blueteamsec

628 readers
31 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
576
3
profilehound: ProfileHound - BloodHound OpenGraph collector for user profiles stored on domain machines. (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
577
3
The LDAP Whitespace Problem: Making Sigma Rules Work in Production (www.huntress.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
578
2
superbase-exposure-check: Scan websites for exposed Supabase JWTs, enumerate accessible tables, and detect sensitive data exposure automatically. (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
579
3
awesome-dfir-skills: A curated collection of DFIR skills and workflows for InfoSec practitioners. (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
580
2
APT36 : Multi-Stage LNK Malware Campaign Targeting Indian Government Entities (www.cyfirma.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
581
2
DarkSpectre: Unmasking the Threat Actor Behind 8.8 Million Infected Browsers (www.koi.ai)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
582
1
Non Proliferation and Iran-related Designations; Cyber-related and Russia-related Designations Removals | Office of Foreign Assets Control (ofac.treasury.gov)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
583
1
Two Americans Plead Guilty to Targeting Multiple U.S. Victims Using ALPHV BlackCat Ransomware (www.justice.gov)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
584
3
Vulnerability in SmarterTools Software - Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server (www.csa.gov.sg)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
585
6
Additional Notes on the Trevor Greer Infostealer Logs (nkinternet.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
586
4
DumpChromeSecrets: Extract data from modern Chrome versions, including refresh tokens, cookies, saved credentials, autofill data, browsing history, and bookmarks (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
587
2
GhostlyHollowingViaTamperedSyscalls2: Ghostly Hollowing Via Tampered Syscalls (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
588
2
ZeroPulse: ๐Ÿ”’ Modern C2 Platform with Cloudflare Tunnel Integration | WinRM & SSH Remote Management | Real-time Terminal & Remote Desktop | Built with FastAPI & React (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
589
3
The HoneyMyte APT now protects malware with a kernel-mode rootkit (securelist.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
590
9
espectre: ๐Ÿ›œ ESPectre ๐Ÿ‘ป - Motion detection system based on Wi-Fi spectre analysis (CSI), with Home Assistant integration. (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
591
2
NEBULA: Interactive PowerShell framework for testing WMI, COM, LOLBAS, and persistence techniques (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
592
1
pyobject_inject: executing shellcode directly from a python variable (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
593
2
PyFRC2G: Python scripts to convert PfSense and OPNSense firewall rules into a graphical view of the flows. (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
594
3
Shai Hulud strikes again - The golden path (www.aikido.dev)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
595
2
Turning List-Unsubscribe into an SSRF/XSS Gadget (security.lauritz-holtmann.de)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
596
3
Docling simplifies document processing, parsing diverse formats - turns documents into data (docling-project.github.io)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
597
2
Reframing cyber attribution (www.iiss.org)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
598
4
Golden Eye Dog (APT-Q-27) abuses AWS S3 buckets to distribute the latest malicious payloads - from December 10th (xz.aliyun.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
599
5
AppControl Manager - AppControl Manager is a modern secure app that provides easy to use graphical user interface to manage App Control and Code Integrity on your local or remote devices. (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
600
5
Silver Fox Targeting India Using Tax Themed Phishing Lures (www.cloudsek.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
view more: โ€น prev next โ€บ