2026-08-17T06:57:09Z https://njump.me r1cksec https://njump.me/npub1pwpw8m6ntlmyfd45gyjjfkcg05n6mahnph45c57yh3g0g0gvpmssteg7dw https://media.infosec.exchange/infosec.exchange/accounts/avatars/109/370/902/922/101/432/original/0ac16db50972d76c.png https://media.infosec.exchange/infosec.exchange/accounts/avatars/109/370/902/922/101/432/original/0ac16db50972d76c.png https://njump.me/nevent1qqs0429lp6t7vg25wxaktpm4wvph8zaqg2egyac7a2zd4jmlcx0qy4qzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzsyck6y Researchers set up a fake startup and hired suspected Lazarus linked IT workers and monitored their activity.<br/><br/><a href="https://any.run/cybersecurity-blog/lazarus-group-it-workers-investigation-part-two/">https://any.run/cybersecurity-blog/lazarus-group-it-workers-investigation-part-two/</a><br/><br/>#infosec #cybersecurity #threatintel 2026-08-13T11:09:23Z https://njump.me/nevent1qqswycsrhz25wz2398jjrgap6hj64e9sfe6y4xmjwnldx5w2v9q0azczyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wza0a09d Extract Windows credentials directly from VM memory snapshots and virtual disks<br/><br/><a href="https://github.com/nikaiw/VMkatz">https://github.com/nikaiw/VMkatz</a><br/><br/>#infosec #cybersecurity #redteam #pentest #opensource 2026-07-26T09:44:26Z https://njump.me/nevent1qqs97hw83x4td74tggfaytj4y533xeswrtfvpf4rejkuhgnun67ly6czyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzdv3mh6 When Windows Defender realizes that a malicious file has a cloud tag it rewrites the file to it&#39;s original location. The PoC abuses this behaviour to overwrite system files and gain administrative privileges.<br/><br/><a href="https://github.com/Nightmare-Eclipse/RedSun">https://github.com/Nightmare-Eclipse/RedSun</a><br/><br/>#infosec #cybersecurity #pentest #windows 2026-04-16T10:50:49Z https://njump.me/nevent1qqstkyeq5qwdfuyhehjhf9pfhqx444eqll4caur2mq0t6cwtphuhxpszyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wz22yyex Fritter is a heavily modified fork of TheWover and Odzhan&#39;s Donut shellcode generator. It generates position-independent shellcode for in-memory execution of VBScript, JScript, EXE, DLL, and .NET assemblies, but with a heavy focus on evasion and signature resistance.<br/><br/><a href="https://github.com/0xROOTPLS/Fritter">https://github.com/0xROOTPLS/Fritter</a><br/><br/>#infosec #cybersecurity #redteam #pentest 2026-04-15T17:49:26Z https://njump.me/nevent1qqsxgmhg2tsrjz5r0cwv0h6hatl7hf9rr4g7wqhq0xys53vljfwrqlqzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzp7frpc Lightweight binary that joins a device to a Tailscale network and exposes a local SOCKS5 proxy. Designed for red team operations and ephemeral access into restricted environments using Tailscale’s embedded client (tsnet). Zero config, no daemon, no persistence - just a fast way in.<br/><br/><a href="https://github.com/Yeeb1/SockTail">https://github.com/Yeeb1/SockTail</a><br/><br/>#infosec #cybersecurity #redteam #pentest 2026-04-14T14:14:55Z https://njump.me/nevent1qqsxdy6uqfavcjvcc0drfw78w4z6nepelr4sy8y3aeyh47jrn2sjmygzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzeyjrz3 Transform LDAP filters, BaseDNs, attribute lists, and attribute entries using composable middleware chains. Zero dependencies. Works as a library or CLI tool.<br/><br/><a href="https://github.com/j0hnZ3RA/ldapx-py">https://github.com/j0hnZ3RA/ldapx-py</a><br/><br/>#infosec #cybersecurity #redteam #pentest #opensource 2026-04-12T10:52:05Z https://njump.me/nevent1qqsx6tatv5yaj7nx5cqg2u920kh6499jlr8x9uzwarva2mawdcy28kqzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wztw6qus This program show you IMSI numbers of cellphones around you.<br/><br/><a href="https://github.com/Oros42/IMSI-catcher">https://github.com/Oros42/IMSI-catcher</a><br/><br/>#infosec #cybersecurity #osint 2026-04-10T09:12:55Z https://njump.me/nevent1qqsdcvkl84c7amzpwke7x3pz3u7xm3g7jae9dvx4m8fer8ek2axnssczyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzg3tsjs A searchable beacon object file collection.<br/><br/><a href="https://chryzsh.github.io/awesome-bof/site">https://chryzsh.github.io/awesome-bof/site</a><br/><br/>#infosec #cybersecurity #redteam #pentest 2026-04-09T06:42:47Z https://njump.me/nevent1qqsfqj2elxcx6g4g0f53zdcxxpm59r59effa05qu2skj8zd4ujxf6hszyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wz952tzf Weaponize signed .NET ClickOnce applications for initial access by hijacking a dependency DLL via AppDomainManager injection and loading a C# port of ProxyBlob Agent.<br/><br/><a href="https://github.com/dazzyddos/ClickOnceBlobber">https://github.com/dazzyddos/ClickOnceBlobber</a><br/><br/>#infosec #cybersecurity #redteam #pentest 2026-04-08T11:13:01Z https://njump.me/nevent1qqsq9jg7uumte6fsx32rzva68cmuz4csksjv5qff4sn4xdr9w3qf4zczyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wz5uhk7c A .NET 8 toolkit for creating and analysing Windows Shell Link (.lnk) files. Includes a command-line builder (LnkMeMaybe) and a graphical editor (LnkUi).<br/><br/><a href="https://github.com/trustedsec/LnkMeMaybe">https://github.com/trustedsec/LnkMeMaybe</a><br/><br/>#infosec #cybersecurity #redteam #pentest #phishing 2026-04-07T06:28:44Z https://njump.me/nevent1qqs0a0qe74l0rqk8t50lt377x3tcxmp4snl6c4jpk39jvgz30qvcvygzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wz90rz8t A service that helps to understand code from a repository<br/><br/><a href="https://deepwiki.com">https://deepwiki.com</a><br/><br/>#infosec #cybersecurity #github #ai 2026-04-06T09:32:01Z https://njump.me/nevent1qqswnk0867d0ncp0glqx0k7gq6d5yu83zpheph84aqteupeky2nc7agzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzxvrqxj Orchestrate detonating your MalDev in VMs with different EDRs to see their detection surface.<br/><br/><a href="https://github.com/dobin/detonator">https://github.com/dobin/detonator</a><br/><br/>#infosec #cybersecurity #redteam #pentest 2026-04-05T09:24:07Z https://njump.me/nevent1qqsv9x3uduk2agkwzfeuv4d0qmh2095ahfyxca2pxup9y2yf7tvp9jqzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wz2ahkr7 Generalized Wi-Fi Client Isolation Bypasses<br/><br/><a href="https://github.com/vanhoefm/airsnitch">https://github.com/vanhoefm/airsnitch</a><br/><br/>#infosec #cybersecurity #redteam #pentest #wifi 2026-04-04T08:50:06Z https://njump.me/nevent1qqsdvj488h2ameq6vy5e86apkxle4f4hjyr7cx2h784zrwgfhunkqjgzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wz8x0xkf DCSync Beacon Object File (BOF)<br/><br/><a href="https://github.com/kozmer/dcsync-bof">https://github.com/kozmer/dcsync-bof</a><br/><br/>#infosec #cybersecurity #redteam #pentest #opensource 2026-04-03T11:50:18Z https://njump.me/nevent1qqsxkhwukau5f7p7vz8wk6ql5pam392jfzs0e692slc6m4aaftn47tczyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzw6xj4s This ASPX web shell enables execution of Beacon Object Files (BOFs) on a target server using a semi-interactive Python client.<br/><br/><a href="https://github.com/epotseluevskaya/ASPX_WebShell_COFFLoader">https://github.com/epotseluevskaya/ASPX_WebShell_COFFLoader</a><br/><br/>#infosec #cybersecurity #redteam #pentest #web 2026-04-02T07:24:42Z https://njump.me/nevent1qqsdqqxmw5cysgre6266rpe07p478vlp9wk3txdfxy9g0pwzcuss0hgzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzpryna2 A post about identifying key areas of Configuration Manager (SCCM) infrastructure that defenders can implement for deception solutions<br/><br/><a href="https://specterops.io/blog/2026/02/19/mapping-deception-solutions-with-bloodhound-opengraph-configuration-manager">https://specterops.io/blog/2026/02/19/mapping-deception-solutions-with-bloodhound-opengraph-configuration-manager</a><br/><br/>#infosec #cybersecurity #redteam #blueteam #windows #dfir 2026-04-01T10:38:57Z https://njump.me/nevent1qqsyhk00yn63rpnsvdat6rmgxjuu43396caa2rfskee4yr2wmmhd8jqzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzkp8yhh Opening a file in GNU Emacs can trigger arbitrary code execution through version control (git), most requiring zero user interaction beyond the file open itself. <br/><br/><a href="https://github.com/califio/publications/blob/main/MADBugs/vim-vs-emacs-vs-claude/Emacs.md">https://github.com/califio/publications/blob/main/MADBugs/vim-vs-emacs-vs-claude/Emacs.md</a><br/><br/>#infosec #cybersecurity #redteam #pentest #ai #emacs #claude 2026-03-31T06:43:32Z https://njump.me/nevent1qqsx263ywag6jhampydnc9hnvh5kjs6cxknjrkcucweh3k4a78pd5ygzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzx0zmfk A bug chain in Vim allows arbitrary OS command execution when a user opens<br/>a crafted file<br/><br/><a href="https://github.com/vim/vim/security/advisories/GHSA-2gmj-rpqf-pxvh">https://github.com/vim/vim/security/advisories/GHSA-2gmj-rpqf-pxvh</a><br/><br/><a href="https://github.com/califio/publications/blob/main/MADBugs/vim-vs-emacs-vs-claude/vim.md">https://github.com/califio/publications/blob/main/MADBugs/vim-vs-emacs-vs-claude/vim.md</a><br/><br/>#infosec #cybersecurity #redteam #pentest #ai #vim #claude 2026-03-31T06:42:20Z https://njump.me/nevent1qqs8dngmz374u25udh0zfjv8t7rqxuc5hxvxz3hzvawtvt6ht5m8llqzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzpjfc5h Extract Windows credentials directly from VM memory snapshots and virtual disks<br/><br/><a href="https://github.com/nikaiw/VMkatz">https://github.com/nikaiw/VMkatz</a><br/><br/>#infosec #cybersecurity #redteam #pentest #windows #opensource 2026-03-29T09:00:22Z https://njump.me/nevent1qqsvn63jadys8uhh566yw2q5xrrrnmmwcew7k9hnhghsuzhqatnwf6gzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzdx8pg4 Default TLS Exclusions for Palo Alto Networks Firewalls<br/><br/><a href="https://gist.github.com/UNC1739/cc175d87b8623569844efadf224bd6ad">https://gist.github.com/UNC1739/cc175d87b8623569844efadf224bd6ad</a><br/><br/>#infosec #cybersecurity #redteam #pentest 2026-03-27T07:40:13Z https://njump.me/nevent1qqszgwxpe4v3we4qqx82lwy8r6mz269nwx45mct0074r5lk9u6l4xwqzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wz5g8au4 This repo contains the design plan and runbook for using Claude Code to search for Java Deserialization Gadget chains.