blueteamsec

628 readers

30 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

551

4

MSFinger: Microsoft Network Service Fingerprinting Tool (github.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

552

1

2025 CVE Data Review (jerrygamblin.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

553

1

Knownsec Data Breach: A Trove of Espionage Tradecraft with an Insider Narrative (www.resecurity.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

554

3

(2026-01-01) PowerShell Script To Reset The KrbTgt Account Password/Keys For Both RWDCs And RODCs (Update 8) (jorgequestforknowledge.wordpress.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

555

0

Расследования и киберразведка: рост числа атак на российский бизнес и новые инструменты хакеров - Investigations and Cyber Intelligence: Growing Attacks on Russian Businesses and New Hacker Tools (habr.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

556

2

100 Days of YARA 2026: Calculates hashes and size for PE files (excluding .NET executables). (github.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

557

1

100 Days of YARA 2026: Detects files using modern tool chains with older linkers which can indicate possible tampering. It is based on the mismatch in the PE RICH header and Optional header MSVC lnker (github.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

558

3

sentinel-mcp-github: A comprehensive Model Context Protocol (MCP) configuration for Microsoft Sentinel security operations, incident management, and threat hunting (github.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

559

2

RondoDoX Botnet Weaponizes React2Shell (www.cloudsek.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

560

6

MongoBleed: Critical MongoDB Vulnerability CVE-2025-14847 - custom Nuclei template (see below) designed to deterministically and safely detect if a MongoDB server is vulnerable to CVE-2025-14847 (www.wiz.io)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

561

2

DeepAudit: 人人拥有的 AI 黑客战队，让漏洞挖掘触手可及。国内首个开源的代码漏洞挖掘多智能体系统。小白一键部署运行，自主协作审计 + 自动化沙箱 PoC 验证。支持 Ollama 私有部署，一键生成报告。支持中转站。让安全不再昂贵，让审计不再复杂。- An AI auditing team for everyone, making vulnerability discovery (github.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

562

3

[Chinese] - Intelligent traffic mapping and attack defense for encrypted and anonymous communication environments - encrypted traffic analysis, critical flow detection, traffic prediction etc. (www.ccf.org.cn)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

563

4

Agentic-SOC-Simulation: AI 驱动的 SOC 仿真平台 - "integrating the DeepSeek inference model , multi-agent collaboration, and the MCP (Model Context Protocol) standard, we have built a virtual SOC team. (github.com)

submitted 1 month ago by digicat to c/blueteamsec

2 comments fedilink

564

5

TokenTacticsV2: A fork of the great TokenTactics with support for CAE and token endpoint v2 - "If you have created a passkey in a third party provider like KeePassXC, Bitwarden, 1Password, or similar (github.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

565

4

Bugs that survive the heat of continuous fuzzing (github.blog)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

566

4

CVE-2025-43530: Exploiting a private API for VoiceOver [on macOS] (jhftss.github.io)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

567

4

How to Integrate CTI with Threat Hunting: A Practical Guide (feedly.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

568

3

frida-c2-mcp: Remote C2-style MCP server for Frida instrumentation on rooted Android (github.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

569

3

Security Bulletin: Authentication bypass in IBM API Connect (www.ibm.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

570

4

Connecting the Dots: Technical Analysis of the KT Femtocell Incident (docs.google.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

571

1

Dissecting a Multi-Stage macOS Infostealer (blog.threatuniverse.co.uk)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

572

4

The Industrialization of “ClickFix”: Inside ErrTraffic (www.hudsonrock.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

573

2

Version 1.0 | Adaptix Framework (adaptix-framework.gitbook.io)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

574

3

보도자료 - 과학기술정보통신부 - KT and LGU+ Announce Final Investigation Results of Breach Incident (www.msit.go.kr)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

575

4

Malware Analysis Report – Multi-stage Infostealer from the Emeditor breach (download.emeditor.info)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink