blueteamsec

633 readers
16 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
2101
3
Citrix kwetsbaarheid (Update 11-08-2025) - "forensic analyses of data from the affected organizations, the NCSC has indications that the vulnerabilities in Citrix NetScaler ADC exploited in May" (www-ncsc-nl.translate.goog)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2102
2
Remote-DLL-Injection-with-Timer-based-Shellcode-Execution: Remote DLL Injection with Timer-based Shellcode Execution (github.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2103
4
Yara-X v1.5: Implement the crx module for parsing Chrome Extension files (github.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2104
7
APT Down: The North Korea Files (drive.proton.me)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2105
6
RPC-Racer: Toolset to manipulate RPC clients by finding delayed services and masquerading as them (github.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2106
2
xrefgen: Mandiant XRefer Professional IDAPython script that generates additional cross-references for IDA Pro that aren't automatically detected (github.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2107
2
Stardust Chollima APT Adversary Simulation (medium.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2108
1
Detection Engineering: Practicing Detection-as-Code - Validation - Part 3 (blog.nviso.eu)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2109
1
How to store Defender XDR data for years in Sentinel data lake without expensive ingestion cost (jeffreyappel.nl)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2110
7
finch: Fingerprint-aware TLS reverse proxy. Use Finch to outsmart bad traffic—collect client fingerprints (JA3, JA4 +QUIC, JA4H, HTTP/2) and act on them (github.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2111
4
Efimer Trojan delivered via email and hacked WordPress websites (securelist.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2112
10
Breaking Into Your Network? Zer0 Effort. - DEF CON 33 Overview - research campaign investigating the security of Zero Trust Network Access solutions (blog.amberwolf.com)
submitted 6 months ago by digicat to c/blueteamsec
1 comments fedilink
2113
5
Vulnerability Management Program - How to implement SLA and its processes (securityautopsy.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2114
3
EPSS Pulse from RunZero - identify big shifts in EPSS (www.runzero.com)
submitted 6 months ago by harry to c/blueteamsec
0 comments fedilink
2115
2
Buttercup is now open-source - Buttercup is a fully automated, AI-driven system for discovering and patching vulnerabilities in open-source software. (blog.trailofbits.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2116
4
Noise-Coded Illumination for Forensic and Photometric Video Analysis (dl.acm.org)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2117
4
pompelmi: Lightweight file upload scanner with optional YARA rules. Works out‑of‑the‑box on Node.js; supports browser via a simple HTTP “remote engine”. (github.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2118
9
awswaf: AWS WAF Solver, full reverse implemented in 100% Python & Golang. (github.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2119
8
Custom firmware for sale for Flipper zero - "1995.- USD - support for Peugeot/Citroen/Volkswagen and new Ford models" (www.ifoedit.com)
submitted 6 months ago by digicat to c/blueteamsec
2 comments fedilink
2120
5
"From Bitmaps to Payloads" We dissected a stego-heavy .NET loader embedding BMP headers inside images to drop payloads via CVE-2017-11882. (github.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2121
2
mac_apt - macOS (and iOS) Artifact Parsing Tool - v1.26.1 - "now supports processing Velociraptor collections" (github.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2122
4
WinRAR 7.13 Final released - "Another directory traversal vulnerability, differing from that in WinRAR 7.12, has been fixed." (self.blueteamsec)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2123
3
Internet Organised Crime Threat Assessment (IOCTA) – Strategic, policy and tactical updates on the fight against cybercrime | Europol (www.europol.europa.eu)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2124
2
Dissecting the CastleBot Malware-as-a-Service operation (www.ibm.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2125
6
CastleLoader: a versatile malware loader, has infected 469 devices since May 2025, leveraging Cloudflare-themed ClickFix phishing and fake GitHub repositories to deliver information stealers and RATs (blog.polyswarm.io)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›