<br/><br/><a href="https://github.com/atredispartners/llmchainhunter">https://github.com/atredispartners/llmchainhunter</a><br/><br/>#infosec #cybersecurity #redteam #pentest #ai #llm #opensource 2026-03-26T16:06:03Z https://njump.me/nevent1qqsvqrl75uxy6k3a634snz6a5vsfgs70lrmr4ggd9fxh756gh58nr2czyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzkmspt8 A project that loads .NET assemblies into memory within an IIS environment running in full‑trust mode. It uses reflective loading techniques to inject inside the memory space of the w3wp.exe worker pool process<br/><br/><a href="https://github.com/zux0x3a/Phantom">https://github.com/zux0x3a/Phantom</a><br/><br/>#infosec #cybersecurity #redteam #pentest #windows 2026-03-25T07:34:29Z https://njump.me/nevent1qqs275ma3xt597j7cm6zlsfph5vs06s3d22phmq7705lkmyr2vefmwqzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzu6tfaw A post that describe how PKG files can be used to gain initial access on macOS<br/><br/><a href="https://blog.balliskit.com/macos-redteam-3-initial-access-with-darwinops-pkg-0a1d0160e662">https://blog.balliskit.com/macos-redteam-3-initial-access-with-darwinops-pkg-0a1d0160e662</a><br/><br/>#infosec #cybersecurity #redteam #pentest #macos #phishing 2026-03-24T15:55:56Z https://njump.me/nevent1qqs9xhuwqv6audhmqxgea5muyus2j6z27vavurnp6dalm9x97z0decqzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzqtkhed Rusty Armory - Beacon Object Files (BOFs) in Rust (Codename: Armory)<br/><br/><a href="https://github.com/memN0ps/armory-rs">https://github.com/memN0ps/armory-rs</a><br/><br/>#infosec #cybersecurity #redteam #pentest #rust 2026-03-23T08:57:47Z https://njump.me/nevent1qqstxgpxsef34ne4n6tw9zdtwnlfv86ywupy95yy8jdhr6z4z9uv23gzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wze98fja It is possible as a low privileged user to parse the Windows event logs for any ASR exclusion<br/><br/><a href="https://primusinterp.com/posts/WindowsASR/">https://primusinterp.com/posts/WindowsASR/</a><br/><br/>#infosec #cybersecurity #redteam #pentest 2026-03-22T11:42:38Z https://njump.me/nevent1qqsp24ksmcnvm05ndxfghaylhznnnr5s5pm875fljarhzxgzqdezrdgzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzenzk8q This cheatsheet maps common impacket workflows to their modern alternatives<br/><br/><a href="https://github.com/n00py/Outpacket">https://github.com/n00py/Outpacket</a><br/><br/>#infosec #cybersecurity #redteam #pentest 2026-03-21T09:59:19Z https://njump.me/nevent1qqspfmfztrdkm37cnmw0fecmlfe9mv0ym6lsf4e8f6fntpkwyp5a3uszyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wz88lda7 By altering the calling threads process ID and extending the exploitation window with file locks, an attacker can trick Seclogon into creating privileged LSASS handles for memory dumping<br/><br/><a href="https://otter.gitbook.io/red-teaming/articles/windows-of-opportunity-exploiting-race-conditions-in-seclogon-to-dump-lsass">https://otter.gitbook.io/red-teaming/articles/windows-of-opportunity-exploiting-race-conditions-in-seclogon-to-dump-lsass</a><br/><br/>#infosec #cybersecurity #redteam #pentest #windows 2026-03-14T14:47:41Z https://njump.me/nevent1qqsdesdq748h0dz07060s8v2nycx5djhyrktuaegagrd5wq9dkg3fkczyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wz2arnsu Vulnerable and malicious Windows drivers database<br/><br/><a href="https://loldb.xsec.fr">https://loldb.xsec.fr</a><br/><br/>#infosec #cybersecurity #redteam #pentest #windows 2026-03-12T07:31:37Z https://njump.me/nevent1qqsdzxyg4zqp26ws7u8gme3jezx4m5r8wdxxksyp6pcuax4nejyep0qzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzt4vwjx The Live Terminal feature of Cortex XDR can be abused by attackers as a pre-installed, EDR-trusted C2 channel<br/><br/><a href="https://labs.infoguard.ch/posts/abusing_cortex_xdr_live_response_as_c2">https://labs.infoguard.ch/posts/abusing_cortex_xdr_live_response_as_c2</a><br/><br/>#infosec #cybersecurity #redteam #pentest 2026-03-11T08:47:09Z https://njump.me/nevent1qqs8h4vvaqmqyvsej5hqu9dvtznm8c26tvh6vhkj5mgn8s8qvkf960szyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzf48epf A collection of DPAPI hunting and parsing BOFs<br/><br/><a href="https://github.com/toneillcodes/DPAPI-BOF">https://github.com/toneillcodes/DPAPI-BOF</a><br/><br/>#infosec #cybersecurity #redteam #pentest #windows 2026-03-09T13:17:37Z https://njump.me/nevent1qqs9w5qwq0vc93shypk3yg7q6z5hmkh6nlu3pnyydcsd5zt5lwnq87szyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzqw4hfq New cheatsheets pushed<br/><br/><a href="https://github.com/r1cksec/cheatsheets">https://github.com/r1cksec/cheatsheets</a><br/><br/>#infosec #cybersecurity #redteam #pentest #threatintel #malware #dfir #bugbounty #opensource 2026-03-08T11:36:00Z https://njump.me/nevent1qqsr0su2x6rpqt8hapzxex9psvcdwwnx598sfk5c39tyrxucjydx9fgzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzyx4tky PHP 8 sandbox escape PoC demonstrating a disable_functions bypass on Unix-like systems.<br/><br/><a href="https://github.com/m0x41nos/TimeAfterFree">https://github.com/m0x41nos/TimeAfterFree</a><br/><br/>#infosec #cybersecurity #redteam #pentest #php 2026-03-06T07:35:57Z https://njump.me/nevent1qqsdnr55aydkjh5mzg4fup7ux4nnp2j8wnuq93xruq4t7gu4r2k0x8qzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzg333dx Command channel that uses Wi-Fi Beacons as a unidirectional C2 transport<br/><br/><a href="https://github.com/V-i-x-x/WIFIAIR-C2-Channel">https://github.com/V-i-x-x/WIFIAIR-C2-Channel</a><br/><br/>#infosec #cybersecurity #redteam #pentest 2026-03-05T08:30:00Z https://njump.me/nevent1qqsp6j7r35xqs6qc26u30fkvn0es3upe02c7md4vgrqz08na0ysvypqzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzttuuj0 This database has 8.726.485.619 unique hashes (NT, LM, MD5, SHA1, SHA256)<br/><br/> <a href="https://ntlm.pw">https://ntlm.pw</a><br/><br/>#infosec #cybersecurity #redteam #pentest 2026-03-04T07:45:56Z https://njump.me/nevent1qqs2j4f84dh4vyekae4l4grjtqph7epslt4hcrclkwqjv3rlvwrcl6czyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wz5cqyrc A Mythic C2 profile that uses Notion as a covert communication channel.