blueteamsec

675 readers
30 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
1151
2
ZeroPulse: 🔒 Modern C2 Platform with Cloudflare Tunnel Integration | WinRM & SSH Remote Management | Real-time Terminal & Remote Desktop | Built with FastAPI & React (github.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1152
3
The HoneyMyte APT now protects malware with a kernel-mode rootkit (securelist.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1153
10
espectre: 🛜 ESPectre 👻 - Motion detection system based on Wi-Fi spectre analysis (CSI), with Home Assistant integration. (github.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1154
2
NEBULA: Interactive PowerShell framework for testing WMI, COM, LOLBAS, and persistence techniques (github.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1155
1
pyobject_inject: executing shellcode directly from a python variable (github.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1156
2
PyFRC2G: Python scripts to convert PfSense and OPNSense firewall rules into a graphical view of the flows. (github.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1157
3
Shai Hulud strikes again - The golden path (www.aikido.dev)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1158
2
Turning List-Unsubscribe into an SSRF/XSS Gadget (security.lauritz-holtmann.de)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1159
3
Docling simplifies document processing, parsing diverse formats - turns documents into data (docling-project.github.io)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1160
2
Reframing cyber attribution (www.iiss.org)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1161
4
Golden Eye Dog (APT-Q-27) abuses AWS S3 buckets to distribute the latest malicious payloads - from December 10th (xz.aliyun.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1162
5
AppControl Manager - AppControl Manager is a modern secure app that provides easy to use graphical user interface to manage App Control and Code Integrity on your local or remote devices. (github.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1163
5
Silver Fox Targeting India Using Tax Themed Phishing Lures (www.cloudsek.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1164
6
device-activity-tracker: A phone number can reveal whether a device is active, in standby or offline (and more). This PoC demonstrates how delivery receipts etc. (WhatsApp / Signal) (github.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1165
3
100 Days of YARA is back - starts on Jan 1st (github.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1166
8
mongobleed: A remote live memory viewer PoC based on the MongoBleed vulnerability primitive! (github.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1167
3
mongobleed-detector: Detection Script for MongoBleed Exploitation (github.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1168
5
Forensic Insights into an EDR Freeze Attack (detect.fyi)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1169
2
Hunting CVE-2025-59287 in Memory Dumps (medium.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1170
3
Detecting Lateral Movement & Evasion Inside Your Network (corelight.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1171
3
Phishing Campaign Leverages Trusted Google Cloud Automation Capabilities to Evade Detection (blog.checkpoint.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1172
2
DFIR Report: TamperedChef Malware via Malvertising and Trojanized Utility (medium.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1173
5
When MFA Wasn’t Enough: Review of a Real AiTM Incident (medium.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1174
2
Uncovering Threats Through WAF Logs: A Threat Hunter’s Lens (medium.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1175
2
악성코드로 비트코인 17억 가로챈 외국인 해커 한국 송환 | 중앙일보 - National Police Agency announced on 28th that it had arrested Lithuanian national A (29), suspected of stealing virtual assets from Koreans & extradited him (www.joongang.co.kr)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›