blueteamsec

674 readers
40 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
976
2
SAMDump: Extract SAM and SYSTEM using Volume Shadow Copy (VSS) API. With multiple exfiltration options and XOR obfuscation - now with Python and C# ports (github.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
977
2
Command Injection Vulnerability in formFSrvX of Trendnet TEW-713RE - Vulnerability Title: Pre-auth Command Injection Vulnerability in formFSrvX of Trendnet TEW-713RE (pentagonal-time-3a7.notion.site)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
978
3
VS Code Tasks Abuse by Contagious Interview (DPRK) (radar.securityalliance.org)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
979
5
Massive cyberattack on Polish power system in December failed, minister says (www.reuters.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
980
3
Verdachte aangehouden in onderzoek naar cybercriminaliteit - A 33-year-old Dutchman under international surveillance was arrested at Schiphol Airport on Sunday evening. (www.om.nl)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
981
2
VoidLink: The Cloud-Native Malware Framework (research.checkpoint.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
982
3
HoneyTrap: Deceiving Large Language Model Attackers to Honeypot Traps with Resilient Multi-Agent Defense (arxiv.org)
submitted 2 months ago by digicat to c/blueteamsec
1 comments fedilink
983
2
SinkVPN: Redirecting endpoint cloud telemetry by abusing usermode VPN tunnels (labs.itresit.es)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
984
1
Global Cybersecurity Outlook 2026 (www.weforum.org)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
985
4
ProxyBridge: Proxifier Alternative to redirect any Windows/MacOS TCP and UDP traffic to HTTP/Socks5 proxy (github.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
986
3
"Untrustworthy Fund": targeted UAC-0190 cyberattacks against SOU using PLUGGYAPE (CERT-UA#19092) (cert.gov.ua)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
987
1
补天: China's digital defense drills (netaskari.substack.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
988
2
The Alliance That Never Was: A Critical Analysis of the Ransomware “Alliance” Announced by Stormous (www.suspectfile.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
989
0
ai-knowledge-graph: AI Powered Knowledge Graph Generator (github.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
990
2
Hunting Lazarus: Inside the Contagious Interview C2 Infrastructure (redasgard.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
991
2
100 Days of KQL 2026: Days 11, 12, 13 and 14 (self.blueteamsec)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
 
 

Masquerading Original filename does not match current filename https://github.com/m4nbat/100_days_of_kql_2026/blob/main/day11_different_filename_and_originalfilename_ttp.md

Masquerading - renamed system utility https://github.com/m4nbat/100_days_of_kql_2026/blob/main/day12_renamed_sys_utilities.md

Vulnerability Ni8mare CVE-2026-21858 https://github.com/m4nbat/100_days_of_kql_2026/blob/main/day13_ni8mare_cve-2026-21858_vuln.md

DDoSIA Config Threat Feed Rule https://github.com/m4nbat/100_days_of_kql_2026/blob/main/day14_cti_ddosiaconfig.md

992
6
This script fetches installed browser extensions for the supported browsers and displays them in the terminal. (github.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
993
2
ADTrapper: Hunt Smarter, Hunt Harder - ADTrapper is a comprehensive security analysis platform designed for cybersecurity professionals to analyze Windows Active Directory authentication logs. (github.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
994
2
Beyond Graph API: Exploring ConsentFix Through the Exchange REST API Lens (medium.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
995
2
Obfusk8: Obfusk8: lightweight Obfuscation library based on C++17 / Header Only for windows binaries (github.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
996
1
OID-See: Giving Your OAuth Apps the Side-Eye (cirriustech.co.uk)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
997
5
Gixy-Next: Gixy-Next: NGINX Configuration Security Scanner & Performance Checker (github.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
998
3
MuddyWater: When Your Build System Becomes an IOC - "Jacob" (blog.synapticsystems.de)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
999
4
Who Benefited from the Aisuru and Kimwolf Botnets? (krebsonsecurity.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
1000
1
Call for papers: AI-driven threat detection and response Collection (communities-springernature-com.cdn.ampproject.org)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›