<br/><br/><a href="https://github.com/0xbbuddha/notion">https://github.com/0xbbuddha/notion</a><br/><br/>#infosec #cybersecurity #redteam #pentest #opensource 2026-03-03T08:12:47Z https://njump.me/nevent1qqs9003qza90tj0lgvg808nfxqaw7lysg3x38346ahv3sfenyesrzgszyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzvpk52f ADPulse is an open-source Active Directory security auditing tool that connects to a domain controller via LDAP(S), runs 35 automated security checks, and produces detailed reports in console, JSON, and HTML formats.<br/><br/><a href="https://github.com/dievus/ADPulse">https://github.com/dievus/ADPulse</a><br/><br/>#infosec #cybersecurity #pentest #opensource 2026-03-03T08:00:45Z https://njump.me/nevent1qqs8esync2c4kgyrtvgrczs6e40cg5a3zwm52243qq5yd62qru3j44gzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzr69lm0 A lightweight Windows Prefetch file parser to extract programs execution history<br/><br/><a href="https://github.com/Maldev-Academy/PrefetchFileParser">https://github.com/Maldev-Academy/PrefetchFileParser</a><br/><br/>#infosec #cybersecurity #redteam #pentest #opensource 2026-03-02T11:10:50Z https://njump.me/nevent1qqs9a5xytn8akhrlan7ulnxkpjmqrzavgpmvfhawmksng65wfzjxc5czyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzpytz5n CAPSlock is an offline Conditional Access (CA) analysis tool built on top of a roadrecon database<br/><br/><a href="https://github.com/rbnroot/CAPSlock">https://github.com/rbnroot/CAPSlock</a><br/><br/>#infosec #cybersecurity #redteam #pentest #cloud #azure 2026-03-01T09:57:27Z https://njump.me/nevent1qqsxqr8m2002pecdyr57y5wlg3vy9ttr368580q6egvqunvupdvxu3gzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzalmtmd Tool that gathers a customizable set of ETW telemetry and generates user-defined detections<br/><br/><a href="https://github.com/HullaBrian/EventHorizon">https://github.com/HullaBrian/EventHorizon</a><br/><br/>#infosec #cybersecurity #threatintel #dfir 2026-02-27T13:43:11Z https://njump.me/nevent1qqs0zm5r0g5yh0yv6pdc2kl68u239mgcnjfn32wk6d03wxs9ezgkfrczyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzvpdzrk A new ClickFix variant dubbed &#34;CrashFix&#34; that intentionally crashes the browser then baits users into running malicious commands<br/><br/><a href="https://www.huntress.com/blog/malicious-browser-extention-crashfix-kongtuke">https://www.huntress.com/blog/malicious-browser-extention-crashfix-kongtuke</a><br/><br/>#infosec #cybersecurity #threatintel #phishing #malware #redteam 2026-02-26T10:12:33Z https://njump.me/nevent1qqsyu68fhefdr6wl2tapn6yesjduyc8s3cxkqyana6yxez7h5cq24yszyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzaum30u GitPhish is a comprehensive security research tool designed to perform GitHub&#39;s device code authentication flow.<br/><br/><a href="https://github.com/praetorian-inc/GitPhish">https://github.com/praetorian-inc/GitPhish</a><br/><br/>#infosec #cybersecurity #redteam #pentest #phishing 2026-02-24T12:43:36Z https://njump.me/nevent1qqsdqguz393wq4qzxtcchjq4jdscp6679hntdeahdxndjz04k950wwgzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzywjl2l This post describes how to execute code on every Pod in many Kubernetes clusters when using a service account with nodes/proxy GET permissions<br/><br/><a href="https://grahamhelton.com/blog/nodes-proxy-rce">https://grahamhelton.com/blog/nodes-proxy-rce</a><br/><br/>#infosec #cybersecurity #redteam #pentest 2026-02-22T09:21:46Z https://njump.me/nevent1qqszgx8tdcrwmwjxhfucwnyg3ukcrqg5ln32dvy0eytl8lqnhaxgv6qzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzehtxn0 A lightweight command sandbox for Linux, secure-by-default, built on Landlock<br/><br/><a href="https://github.com/dwisiswant0/sandboxec">https://github.com/dwisiswant0/sandboxec</a><br/><br/>#infosec #cybersecurity #pentest #threatintel 2026-02-21T17:00:28Z https://njump.me/nevent1qqsgxd9ax78a0r4hrrc624a3zcycwgnmnyam2gkg6pdjtsfhpha9dfqzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wz2nw52f In reply to <a href='/nevent1qqs9jcrr7mjdg2tatn0dle8nc8tj7da92lsv58rg8nekghjydc2pz9spz4mhxue69uhhyetvv9ujuerfw36x7tnsw43qxkeq7e'>nevent1q…eq7e</a><br/>_________________________<br/><br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqs33wdwd9gqvf8qvuv6824farf9k7wj6ulw5aewnmsda3thzv6q8qxmzm8g" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqs33wdwd9gqvf8qvuv6824farf9k7wj6ulw5aewnmsda3thzv6q8qxmzm8g</span> (<span class="italic">nprofile…zm8g</span>)</a></span> <a href="https://web.archive.org/web/20251228232452/https://owlhacku.com/introduction-to-deserialization-attacks/">https://web.archive.org/web/20251228232452/https://owlhacku.com/introduction-to-deserialization-attacks/</a> 2026-01-18T15:53:00Z https://njump.me/nevent1qqszvrtwg4tsczv30r6ff93fw2mxenr5ufy8lf4lwyyveugtczf03wczyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzx5xv43 