A Windows tool that extracts Kerberos tickets from the Local Security Authority (LSA) cache🕵️‍♂️ github.com/Shac0x/Wonka #infosec #cybersecurity #pentest #redteam #kerberos

A specially crafted repository can lead to an arbitrary code execution in TruffleHog version 3.90.2🕵️‍♂️ talosintelligence.com/vulnerabilit... #infosec #cybersecurity #pentest #redteam #git #opensource

How attackers can exploit browser-cache-smuggling in combination with COM hijacking🕵️‍♂️ medium.com/@danemeth90/... #infosec #cybersecurity #pentest #redteam #phishing #windows

ClickForClickOnce - Generate configurable clickonce payloads🕵️‍♂️ github.com/whokilleddb/... #infosec #cybersecurity #pentest #redteam #opensource

Protection against Model Serialization Attacks🕵️‍♂️ github.com/protectai/mo... #infosec #cybersecurity #pentest #redteam #opensource #ai

A Beacon Object File (BOF) for Active Directory enumeration through Active Directory Web Services (ADWS) compatible with BOFHound🕵️‍♂️ github.com/Nomad0x7/sek... #infosec #cybersecurity #pentest #redteam #windows #opensource

Time-based user enum via Basic Auth in Azure against Autodiscover🕵️‍♂️ github.com/nyxgeek/oned... #infosec #cybersecurity #pentest #redteam #osint

A post about how Azure Relay Bridge (azbridge) can be abused by red teams to tunnel C2 traffic through Microsofts Azure Service Bus infrastructure🕵️‍♂️ hackerhermanos.com/azbridge #infosec #cybersecurity #pentest #redteam #cloud #micorosoft

On r1cksec.de it is possible to search for URLs based on my cheatsheets🕵️‍♂️ #infosec #cybersecurity #redteam #pentest #malware #threatintel #dfir

New cheatsheets pushed🕵️‍♂️ github.com/r1cksec/chea... #infosec #cybersecurity #pentest #redteam #cloud #malware #dfir

A collection of different methods of stealing NetNTLM hashes🕵️‍♂️ www.securify.nl/blog/living-... #infosec #cybersecurity #pentest #redteam #windows #activedirectory

A collection of useful API endpoints for security operators and administrators🕵️‍♂️ github.com/toneillcodes... #infosec #cybersecurity #pentest #redteam #cloud

Exposing CharmingKitten's malicious activity for IRGC-IO devision Counterintelligence devision (1500)🕵️‍♂️ github.com/KittenBuster... #infosec #cybersecurity #threatintel #malware #dfir

This is the tool to dump the LSASS process on modern Windows 11🕵️‍♂️ github.com/TwoSevenOneT... #infosec #cybersecurity #pentest #redteam #windows #opensource

RunPE implementation with multiple evasive techniques🕵️‍♂️ github.com/Maldev-Acade... #infosec #cybersecurity #pentest #redteam #windows #opensource

Obex – Blocking unwanted DLLs in user mode🕵️‍♂️ github.com/dis0rder0x00... #infosec #cybersecurity #pentest #redteam #windows #opensource

Intercept Windows Named Pipes communication using Burp or similar HTTP proxy tools🕵️‍♂️ github.com/gabriel-szte... #infosec #cybersecurity #redteam #pentest #opensource #windows

Swiss Army Knife for payload encryption, obfuscation, and conversion to byte arrays – all in a single command (14 output formats supported)🕵️‍♂️ github.com/Print3M/Byte... #infosec #cybersecurity #pentest #redteam #opensource

A critical flaw in Microsofts Entra ID allowed undocumented Actor tokens to bypass tenant boundaries and impersonate Global Admins across any tenant via a Azure AD Graph API (CVE-2025-55241)🕵️‍♂️ dirkjanm.io/obtaining-gl... #infosec #cybersecurity #pentest #redteam #cloud

This is a tool that takes any link and makes it look malicious🕵️‍♂️ phishyurl.com #infosec #cybersecurity #phishing #url

Impersonate Windows tokens in Nim🕵️‍♂️ github.com/Fudgedotdotd... #infosec #cybersecurity #pentest #redteam

Decide if the domain is Typosquatted or Real🕵️‍♂️ typo.himanshuanand.com #infosec #cybersecurity phishing

Load shellcode without P/D Invoke and VirtualProtect call🕵️‍♂️ github.com/Mr-Un1k0d3r/... #infosec #cybersecurity #pentest #redteam #malware #opensource

Metamorphic cross-compilation of C++ & C-code to PIC, BOF & EXE🕵️‍♂️ github.com/tijme/dittob... #infosec #cybersecurity #pentest #redteam

A threat actor accidentally installed Huntress’s EDR agent on their own infrastructure, giving Huntress a view into their daily tradecraft🕵️‍♂️ www.huntress.com/blog/rare-lo... #infosec #cybersecurity #threatintel #malware

Azure AppHunter is an open-source tool created for security researchers, red teamers and defenders to help them identify excessive privileges assigned to Service Principals🕵️‍♂️ github.com/8ales/Azure-... #infosec #cybersecurity #pentest #redteam #cloud

New cheatsheets pushed🕵️‍♂️ github.com/r1cksec/chea... #infosec #cybersecurity #pentest #redteam #dfir #threatintel #malware #phishing #opensource

