blueteamsec

552 readers
14 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat@infosec.pub
listing: all - local
176
4
Whisper Leak: A novel side-channel attack on remote language models (www.microsoft.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
177
4
State-Sponsored Remote Wipe Tactics Targeting Android Devices (www.genians.co.kr)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
178
8
Applied Cryptography 101: Real-World Deployments (cryptography101.ca)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
179
8
Congressional Budget Office believed to be hacked by foreign actor (archive.ph)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
180
2
conquest: Conquest is a feature-rich and malleable command & control/post-exploitation framework developed in Nim. (github.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
181
2
SHGenOb: Python based tool for generating Shellcode from PIC C (github.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
1 comments fedilink
182
1
EtwLeakKernel: Leaking kernel addresses from ETW consumers. Requires Administrator privileges. (github.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
183
1
venom: Venom C2 is a dependency‑free Python3 Command & Control framework for redteam persistence (github.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
184
5
DCSDevilCOM: A C# tool for requesting certificates from ADCS using DCOM over SMB. This tool allows you to remotely request X.509 certificates from CA server using the MS-WCCE protocol over DCOM (github.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
185
1
Hacking GraalVM Espresso: Abusing Continuation API to Make ROP-Like Attack (github.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
186
1
Implementing the Etherhiding technique (medium.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
187
1
teams-cookies-bof: BOF to steal Teams cookies (github.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
188
1
Evading Elastic EDR's call stack signatures with call gadgets (offsec.almond.consulting)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
189
1
Weaponizing Trust: ClickOnce Deployment with AppDomainManager Injection (malcrove.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
190
3
Runtime Android Object Instrumentation (knifecoat.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
191
1
DonPwner: Advanced Domain Controller attack and credential analysis tool leveraging DonPAPI database (github.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
192
1
ESET APT Activity Report Q2 2025–Q3 2025 (www.welivesecurity.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
193
1
ESET APT Activity Report Q2 2025–Q3 2025 (www.welivesecurity.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
194
2
JA4+ Plugin for Wireshark (github.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
 
 
195
2
SoK: Honeypots & LLMs, More Than the Sum of Their Parts? (arxiv.org)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
196
2
警惕！APT-C-08（蔓灵花）组织首次借WinRAR漏洞CVE-2025-6218实施网络攻击 - Beware! The APT-C-08 (Manlinghua) group has launched its first cyberattack using the WinRAR vulnerability CVE-2025-6218. (mp.weixin.qq.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
197
3
What’s That Coming Over The Hill? (Monsta FTP Remote Code Execution CVE-2025-34299) (labs.watchtowr.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
198
2
Data-Structure Injection (DSI) in AI Agents (labs.zenity.io)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
199
2
CTO at NCSC Summary: week ending November 9th (ctoatncsc.substack.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
200
3
BSI TR -03185-2 Secure Software Lifecycle for Open Source Software (www.bsi.bund.de)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
view more: ‹ prev next ›