Extract SAM and SYSTEM using Volume Shadow Copy (VSS) API. With multiple exfiltration options and XOR obfuscation🕵️‍♂️<br/><br/><a href="https://github.com/ricardojoserf/SAMDump">https://github.com/ricardojoserf/SAMDump</a><br/><br/>#infosec #cybersecurity #redteam #pentest #windows 2025-11-25T09:03:15Z https://njump.me/nevent1qqs8fpfs603kcdhfu3d9ucjtaw5e2egjekjpuxkff34tkj7ylnd4n6qzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzezgu7z This site provides an overview of torrent files associated with IP addresses, showing what has been downloaded or shared🕵️‍♂️<br/><br/><a href="https://iknowwhatyoudownload.com">https://iknowwhatyoudownload.com</a><br/><br/>#infosec #cybersecurity #osint #torrent 2025-11-10T10:46:41Z https://njump.me/nevent1qqsxehcwh5c3t99wrmt65gapcfucvhu536xadwe0tys09u6xvtwghjqzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzjd8fj2 Nice post that describes multiple vulnerabilities in Ivanti DSM (Desktop and Server Managment) that can be used for credential extraction and lateral movement🕵️‍♂️<br/><br/><a href="https://code-white.com/blog/ivanti-desktop-and-server-management">https://code-white.com/blog/ivanti-desktop-and-server-management</a><br/><br/>#infosec #cybersecurity #redteam #pentest #windows 2025-11-07T07:42:34Z https://njump.me/nevent1qqsydfhddpu8ynf2ke7dktg8txu6qf53n55qd2eehny0m76s673npqczyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wz8tyx3x USB Army Knife – the ultimate close access tool for penetration testers and red teamers🕵️‍♂️<br/><br/><a href="https://github.com/i-am-shodan/USBArmyKnife">https://github.com/i-am-shodan/USBArmyKnife</a><br/><br/>#infosec #cybersecurity #pentest #redteam 2025-11-05T15:54:36Z https://njump.me/nevent1qqsf403p663aqta4k9ary74mzcwcdenc9gdph9rrgwg5440c6g5grtczyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzv8swam Great post about how to crack password protected zip archives using known plaintext attack🕵️‍♂️<br/><br/><a href="https://badoption.eu/blog/2025/04/07/zipcrack.html">https://badoption.eu/blog/2025/04/07/zipcrack.html</a><br/><br/>#infosec #cybersecurity #pentest #redteam #zip 2025-11-02T09:39:27Z https://njump.me/nevent1qqsp0cj3v5rcv32sl470ptvlrnwwaxggsxv9333n5mshlcff7ypx7aczyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzljm80e Windows protocol library, including SMB and RPC implementations, among others🕵️‍♂️<br/><br/><a href="https://github.com/trustedsec/Titanis">https://github.com/trustedsec/Titanis</a><br/><br/>#infosec #cybersecurity #pentest #redteam #windows #opensource 2025-10-30T13:06:13Z https://njump.me/nevent1qqsprg6nylvw8sgqqau32xx45vpxk93wk6uh7m4jf2fs8yfjzp8dy8czyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzevjl3e This repository contains a proof of concept demonstrating the ClickFix attack technique via email - a CSS-based social engineering attack where visible text differs from the actual copied content🕵️‍♂️<br/><br/><a href="https://github.com/0xagil/Clickfix-Email">https://github.com/0xagil/Clickfix-Email</a><br/><br/>#infosec #cybersecurity #redteam #pentest #phishing #email #opensource 2025-10-29T14:14:10Z https://njump.me/nevent1qqsw488wqy00elzm9y2f6p0n0f7y4wkzegfse2s9fk47w7mn9fagcugzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzqgmcg7 The dragon in the dark. A red team post exploitation framework for testing security controls during red team assessments🕵️‍♂️<br/><br/><a href="https://github.com/0xflux/Wyrm">https://github.com/0xflux/Wyrm</a><br/><br/>#infosec #cybersecurity #pentest #redteam #c2 #opensource 2025-10-28T07:37:08Z https://njump.me/nevent1qqs2psgef9h8f7zfn4x0xwh02dmvqpm9xn0arhh076lj8w922dtng0szyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wza3sg09 How attackers can craft XML files to achieve command exeuction in the context of the XWizard ecosystem🕵️‍♂️ <br/><br/><a href="https://www.hackcraft.gr/2025/10/xwizard-from-xml-to-shellexec-using-wizardry">https://www.hackcraft.gr/2025/10/xwizard-from-xml-to-shellexec-using-wizardry</a><br/><br/>#infosec #cybersecurity #pentest #redteam 2025-10-26T10:12:22Z https://njump.me/nevent1qqs83h9lh5gzs4z0v6egrrztx28tgyrurqdt06erndp23aglfed2u0szyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wz9w8lzq This site can be used to analyze email headers🕵️‍♂️ <br/><br/><a href="https://mha.azurewebsites.net/pages/mha.html">https://mha.azurewebsites.net/pages/mha.html</a><br/><br/>#infosec #cybersecurity #pentest #redteam #phishing #email 2025-10-24T10:52:43Z https://njump.me/nevent1qqsrc220jczgdyhnp2et5fazrs8nezqp0rgzmkfhlzcfd4c80hvymdgzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wztpt5rr A Windows tool that extracts Kerberos tickets from the Local Security Authority (LSA) cache🕵️‍♂️<br/><br/><a href="https://github.com/Shac0x/Wonka">https://github.com/Shac0x/Wonka</a><br/><br/>#infosec #cybersecurity #pentest #redteam #kerberos 2025-10-23T12:16:52Z https://njump.me/nevent1qqsyrj6zhdf2ur9ph8g75r2p038fh27h62c7ppsgfwehlxmtvgmxmggzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzmpdxtn A specially crafted repository can lead to an arbitrary code execution in TruffleHog version 3.90.2🕵️‍♂️ <br/><br/><a href="https://talosintelligence.com/vulnerability_reports/TALOS-2025-2243">https://talosintelligence.com/vulnerability_reports/TALOS-2025-2243</a><br/><br/>#infosec #cybersecurity #pentest #redteam #git #opensource 2025-10-22T09:13:58Z https://njump.me/nevent1qqsd483hql7645mmgds8k2kdsxk28x2jmc9lr55tm2z4m385u34607qzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wz9kmk2p How attackers can exploit browser-cache-smuggling in combination with COM hijacking🕵️‍♂️<br/><br/><a href="https://medium.com/@danemeth90/revisiting-browser-cache-smuggling-1a8ab374d55e">https://medium.com/@danemeth90/revisiting-browser-cache-smuggling-1a8ab374d55e</a><br/><br/>#infosec #cybersecurity #pentest #redteam #phishing #windows 2025-10-21T12:31:28Z https://njump.me/nevent1qqsqhqa205zj78guewlvg6pcu2dyrrymz7jk6xsca6l0s8vda0kdmqqzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wz05kltj ClickForClickOnce - Generate configurable clickonce payloads🕵️‍♂️ <br/><br/><a href="https://github.com/whokilleddb/clickforclickonce">https://github.com/whokilleddb/clickforclickonce</a><br/><br/>#infosec #cybersecurity #pentest #redteam #opensource 2025-10-18T10:22:55Z https://njump.me/nevent1qqsz7mkt8f2j9qka783yynv3tsf7mweg4qfc5ang6yedvl2dm4mz8sczyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzm4r63e Protection against Model Serialization Attacks🕵️‍♂️ <br/><br/><a href="https://github.com/protectai/modelscan">https://github.com/protectai/modelscan</a><br/><br/>#infosec #cybersecurity #pentest #redteam #opensource #ai 2025-10-15T12:43:33Z https://njump.me/nevent1qqsxn8veqep4mxmz0zaq33rlknq4p4n5zw7znx4zgs6afhrajg3kv2czyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wz75x56n A Beacon Object File (BOF) for Active Directory enumeration through Active Directory Web Services (ADWS) compatible with BOFHound🕵️‍♂️ <br/><br/><a href="https://github.com/Nomad0x7/sekken-enum">https://github.com/Nomad0x7/sekken-enum</a><br/><br/>#infosec #cybersecurity #pentest #redteam #windows #opensource 2025-10-14T08:14:54Z https://njump.me/nevent1qqsgm98ajne8f2azmz73mww6c7xnh6wz9v2uzl89pjk0ky0pelr9cuqzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wz3tldmc A post about how Azure Relay Bridge (azbridge) can be abused by red teams to tunnel C2 traffic through Microsofts Azure Service Bus infrastructure🕵️‍♂️ <br/><br/><a href="https://hackerhermanos.com/azbridge">https://hackerhermanos.com/azbridge</a><br/><br/>#infosec #cybersecurity #pentest #redteam #cloud #micorosoft 2025-10-10T15:27:18Z https://njump.me/nevent1qqs9p0jaq7wh4myclgv200nnm8fr4qs3nek48dt9m2nrvnrcxagp23szyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzgvgxcr This is a tool that takes any link and makes it look malicious🕵️‍♂️<br/><br/><a href="https://phishyurl.com">https://phishyurl.com</a><br/><br/>#infosec #cybersecurity #phishing #url 2025-09-22T06:46:29Z https://njump.me/nevent1qqsygvavt4df6r7al7luwrmthkdlmuujrw4n4qgtxzg5t4hv59a6cnqzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzzqae3r WebClient is a common targeted service for NTLM relay attacks. This post covers if it is possible to start the service remotely as a low privileged user🕵️‍♂️<br/><br/><a href="https://specterops.io/blog/2025/08/19/will-webclient-start">https://specterops.io/blog/2025/08/19/will-webclient-start</a><br/><br/>#infosec #cybersecurity #pentest #redteam 2025-09-06T07:56:07Z https://njump.me/nevent1qqsy8u5hc5s9pf2m2k2purnl8se4u884k9qkxtf3r66ycwsfsz69uqczyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzsew2hw FindMeAccess is a tool useful for finding gaps in Azure/M365 MFA requirements for different resources, client ids, and user agents🕵️‍♂️<br/><br/><a href="https://github.com/absolomb/FindMeAccess">https://github.com/absolomb/FindMeAccess</a><br/><br/>#infosec #cybersecurity #pentest #redteam #azure #entra #cloud #opensource 2025-08-15T06:55:55Z https://njump.me/nevent1qqswqs9snxegazt46nz6qqm6ehr839vtgpywq9f8qkspv5yshgsmy4qzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzx2el78 A tool designed for smuggling interactive command and control traffic through legitimate TURN servers hosted by reputable providers such as Zoom🕵️‍♂️<br/><br/><a href="https://github.com/praetorian-inc/turnt">https://github.com/praetorian-inc/turnt</a><br/><br/>#infosec #cybersecurity #pentest #redteam #opensource 2025-08-11T12:42:18Z https://njump.me/nevent1qqstyrgvcwld5xptwymtwc9rycgmsr2savfqzqdcv7jtpex6zny6cdszyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wz6xe4ve New cheatsheets pushed🕵️‍♂️<br/><br/><a href="https://github.com/r1cksec/cheatsheets">https://github.com/r1cksec/cheatsheets</a><br/><br/>#infosec #cybersecurity #redteam #pentest #malware #phishing #osint #opensource 2025-08-09T09:12:03Z https://njump.me/nevent1qqsfet8rpw40s8xpyg9nynxt0smc6zqrl6gk5kv8e670tp04rk8jckqzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzqwphva Seamless remote browser session control demonstrating the impact of XSS without the need for stealing cookies (weaponized adaptation of the OpenReplay project)🕵️‍♂️<br/><br/><a href="https://github.com/EgeBalci/evilreplay">https://github.com/EgeBalci/evilreplay</a><br/><br/>#infosec #cybersecurity #pentest #redteam #xss 2025-07-23T06:43:40Z https://njump.me/nevent1qqs2w5evnvaukp3syr3xxz6zklns309gm0r95us0m8vemw2tyqqd7qqzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzky6t5g How Mouse Without Borders can be use lateral movement and data