Open-source multi-purpose remote access tool for Microsoft Windows🕵️‍♂️ github.com/DarkCoderSc/... #infosec #cybersecurity #pentest #opensource #windows

WebClient is a common targeted service for NTLM relay attacks. This post covers if it is possible to start the service remotely as a low privileged user🕵️‍♂️ specterops.io/blog/2025/08... #infosec #cybersecurity #pentest #redteam

A next-generation HTTP stealth proxy which perfectly cloaks requests as the Chrome browser across all layers of the stack🕵️‍♂️ github.com/mandatorypro... #infosec #cybersecurity #pentest #redteam #opensource

A bash script to automatically dump all kerberos secrets stored into keyring🕵️‍♂️ github.com/Hakumarachi/... #infosec #cybersecurity #pentest #redteam #linux #opensource

Glato is an enumeration and attack tool that allows both blue teamers and offensive security practitioners to identify and exploit pipeline vulnerabilities within a GitLab Instance's public and private repositories🕵️‍♂️ github.com/praetorian-i... #infosec #cybersecurity #pentest #redteam

An article about how an attacker can exploit GitHub's keyless authentication to AWS via OpenID Connect and use it as a first point of entry to AWS🕵️‍♂️ article.pacificsec.com/blog/2025-02... #infosec #cybersecurity #pentest #redteam #cloud #aws

A learning and training platform for security operations teams, detection engineers, threat hunters, and blue team defense practitioners🕵️‍♂️ www.soc-labs.top/en/detection #infosec #cybersecurity #threatintel #blueteam #soc

Phishing attack uses japanese character "ん" to mimic forward slash "/" 🕵️‍♂️ cybersecuritynews.com/phishing-att... #infosec #cybersecurity #threatintel #phishing #spoofing

LudusHound is a tool for red and blue teams that transforms BloodHound data into a fully functional, Active Directory replica environment via Ludus for controlled testing🕵️‍♂️ github.com/bagelByt3s/L... #infosec #cybersecurity #pentest #redteam #opensource

Dump Kerberos tickets like Rubeus's dump command🕵️‍♂️ github.com/Fudgedotdotd... #infosec #cybersecurity #pentest #redteam

gpoParser is a tool designed to extract and analyze configurations applied through Group Policy Objects (GPOs) in an Active Directory environment🕵️‍♂️ github.com/synacktiv/gp... #infosec #cybersecurity #pentest #opensource

The investigation revealed previously undocumented tools and demonstrated that Lumma affiliates frequently operate multiple schemes simultaneously🕵️‍♂️ www.recordedfuture.com/research/beh... #infosec #cybersecurity #malware #threatintel #dfir

Local SYSTEM auth trigger for relaying🕵️‍♂️ github.com/rtecCyberSec... #infosec #cybersecurity #redteam #pentest

A tool to transform Chromium browsers into a C2 Implant🕵️‍♂️ github.com/praetorian-i... #infosec #cybersecurity #redteam #pentest #opensource

Weaponize DLL hijacking easily. Backdoor any function in any DLL🕵️‍♂️ github.com/Print3M/DllS... #infosec #cybersecurity #redteam #pentest #opensource

A post about multiple incidents involving SonicWall, in which attackers installed two legitimate Windows drivers (rwdrv.sys & hlpdrv.sys) as part of BYOVD attacks🕵️‍♂️ www.huntress.com/blog/exploit... #infosec #cybersecurity #threatintel #malware #ransomware #vpn

A Python reconnaissance tool designed to discover Azure services and attribute tenant ownership information based on their responses.🕵️‍♂️ github.com/NetSPI/ATEAM #infosec #cybersecurity #pentest #redteam #cloud #opensource

This archive check tool is providing information about if a given URL was ever cached by Google, Bing, WayBackMachine(Archive.org), Webcitation, Archive.is and Gigablast🕵️‍♂️ pagecached.com #infosec #cybersecurity #osint #archive #google #bing #waybackmachine

A post about a HTTP/2 vulnerability that enables denial-of-service attacks (CVE-2025‑8671)🕵️‍♂️ galbarnahum.com/posts/made-y... #infosec #cybersecurity #web #http #https #cve

FindMeAccess is a tool useful for finding gaps in Azure/M365 MFA requirements for different resources, client ids, and user agents🕵️‍♂️ github.com/absolomb/Fin... #infosec #cybersecurity #pentest #redteam #azure #entra #cloud #opensource

A post about how misconfigured Intune certificate deployment via ADCS can enable attackers to escalate from a cloud-managed endpoint to Domain Admin in Active Directory🕵️‍♂️ dirkjanm.io/extending-ad... #infosec #cybersecurity #pentest #redteam #cloud

A post that describes a scenario in which a user could be coerced into inadvertently giving an attacker access to their entire home drive or other network shares🕵️‍♂️ blog.delivr.to/filejacking-... #infosec #cybersecurity #pentest #redteam #phishing

A tool designed for smuggling interactive command and control traffic through legitimate TURN servers hosted by reputable providers such as Zoom🕵️‍♂️ github.com/praetorian-i... #infosec #cybersecurity #pentest #redteam #opensource