blueteamsec

625 readers
39 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
276
1
PDFSIDER Malware - Exploitation of DLL Side-Loading for AV and EDR Evasion (www.resecurity.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
277
3
Malicious-PixelCode: Malicious PixelCode is a security research project that demonstrates a covert technique for encoding executable files into pixel data and storing them inside images etc with ldr (github.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
278
1
GitLab Patch Release: 18.8.2, 18.7.2, 18.6.4 - "allowed an individual with existing knowledge of a victim's credential ID to bypass two-factor authentication by submitting forged device responses." (about.gitlab.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
279
1
chisel-ng: Chisel new generation, written in rust. SSH under WSS with some customization. (github.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
280
1
windbg-copilot: WinDbg Copilot - Agentic Debugging extension (github.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
281
5
LiveContainer: Run iOS apps without actually installing them! (github.com)
submitted 2 weeks ago by digicat to c/blueteamsec
1 comments fedilink
282
2
sec-context: AI Code Security Anti-Patterns distilled from 150+ sources to help LLMs generate safer code. (github.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
283
1
When Ransomware Makes a Mistake Inside INC Ransomware’s Backup Infrastructure (cybercentaurs.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
284
2
The Next Frontier of Runtime Assembly Attacks: Leveraging LLMs to Generate Phishing JavaScript in Real Time (unit42.paloaltonetworks.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
285
1
Watering Hole Attack Targets EmEditor Users With Information-Stealing Malware (www.trendmicro.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
286
1
Defender Timeline Downloader: Extending Data Retention for Incident Response (www.binaryanalys.is)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
287
2
Living Off the Web: How Trust Infrastructure Became a Malware Delivery Interface (censys.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
288
5
Sandworm behind cyberattack on Poland’s power grid in late 2025 (www.welivesecurity.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
289
1
timeline-downloader: A CLI tool for downloading device timeline events from Microsoft Defender XDR using the unofficial apiproxy feature. (github.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
290
2
OmniScan: OmniScan is a lightweight, multi-engine vulnerability scanner based on Python, designed specifically for red team operations and security research. (github.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
291
1
VulnLLM-R: Specialized Reasoning LLM for Vulnerability Detection (github.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
292
1
BGP Vortex: Internet Routing Vortices Create Outages by Preventing Convergence (pulse.internetsociety.org)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
293
1
Ransomware: Tactical Evolution Fuels Extortion Epidemic (www.security.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
294
4
TrueSightKiller: Weaponized Drivers Killing EDR at Scale (www.magicsword.io)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
295
2
cua-kit: Tools for attacking Computer Use Agents (github.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
296
2
Abusing Windows Audio for Local Privilege Escalation (medium.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
297
2
Decrypting View State Messages (zeroed.tech)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
298
2
Unauthenticated RCE in NetSupport Manager - A Technical Deep Dive (code-white.com)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
299
5
BaconSampler: Sniffs outbound traffic for suspicious, beacon-like callbacks, because if it keeps coming back on schedule, it's probably not breakfast. (github.com)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
300
3
Revisiting GPUGate: Repo Squatting and OpenCL Deception to Deliver HijackLoader (gmo-cybersecurity.com)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›