exfiltration🕵️‍♂️ <br/><br/><a href="https://0xsultan.github.io/dfir/Exfiltrate-Without-Borders">https://0xsultan.github.io/dfir/Exfiltrate-Without-Borders</a><br/><br/>#infosec #cybersecurity #pentest #redteam 2025-06-24T06:24:00Z https://njump.me/nevent1qqsqmxakh2eh5hg2xrqk3yj5cwhl29qyy3668pu4wztp4kg54z85q4qzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzj36ekl A walkthrough of various vulnerabilities in Sitecore&#39;s Experience Platform (CVE-2025-34509, CVE-2025-34510, CVE-2025-34511)🕵️‍♂️<br/><br/><a href="https://labs.watchtowr.com/is-b-for-backdoor-pre-auth-rce-chain-in-sitecore-experience-platform">https://labs.watchtowr.com/is-b-for-backdoor-pre-auth-rce-chain-in-sitecore-experience-platform</a><br/><br/>#infosec #cybersecurity #cve #redteam #pentest 2025-06-20T06:59:20Z https://njump.me/nevent1qqsfhvs6qexp4kppr3z6cjc4380rhlf6fh3dgzhfv9c2vlgr0jprh3szyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wz8qfmwd Device code phishing on GitHub accounts<br/><br/><a href="https://www.praetorian.com/blog/introducing-github-device-code-phishing">https://www.praetorian.com/blog/introducing-github-device-code-phishing</a><br/><br/>#infosec #cybersecurity #redteam #github #phishing 2025-06-16T06:25:41Z https://njump.me/nevent1qqsym0ehzxu2r48ln7n4my94ucpzh54ccrlzj3gquc0kvsze0xrfd9gzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzk6msx9 This post describes how COM hijacking enables attackers to persist by loading malicious code through trusted Windows applications like Chrome🕵️‍♂️<br/><br/><a href="https://specterops.io/blog/2025/05/28/revisiting-com-hijacking">https://specterops.io/blog/2025/05/28/revisiting-com-hijacking</a><br/><br/>#infosec #cybersecurity #pentest #redteam #windows 2025-06-10T06:57:58Z https://njump.me/nevent1qqsr4ydrh257c0fpg7vueymf38ve4h7eqyr9pzqeldqvse60cevyyeqzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzs82k6l OtterCookie is a stealer malware linked to North Korea’s Lazarus Group. It targets tech, finance, and crypto professionals through fake interviews and uses obfuscated JavaScript to steal credentials and wallets🕵️‍♂️<br/><br/><a href="https://any.run/cybersecurity-blog/ottercookie-malware-analysis">https://any.run/cybersecurity-blog/ottercookie-malware-analysis</a><br/><br/>#infosec #cybersecurity #malware #threatintel #threathunting 2025-06-10T06:54:01Z https://njump.me/nevent1qqsqn6w33zlhxaeyx5xr3sn5ddkqx2hr8ulncywdregptu4qa7rtddgzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wz4qnx89 A post about malware development essentials and myths🕵️‍♂️ <br/><br/><a href="https://blog.deeb.ch/posts/maldev-myths">https://blog.deeb.ch/posts/maldev-myths</a><br/><br/>#infosec #cybersecurity #pentest #redteam #malware 2025-06-09T10:27:38Z https://njump.me/nevent1qqsx6xpe6z4c5f0gjwuredhm72hte987y75apkgj0y47q48trapta9gzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzgcte0u A post about how to bypass Microsoft Defender for Identity (MDI) by adjusting ciphers in Certipy&#39;s PKINIT requests🕵️‍♂️ <br/><br/><a href="https://research.aurainfosec.io/pentest/modifying-certipy-to-evade-mdi-pkinit-detection/">https://research.aurainfosec.io/pentest/modifying-certipy-to-evade-mdi-pkinit-detection/</a><br/><br/>#infosec #cybersecurity #redteam #pentest 2025-05-29T08:35:50Z https://njump.me/nevent1qqspzjjrtksessf3g56hfmmthmzj2t6rsygfke02cnglnn7at7ll7nszyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzcf880l A PowerShell script to perform PKINIT authentication with the Windows API from a non domain-joined machine🕵️‍♂️ <br/><br/><a href="https://github.com/synacktiv/Invoke-RunAsWithCert">https://github.com/synacktiv/Invoke-RunAsWithCert</a><br/><br/>#infosec #cybersecurity #redteam #pentest #opensource 2025-05-26T07:48:31Z https://njump.me/nevent1qqs24hemjmtdpzaslvc776a39ksu7338pzy98hpqygc32w6pm4fv4fszyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzqy4ys9 A post that uncovers how scammers use fake job offers on Telegram to trick victims into sending cryptocurrency🕵️‍♂️ <br/><br/><a href="https://blogs.infoblox.com/threat-intelligence/telegram-tango-dancing-with-a-scammer">https://blogs.infoblox.com/threat-intelligence/telegram-tango-dancing-with-a-scammer</a><br/><br/>#infosec #cybersecurity #threatintel #scam #telegram 2025-05-16T09:18:44Z https://njump.me/nevent1qqsty2h3yy3ej58h9dn2cueygsl5zaddes4va4uxcgyr26lt8dvzx4szyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wznrgeen Loading a DLL into LSASS at boot, providing persistence🕵️‍♂️ <br/><br/><a href="https://github.com/Maldev-Academy/LsassHijackingViaReg">https://github.com/Maldev-Academy/LsassHijackingViaReg</a><br/><br/>#infosec #cybersecurity #pentest #redteam #windows #opensource 2025-05-14T07:09:07Z https://njump.me/nevent1qqsv2acfr3et6a9kd7vr8kwt5rs54sv6m70fufdsxy4sz0r9szmajkqzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzuz66lp List of API&#39;s for gathering information about phone numbers, addresses, domains etc 🕵️‍♂️<br/><br/><a href="https://github.com/cipher387/API-s-for-OSINT">https://github.com/cipher387/API-s-for-OSINT</a><br/><br/>#infosec #cybersecurity #osint #redteam #api 2025-05-13T07:38:54Z https://njump.me/nevent1qqs2zq24hf80y9whp8g7m2t0xkpdv9jjykfa4tjc00ydtz4jppm8tkqzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzsj4gx0 