blueteamsec

480 readers
8 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
[email protected]
listing: all - local
251
2
Dissecting PipeMagic: Inside the architecture of a modular backdoor framework (www.microsoft.com)
submitted 2 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
252
0
LLMs vs. Geolocation: GPT-5 performs worse than other AI models - bellingcat (www.bellingcat.com)
submitted 2 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
253
2
PipeMagic in 2025: How the backdoor operators’ tactics have changed (securelist.com)
submitted 2 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
254
2
spearspray: Enhance Your Active Directory Password Spraying with User Intelligence. (github.com)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
255
5
DllShimmer: Weaponize DLL hijacking easily. Backdoor any function in any DLL. (github.com)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
256
3
sauron: Fast context enumeration for newly obtained Active Directory credentials. (github.com)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
257
3
dumping_lsass: The different ways to dump LSASS (github.com)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
258
7
Cisco Security Advisory: Cisco Secure Firewall Management Center Software RADIUS Remote Code Execution Vulnerability (sec.cloudapps.cisco.com)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
259
5
Protecting You From Social Engineering Campaigns: An Update From Workday (blog.workday.com)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
260
4
hexstrike-ai: HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, etc. (github.com)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
261
4
ECC.fail - Mounting Rowhammer Attacks on DDR4 Servers with ECC Memory (ecc.fail)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
262
2
Hidden Links: Analyzing Secret Families of VPN Apps - The Citizen Lab (citizenlab.ca)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
263
1
Атрибуция Exchange-кейлоггеров к группировке PhantomCore - Attribution of Exchange keyloggers to the PhantomCore group (from Russia) (habr.com)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
264
3
Hacking and Firewalls Under Siege: Russia’s Cyber Industry During the War on Ukraine (www.cna.org)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
265
6
Mobile Phishers Target Brokerage Accounts in ‘Ramp and Dump’ Cashout Scheme (krebsonsecurity.com)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
266
4
Don’t Phish-let Me Down: FIDO Authentication Downgrade (www.proofpoint.com)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
267
3
Okta Evilginx phishlet (OIE) with MFA downgrade rewrites (gist.github.com)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
268
4
'Blue Locker' Analysis: Ransomware Targeting Oil & Gas Sector in Pakistan (www.resecurity.com)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
269
4
Pantheon Introduction: A Guide and Script Collection for Mythic Eventing (specterops.io)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
270
4
ControlSTUDIO: Adversary Simulation Framework (github.com)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
271
5
gpoParser: gpoParser is a tool designed to extract and analyze configurations applied through Group Policy Objects (GPOs) in an Active Directory environment. (github.com)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
272
3
APT-C-36（盲眼鹰）组织在新攻击活动中升级对抗手段 - APT-C-36 (Blind Eagle) group escalates its tactics in new attack campaigns (mp.weixin.qq.com)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
273
3
深度：2025 年智能安全运营（ AI SOC） 市场格局 - In-depth: The 2025 Intelligent Security Operations (AI SOC) Market Landscape (mp.weixin.qq.com)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
274
2
SAST结合大模型的逻辑漏洞识别探索 - proposes and implements an automated logical vulnerability auditing tool powered by an AI agent. By combining the deep analysis capabilities of traditional SAST with AI (mp.weixin.qq.com)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
275
4
All You Need Is MCP - LLMs Solving a DEF CON CTF Finals Challenge (wilgibbs.com)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
view more: ‹ prev next ›