blueteamsec

435 readers
12 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
251
3
Certiception-ADCS-trap: An ADCS honeypot to catch attackers in your internal network. (github.com)
submitted 1 week ago by digicat to c/blueteamsec
0 comments fedilink
252
2
The AltSyscalls module is designed merely as the intercept mechanism for using Alternate Syscalls on Windows 11 (github.com)
submitted 1 week ago* (last edited 1 week ago) by digicat to c/blueteamsec
0 comments fedilink
253
3
A curated collection of Living off the Land (LotL) attack demonstrations where trusted binaries go rogue, because if it didn’t launch calc.exe, did it even happen (github.com)
submitted 1 week ago by digicat to c/blueteamsec
0 comments fedilink
254
1
Following NoName057(16) DDoSia Project’s Targets (blog.sekoia.io)
submitted 2 years ago by campuscodi to c/blueteamsec
0 comments fedilink
255
3
Process Mockingjay: Echoing RWX In Userland To Achieve Code Execution (www.securityjoes.com)
submitted 2 years ago by campuscodi to c/blueteamsec
1 comments fedilink
256
9
The Enemy Within: Threat Actors Target Subdomains of Trusted Global Brands in Mass Open Redirect Abuse. (www.silentpush.com)
submitted 2 years ago by campuscodi to c/blueteamsec
2 comments fedilink
257
12
DNS Analyzer - Finding DNS vulnerabilities with Burp Suite (sec-consult.com)
submitted 2 years ago by campuscodi to c/blueteamsec
0 comments fedilink
258
6
A technical analysis of the SALTWATER backdoor used in Barracuda 0-day vulnerability (CVE-2023-2868) exploitation (cybergeeks.tech)
submitted 2 years ago by campuscodi to c/blueteamsec
0 comments fedilink
259
5
Research: Zero-Day Shop (www.cyfirma.com)
submitted 2 years ago by campuscodi to c/blueteamsec
1 comments fedilink
260
6
Confused about the drama with the new BreachForums? Reading this will either help you or make your head spin (www.databreaches.net)
submitted 2 years ago by campuscodi to c/blueteamsec
1 comments fedilink
261
1
Bluepurple Pulse: week ending June 25th (bluepurple.binaryfirefly.com)
submitted 2 years ago by digicat to c/blueteamsec
0 comments fedilink
262
1
Beyond the Horizon: Traveling the World on Camaro Dragon’s USB Flash Drives (research.checkpoint.com)
submitted 2 years ago by digicat to c/blueteamsec
0 comments fedilink
263
2
Graphican: Flea Uses New Backdoor in Attacks Targeting Foreign Ministries (symantec-enterprise-blogs.security.com)
submitted 2 years ago by digicat to c/blueteamsec
0 comments fedilink
264
3
Dissecting TriangleDB, a Triangulation spyware implant (securelist.com)
submitted 2 years ago by udunadan to c/blueteamsec
0 comments fedilink
265
2
Unpacking RDStealer: An Exfiltration Malware Targeting RDP Workloads (www.bitdefender.com)
submitted 2 years ago by digicat to c/blueteamsec
0 comments fedilink
266
2
BlueDelta Exploits Ukrainian Government Roundcube Mail Servers to Support Espionage Activities (www.recordedfuture.com)
submitted 2 years ago by digicat to c/blueteamsec
0 comments fedilink
267
2
Tracing Ransomware Threat Actors Through Stylometric Analysis and Chat Log Examination (medium.com)
submitted 2 years ago by digicat to c/blueteamsec
0 comments fedilink
268
2
CID Lookout: Unsolicited Smartwatches Received by Mail (www.cid.army.mil)
submitted 2 years ago by digicat to c/blueteamsec
0 comments fedilink
269
1
win32-app-isolation: Tools and documentation for Win32 app isolation (github.com)
submitted 2 years ago by digicat to c/blueteamsec
0 comments fedilink
270
1
openfire鉴权绕过漏洞原理解析 - Openfire Authentication Bypass Vulnerability Principle Analysis (mp-weixin-qq-com.translate.goog)
submitted 2 years ago by digicat to c/blueteamsec
0 comments fedilink
271
0
Korean reporting on the Lazarus fake recruiter campaign implant (download.hauri.net)
submitted 2 years ago by digicat to c/blueteamsec
0 comments fedilink
272
1
한국내 macOS 이용자를 노린 APT37 공격 등장 - APT37 attack targeting macOS users in Korea (www.genians.co.kr)
submitted 2 years ago by digicat to c/blueteamsec
0 comments fedilink
273
4
Inside of the WASP's nest: deep dive into PyPI-hosted malware (blog.virustotal.com)
submitted 2 years ago by digicat to c/blueteamsec
0 comments fedilink
274
1
Uncovering a New Activity Group Targeting Governments in the Middle East and Africa - Palo Alto Networks Blog (www.paloaltonetworks.com)
submitted 2 years ago by digicat to c/blueteamsec
0 comments fedilink
275
3
Resident Campaign (www.esentire.com)
submitted 2 years ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›