Channel Public Channel

Alaid TechThread

@offensive_thread

Vulnerability discovery, threat intelligence, reverse engineering, AppSec

Open in Telegram

Subscribers: 1.14K
Photos: 7
Videos: 2
Links: 1.4K

Showing posts older than #900 · Back to latest

Older Posts 20 shown

Post #899 48 Jun 3, 2020, 19:14 UTC

shad0w is a post exploitation framework designed to operate covertly on heavily monitored enviroments

https://github.com/bats3c/shad0w

GitHub GitHub - bats3c/shad0w: A post exploitation framework designed to operate covertly on heavily monitored environments A post exploitation framework designed to operate covertly on heavily monitored environments - bats3c/shad0w

Post #898 54 Jun 3, 2020, 10:09 UTC

Using Syscalls to Inject Shellcode on Windows

https://www.solomonsklash.io/syscalls-for-shellcode-injection.html

Post #897 51 Jun 2, 2020, 22:10 UTC

Active Directory security assessment checklist (-> English version)

https://www.cert.ssi.gouv.fr/uploads/guide-ad.html

Post #896 50 Jun 2, 2020, 21:54 UTC

Attacking FreeIPA — Part III: Finding A Path

https://posts.specterops.io/attacking-freeipa-part-iii-finding-a-path-677405b5b95e

SpecterOps Attacking FreeIPA — Part III: Finding A Path This post is Part III in a series about my experiences attacking FreeIPA. In Part I of this series, we reviewed some of the background and underlying technologies utilized by FreeIPA. We also discussed several authentication mechanisms, and forms of credential…

Post #895 44 Jun 2, 2020, 16:37 UTC

In-depth analysis of the new Team9 malware family

https://blog.fox-it.com/2020/06/02/in-depth-analysis-of-the-new-team9-malware-family/

Fox-IT International blog In-depth analysis of the new Team9 malware family Author: Nikolaos Pantazopoulos Co-author: Stefano Antenucci (@Antelox) And in close collaboration with NCC’s RIFT. 1. Introduction Publicly discovered in late April 2020, the Team9 malware fa…

Post #894 56 Jun 2, 2020, 16:31 UTC

Cerbero - Kerberos protocol attacker

https://gitlab.com/Zer1t0/cerbero

GitLab Zer1t0 / cerbero · GitLab Kerberos protocol attacker

Post #893 46 Jun 2, 2020, 16:25 UTC

Detecting and Advancing In-Memory .NET Tradecraft

https://www.mdsec.co.uk/2020/06/detecting-and-advancing-in-memory-net-tradecraft/

MDSec Detecting and Advancing In-Memory .NET Tradecraft - MDSec Introduction In-memory tradecraft is becoming more and more important for remaining undetected during a red team operation, with it becoming common practice for blue teams to peek in to running...

Post #892 59 May 30, 2020, 22:13 UTC

Zero-day in ‘Sign In with Apple’

https://bhavukjain1.github.io/blog/2020/05/30/zeroday-signin-with-apple/

Post #891 58 May 29, 2020, 22:06 UTC

Automate OctopusC2 RedTeam infrastructure deployment

https://shells.systems/automate-octopus-c2-redteam-infrastructure-deployment/

Shells.Systems Automate Octopus C2 RedTeam Infrastructure Deployment - Shells.Systems Estimated Reading Time: 15 minutes Establishing a red team infrastructure for your operation is something you need to take care of every time, and you need to make sure it’s working without any obstacles before you begin your operation. Every time I start…

Post #890 56 May 29, 2020, 15:49 UTC

Data Mining with Big Data in Intrusion Detection Systems: A Systematic Literature Review

https://arxiv.org/pdf/2005.12267.pdf

Post #889 55 May 29, 2020, 15:48 UTC

Deep Learning for Insider Threat Detection: Review, Challenges and Opportunities

https://arxiv.org/pdf/2005.12433.pdf

Post #888 54 May 28, 2020, 22:07 UTC

Automating a RedELK deployment using Ansible

https://www.trustedsec.com/blog/automating-a-redelk-deployment-using-ansible/

TrustedSec Automating a RedELK Deployment Using Ansible Automate your RedELK infrastructure deployment with Ansible, streamlining your red team operations and enhancing visibility with a scalable ELK stack,…

Post #887 52 May 28, 2020, 16:00 UTC

When Anti-Virus Engines Look Like Kernel Rootkits

https://volatility-labs.blogspot.com/2020/05/when-anti-virus-engines-look-like.html

Blogspot When Anti-Virus Engines Look Like Kernel Rootkits While analyzing real-world systems, memory analysts will often encounter anti-virus (AV) engines, EDRs, and similar products that, at first ...

Post #886 49 May 28, 2020, 15:59 UTC

TrickBot BazarLoader In-Depth

https://cybersecurity.att.com/blogs/labs-research/trickbot-bazarloader-in-depth

LevelBlue LevelBlue Labs Research Blog: Cutting-Edge Cybersecurity Analysis Explore cutting-edge cybersecurity research and analysis from LevelBlue Labs. Gain deep insights into emerging threats and innovative defenses

Post #885 49 May 27, 2020, 21:56 UTC

Empire, Kaspersky & Obfuscation oh my!

http://www.offensiveops.io/tools/empire-kaspersky-obfuscation-oh-my/

Post #884 56 May 26, 2020, 10:45 UTC

Batch Binary Analysis with IDA Pro 7.4 Automation

https://irq5.io/2020/05/25/batch-binary-analysis-with-ida-pro-7-4-automation/amp/

irq5.io Batch Binary Analysis with IDA Pro 7.4 Automation It is easy to script analysis steps with IDAPython, but now we want to automate this analysis over, let’s say, 10,000 files. I did a quick Google and I couldn’t find a guide on how to p…

Post #883 60 May 24, 2020, 10:48 UTC

Introducing Shuffle — an Open Source SOAR platform part 1

https://medium.com/security-operation-capybara/introducing-shuffle-an-open-source-soar-platform-part-1-58a529de7d12

Medium Introducing Shuffle — an Open Source SOAR platform part 1 There are two big issues blueteams everywhere have: alert fatigue and a lack of coders. Read on to see how Shuffle can help..

Post #882 63 May 21, 2020, 20:58 UTC

Windows C# LLMNR/mDNS/NBNS/DNS/DHCPv6 spoofer/man-in-the-middle tool

https://github.com/Kevin-Robertson/InveighZero

GitHub GitHub - Kevin-Robertson/InveighZero: .NET IPv4/IPv6 machine-in-the-middle tool for penetration testers .NET IPv4/IPv6 machine-in-the-middle tool for penetration testers - Kevin-Robertson/InveighZero

Post #881 69 May 19, 2020, 11:31 UTC

https://github.com/thelinuxchoice/hidden-cry

Post #880 88 May 15, 2020, 18:34 UTC

PlumHound - BloodHoundAD Report Engine for Security Teams

https://github.com/DefensiveOrigins/PlumHound

GitHub DefensiveOrigins/PlumHound Bloodhound for Blue and Purple Teams. Contribute to DefensiveOrigins/PlumHound development by creating an account on GitHub.

Older posts →