blueteamsec

557 readers
15 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat@infosec.pub
listing: all - local
901
3
CWMP Stack Overflow in TP-Link Routers - getting pc like is it 1997 (medium.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
902
4
Bypassing TLS Verification on Nintendo Switch (reversing.live)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
903
2
Nederlandse providers doelwit van Salt Typhoon - Dutch providers targeted by Salt Typh (www.aivd.nl)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
904
1
[2505.24008] HoneySat: A Network-based Satellite Honeypot Framework - "successfully deceived human adversaries in the wild and collected 22 real-world satellite-specific adversarial interactions. " (arxiv.org)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
905
6
Attackers Target Hotelier Accounts in Malvertising and Phishing Campaign (sec.okta.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
906
2
Analysing Targeted Spearphishing: Social Engineering, Domain Rotation, and Credential Theft (stripeolt.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
907
2
Communications Security Establishment Canada Annual Report 2024-2025 - Communications Security Establishment Canada (www.cse-cst.gc.ca)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
908
5
IT infrastructure of the Ministry of the Interior hacked "targeted and professionally - Austria - unauthorized access to the BMI's mail servers occurred (www.derstandard.at)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
1 comments fedilink
909
5
Integrating Code Insight into Reverse Engineering Workflows (blog.virustotal.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
910
4
Release QUANTUMSTRAND beta 1 - designed to revolutionize how analysts interact with strings in binary files - qs focuses on providing deep context (github.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
911
4
Inside the Lab-Dookhtegan Hack: How Iranian Ships Lost Their Voice at Sea (blog.narimangharib.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
912
2
v0.7 -> v0.8 | Adaptix Framework (adaptix-framework.gitbook.io)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
913
1
Secretary Noem Terminates Inept FEMA Employees After Uncovering Massive Cyber Failures, Demands Accountability | Homeland Security (www.dhs.gov)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
914
1
How attackers adapt to built-in macOS protection - good overview but by Kaspersky who have interest (securelist.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
915
1
DeviceToken: Request device ticket/token using the device's MSA (github.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
916
2
TrapFlagForSyscalling: Bypass user-land hooks by syscall tampering via the Trap Flag (github.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
917
3
RtlHijack: Alternative Read and Write primitives using Rtl* functions the unintended way. (github.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
918
2
ADSyncDump-BOF: The ADSyncDump BOF is a port of Dirk-Jan Mollema's adconnectdump.py / ADSyncDecrypt into a Beacon Object File (BOF) with zero dependencies. (github.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
919
1
漫步安卓物理内存：CVE-2025-21479 提权实录 - A Walk Through Android Physical Memory: CVE-2025-21479 Privilege Escalation (dawnslab.jd.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
920
2
EnumEDRs: Enumerate active EDR's on the system (github.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
921
1
RDP Forensics Part 2: Fingerprinting Attacks with Timezone, OS Type, and Monitor Display Resolution (medium.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
922
1
RDP Forensics Part 1: Fingerprinting Attacks with Keyboard Layout Data (medium.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
923
2
APT Sidewinder - "the HuntSQL query to track POST requests to "paknavy[.]org[.]pk" and found 25 Unique Webpages" (pastebin.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
924
2
The Trap of Troubleshooting: Analysis of Lazarus (APT-Q-1)'s Recent Attacks Using ClickFix (mp.weixin.qq.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
925
2
Ransomware Damage Recovery｜National Police Agency - Phobos/8Base Decryption Tool (www.npa.go.jp)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
view more: ‹ prev next ›