of masking for payload…
214 views
Information Security
https://github.com/OWASP/Amass


OWASP Amass Tip

For ASNs:
amass intel -org OrgName

For domain names:
amass intel -active -asn n1,n2

For subdomains and infrastructure:
amass enum -src -ip -df domains.txt
GitHub
GitHub - owasp-amass/amass: In-depth attack surface mapping and asset discovery
In-depth attack surface mapping and asset discovery - owasp-amass/amass
145 views
Information Security
https://github.com/secrary/Andromeda


android reverse engineering
GitHub
GitHub - secrary/Andromeda: Andromeda - Interactive Reverse Engineering Tool for Android Applications
Andromeda - Interactive Reverse Engineering Tool for Android Applications - secrary/Andromeda
137 views
Information Security
https://github.com/h0mbre/Learning-C
GitHub
GitHub - h0mbre/Learning-C: A series of mini-projects used to learn C for beginners
A series of mini-projects used to learn C for beginners - h0mbre/Learning-C
138 views
Information Security
https://shhnjk.blogspot.com/2019/09/nonce-based-csp-service-worker-csp.html
Blogspot
Nonce-based CSP + Service Worker = CSP bypass?
Service Worker is a great technology that allows you to develop web app's offline experience and increase performance of your website. B...
126 views
Information Security
https://twitter.com/sayadarijawa/status/1175665926311534593
Twitter
rizal.
Bypass CloudFront WAF #bugbounty #bugbountytips <object/data="javascript&colon;alert/**/(document.domain)">//
140 views
Information Security
https://medium.com/@rsatter/decoding-the-gru-indictment-bfb2c08fe362
Medium
Decoding the GRU indictment
The July 13, 2018 indictment of 12 GRU operatives provided extraordinary insight into how Fancy Bear operates. But it left several…
122 views
Information Security
https://blog.firosolutions.com/exploits/counter-strike-go/
Firo Solutions
Counter-Strike Global Offensive CVE-2019-15943
119 views
Information Security
This media is not supported in your browser
VIEW IN TELEGRAM
Henry Chen
@chybeta
CVE-2019-8451 Unauthorized SSRF via REST API /plugins/servlet/gadgets/makeRequest

use @ to bypass the whitelisting !

https://jira.atlassian.com/browse/JRASERVER-70001?filter=13085
126 views
Information Security
https://github.com/peewpw/Invoke-PSImage
129 views
Information Security
https://twitter.com/GCHQ/status/1176138397636792320
Twitter
GCHQ
Ever wanted to encrypt messages with Enigma and decode them with the Bombe? Give our new features in #CyberChef a try! https://t.co/OxLcQQbePa
127 views
Information Security
https://blog.ropnop.com/attacking-default-installs-of-helm-on-kubernetes/
ropnop blog
Attacking Default Installs of Helm on Kubernetes
Default installations of Helm on Kubernetes can make it trivial for attackers to escalate to cluster admin. In this post I’ll demonstrate how.
118 views
Information Security
https://posts.specterops.io/shhmon-silencing-sysmon-via-driver-unload-682b5be57650
Medium
Shhmon — Silencing Sysmon via Driver Unload
Sysmon is an incredibly powerful tool to aide in data collection beyond Windows’ standard event logging capabilities. It presents a…
118 views
Information Security
vb5.py
820 B
# vBulletin 5.x 0day pre-auth RCE exploit
#
# This should work on all versions from 5.0.0 till 5.5.4
180 views
Information Security
Tesla
PowerPack
124 views
Information Security
https://nullsweep.com/pivot-cheatsheet-for-pentesters/
Null Sweep
A Pivot Cheatsheet for Pentesters
Quick walkthrough of pivot techniques including ssh, meterpreter, ncat, and netcat.
369 views
Information Security
Information Security
https://medium.com/101-writeups/hacking-json-web-token-jwt-233fe6c862e6
https://github.com/pinnace/burp-jwt-fuzzhelper-extension


JWT FuzzHelper for Burp
GitHub
GitHub - pinnace/burp-jwt-fuzzhelper-extension: JWT Fuzzer for BurpSuite. Adds an Intruder hook for on-the-fly JWT fuzzing.
JWT Fuzzer for BurpSuite. Adds an Intruder hook for on-the-fly JWT fuzzing. - pinnace/burp-jwt-fuzzhelper-extension
113 views
Information Security
bypass360mimikatz_x64:--

Method: change resources, add a digital signature
Unzip password: 6613kris


https://github.com/ianxtianxt/bypass360mimikatz_x64
GitHub
GitHub - ianxtianxt/bypass360mimikatz_x64
Contribute to ianxtianxt/bypass360mimikatz_x64 development by creating an account on GitHub.
125 views
Information Security
Information Security
vb5.py
https://viz.greynoise.io/query/?gnql=tags%3A%22vBulletin%205.x%20RCE%22
121 views
Information Security
https://pentestmag.com/knocking-the-door-to-server-side-template-injection-part-1/
Pentestmag
Knocking the door to Server-side Template Injection. Part 1 - Pentestmag
Knocking the door to Server-side Template Injection. Part 1 by Mohamed Habib Jawadi # Hands on guide on Server-Side Template …
120 views