blueteamsec

556 readers
8 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat@infosec.pub
listing: all - local
351
1
Unpacking NetSupport RAT Loaders Delivered via ClickFix (www.esentire.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
352
2
File Explorer automatically disables the preview feature for files downloaded from the internet - Microsoft Support (support.microsoft.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
353
1
printerbugnew: The DCERPC only printerbug.py version (github.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
354
2
offlineSCCMdecrypt: Step-by-step documentation on how to decrypt SCCM database secrets offline (github.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
355
1
rpc2efs: Unauthenticated start EFS service on remote Windows host (make PetitPotam great again) (github.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
356
1
PostEx-Arsenal: Arsenal of modules to beacon postex formats like BOF/Shellcode including: dotnet in memory execution, dumps (wifi, clipboard, screenshot, slack, office), PE in memory execution etc (github.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
357
2
From Dream Job to Malware: DreamLoaders in Lazarus’ Recent Campaign (lab52.io)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
358
6
NetRunner: A .NET assembly tracer using Harmony for runtime method interception. (github.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
359
10
Exploitation of Windows Server Update Services Remote Code Execution Vulnerability (CVE-2025-59287) (www.huntress.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
1 comments fedilink
360
2
Proceedings of the 2025 ACM Internet Measurement Conference (dl.acm.org)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
361
5
What We Learned Inside a North Korean Internet Server: How Well Do You Know Your Partners? (www.38north.org)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
362
2
Advancing Security in Software-Defined Vehicles: A Comprehensive Survey and Taxonomy (papers.ssrn.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
363
7
Fil-C: Fil-C is a fanatically compatible memory-safe implementation of C and C++. Lots of software compiles and runs with Fil-C with zero or minimal changes. All memory safety errors are caught as Fil (fil-c.org)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
1 comments fedilink
364
2
Unmasking MuddyWater’s New Malware Toolkit Driving International Espionage (www.group-ib.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
365
3
CTO at NCSC Summary: week ending October 26th (ctoatncsc.substack.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
366
2
Analysis of APT-C-08 (Manlinghua)'s recent phishing attacks using application files (mp.weixin.qq.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
367
3
Decoy Databases: Analyzing Attacks on Public Facing Databases (gsmaragd.github.io)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
368
7
Could the XZ backdoor have been detected with better Git and Debian packaging practices? (optimizedbyotto.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
369
4
CSA Releases An Addendum To Support System Owners In Securing Agentic AI System (www.csa.gov.sg)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
370
9
Unseeable prompt injections in screenshots: more vulnerabilities in Comet and other AI browsers (brave.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
371
3
LockBit Returns — and It Already Has Victims (blog.checkpoint.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
372
3
Stealth BGP Hijacks with uRPF Filtering (www.usenix.org)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
373
2
Tunneling WireGuard over HTTPS using Wstunnel (kroon.email)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
374
3
TARmageddon (CVE-2025-62518): RCE Vulnerability Highlights the Challenges of Open Source Abandonware (edera.dev)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
375
11
How Hacked Card Shufflers Allegedly Enabled a Mob-Fueled Poker Scam That Rocked the NBA (www.wired.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
1 comments fedilink
view more: ‹ prev next ›