Information Security

Channel

@sec_nerd_enPromote

443

subscribers

Information Security News we are @sec_nerd twin brother

Telegram Center

Telegram Center

🇺🇸🇷🇺

Join Channel Follow

@ 2024 T.Center

Information Security

The owner of this channel has been inactive for the last 5 months. If they remain inactive for the next 9 days, they may lose their account and admin rights in this channel. The channel will remain accessible for all users.

09:47

Information Security

The owner of this channel has been inactive for the last 5 months. If they remain inactive for the next 29 days, they may lose their account and admin rights in this channel. The channel will remain accessible for all users.

07:04

Information Security

https://mrd0x.com/bypass-2fa-using-novnc/

Security Research | mr.d0x

Providing security research and red team techniques

2.2K views05:58

Information Security

https://github.com/google/security-research/security/advisories/GHSA-ggmf-hg75-88gg

Apache: Code execution in log4j2

### Summary
Log4j 2.15.0 was released to address the widely reported JNDI Remote Code Execution (RCE) (CVE-2021-44228) vulnerability in Log4j. Shortly thereafter, 2.16.0 was released to address a ...

1.9K views08:15

Information Security

https://0xhop.github.io/evasion/2021/05/26/evasion-pt2/

1.2K views16:13

Information Security

https://twitter.com/binitamshah/status/1492871534398312449

HijackFileHandle - Hijack a file in a remote process without code injection : x86matthew.com/view_post?id=h… credits @x86matthew

1.1K views16:13

Information Security

https://github.com/dhondta/awesome-executable-packing

GitHub - packing-box/awesome-executable-packing: A curated list of awesome resources related to executable packing

A curated list of awesome resources related to executable packing - packing-box/awesome-executable-packing

926 views16:12

Information Security

https://blog.spookysec.net/stage-v-stageless-1/

Staged vs Stageless Payloads

root@PandorasBox:~#

766 views16:10

Information Security

https://twitter.com/an0n_r0/status/1492705924737339398

added PrintProcessor Persistence/LPE for @0xthirteen's SharpStay project: github.com/tothi/SharpStay have stolen the original idea from here: stmxcsr.com/persistence/pr…

714 viewsedited 16:08

Information Security

https://ptr-yudai.hatenablog.com/entry/2022/02/13/122744

Writing Anti-Anti-Virus Exploit (AuViel - Hayyim CTF 2022) - CTFするぞ

Introduction I played Hayyim CTF 2022 with keymoon, st98, and theoremoon. We solved all pwn tasks there and stood the 3rd place. *1 There was a pwn challenge to…

663 views16:05

Information Security

https://twitter.com/cyber_advising/status/1491764846903410701

SpoolFool: Windows Print Spooler Privilege Escalation (CVE-2022-21999) PoC research.ifcr.dk/spoolfool-wind…

705 views05:12

Information Security

https://github.com/ly4k/SpoolFool

GitHub - ly4k/SpoolFool: Exploit for CVE-2022-21999 - Windows Print Spooler Elevation of Privilege Vulnerability (LPE)

Exploit for CVE-2022-21999 - Windows Print Spooler Elevation of Privilege Vulnerability (LPE) - ly4k/SpoolFool

652 views05:12

Information Security

https://twitter.com/sec715/status/1356890415685795842

Found RCE Apache Druid(CVE-2021-25646) Nuclei Templates goes here @pdnuclei 🔥 Poc: gist.github.com/pikpikcu/d208f…

586 views05:11

Information Security

https://twitter.com/lockedbyte/status/1436472389202812933

CVE-2021-40444 simple demonstration PoC Exploit: github.com/lockedbyte/CVE…

521 views05:08

Information Security

https://twitter.com/h4x0r_dz/status/1445401960371429381

CVE-2021-41773 POC 127.0.0.1/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd

538 views05:08

Information Security

https://twitter.com/subTee/status/1492300360270106625

Mimikatz in JS Dropper. One Liner Should be detected. ymmv. gist.github.com/secdev-01/3edc…

569 views05:06

Information Security

https://twitter.com/AravGarg3/status/1492236892124946437

CVE-2021-40443: oob write of NULL bytes and 1 QWORD (0xffffffff00000000) => LPE in clfs.sys

499 views04:49

Information Security

https://twitter.com/linkersec/status/1492008751850795010

Linux Kernel Security

CVE-2022-0435: Linux Kernel Remote Stack Overflow @sam4k1 disclosed remotely and locally reachable stack overflow in Transparent Inter-Process Communication (TIPC). openwall.com/lists/oss-secu… [1/3]

441 views04:49

Information Security

https://twitter.com/x86matthew/status/1491886346079805440

How can we run arbitrary code without allocating/overwriting executable memory? We "borrow" (abuse) instructions from ntdll.dll! x86matthew.com/view_post?id=w…

437 views04:47

Information Security

https://twitter.com/phwd_/status/1491636974435901443

Philippe Harewood

Instagram SSL pinning bypass: Frida okay = Module.getBaseAddress("FBSharedFramework").add(0x0a8b1c); patchsize=4; Memory.patchCode(okay,patchsize, code => {con st cw = new Arm64Writer(code, { pc: ayy });cw.putBytes([0x60,0x0D,0x00,0x54])}) *find the correct…

393 views10:38