Offensive GPO dumping and analysis tool that leverages and enriches BloodHound data🕵️‍♂️ <br/><br/><a href="https://github.com/cogiceo/GPOHound">https://github.com/cogiceo/GPOHound</a><br/><br/>#infosec #cybersecurity #pentest #redteam #opensource 2025-05-10T09:39:44Z https://njump.me/nevent1qqs2dzr7ff9c200zp6es4xhp3v6uwxuk87knkh8q4yqyedahd5rf5jgzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzjgd89x C# port of the AMSI bypass technique originally developed and documented by Andrea Bocchetti🕵️‍♂️ <br/><br/><a href="https://github.com/heqnx/SharpAMSIGhosting">https://github.com/heqnx/SharpAMSIGhosting</a><br/><br/>#infosec #cybersecurity #pentest #redteam #powershell #windows #opensource 2025-05-08T07:12:34Z https://njump.me/nevent1qqsf7qdvflcsszzy7e9r7h4ddta06tzd0xp9jvhuymm26ec287nxljgzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzms539f A Chrome/Firefox browser extension to show alerts for reflected query params, show Wayback archive links for the current path, show hidden elements and enable disabled elements🕵️‍♂️ <br/><br/><a href="https://github.com/xnl-h4ck3r/XnlReveal">https://github.com/xnl-h4ck3r/XnlReveal</a><br/><br/>#infosec #cybersecurity #pentest #web #opensource #browser 2025-05-07T07:14:34Z https://njump.me/nevent1qqs9z4na598ptfc9de75llp7ja80eed44mhl73r97qdn5kdk9fkjflqzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzghx8l5 An post on how vulnerabilities were discovered and exploited in Neverwinter Nights to achieve remote code execution🕵️‍♂️<br/><br/><a href="https://www.synacktiv.com/en/publications/exploiting-neverwinter-nights">https://www.synacktiv.com/en/publications/exploiting-neverwinter-nights</a><br/><br/>#infosec #cybersecurity #pentest #exploit 2025-05-06T07:30:58Z https://njump.me/nevent1qqsdna3fg9vutsdfnzeltgng7snsude3dptfzuxyasf3hq48txyfk6gzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wz2r8afv A post about how the leak of an encryption key could lead to arbitrary code execution on the Typo3 CMS🕵️‍♂️ <br/><br/><a href="https://www.synacktiv.com/publications/typo3-leak-to-remote-code-execution">https://www.synacktiv.com/publications/typo3-leak-to-remote-code-execution</a><br/><br/>#infosec #cybersecurity #web #typo3 #cms #redteam #pentest 2025-05-05T06:55:41Z https://njump.me/nevent1qqsws2csndnxqzmhcxsrrpqqd6qslszv27nxpv7plu7hunjjz3lx0rszyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzdjy8nx SOCKS5 proxy tool that uses Azure Blob Storage as a means of communication🕵️‍♂️ <br/><br/><a href="https://github.com/quarkslab/proxyblob">https://github.com/quarkslab/proxyblob</a><br/><br/>#infosec #cybersecurity #azure #cloud #redteam #pentest #opensource 2025-05-04T14:31:25Z https://njump.me/nevent1qqs90cq5lq3ha9dec07n07yyhmatcmudqkq7qygu33jd28vttjc0jlqzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzygytnc Scopify is a Python command-line tool designed for penetration testers and bug bounty hunters to quickly gather and analyze infrastructure information (CDN, Hosting, SaaS) for a target company by scraping netify.ai🕵️‍♂️<br/><br/><a href="https://github.com/Arcanum-Sec/Scopify">https://github.com/Arcanum-Sec/Scopify</a><br/><br/>#infosec #cybersecurity #redteam #pentest #osint #opensource 2025-04-30T10:17:56Z https://njump.me/nevent1qqs0stp4xhlukaw5ne2f439clmpnewp3uk5uas322e0tlf0szquh6vqzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wz4yr7qz Windows remote execution multitool🕵️‍♂️ <br/><br/><a href="https://github.com/FalconOpsLLC/goexec">https://github.com/FalconOpsLLC/goexec</a><br/><br/>#infosec #cybersecurity #redteam #pentest #opensource #windows #golang 2025-04-30T08:13:13Z https://njump.me/nevent1qqs0aldg2dffnftvjzckh2a362naf89xe47uuujqvkgu594988htxkqzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzt2j6v5 A nice post that provides an overview about kerberos relaying🕵️‍♂️ <br/><br/><a href="https://decoder.cloud/2025/04/24/from-ntlm-relay-to-kerberos-relay-everything-you-need-to-know">https://decoder.cloud/2025/04/24/from-ntlm-relay-to-kerberos-relay-everything-you-need-to-know</a><br/><br/>#infosec #cybersecurity #pentest #redteam #kerberos #activedirectory #windows 2025-04-30T07:57:12Z https://njump.me/nevent1qqs0gp4ktzz243cwpgg74dlavhlrs6szvfsz4cvmngmcrf7jp3futaszyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzeznrf8 Map visualization and firewall for AWS activity, inspired by Little Snitch for macOS🕵️‍♂️<br/><br/><a href="https://github.com/ccbrown/cloud-snitch">https://github.com/ccbrown/cloud-snitch</a><br/><br/>#infosec #cybersecurity #aws #cloud #dfir #opensource 2025-04-29T08:51:36Z https://njump.me/nevent1qqsz53lehwaku30fhf066fv9apy33fwx8gxtakn0qwg9xderdgslhtgzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wz5r26xh b3acon - a mail-based C2 that communicates via an in-memory C# IMAP client dynamically compiled in memory using PowerShell🕵️‍♂️ <br/><br/><a href="https://github.com/b3rito/b3acon">https://github.com/b3rito/b3acon</a><br/><br/>#infosec #cybersecurity #redteam #pentest #opensource #mail #c2 2025-04-22T11:36:34Z https://njump.me/nevent1qqswz8smje7zckfglv3j5eegxkpzzp9825kndftsvw6gegqnf75nh2czyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzhtptcm Just another C2 Redirector using CloudFlare. Support multiple C2 and multiple domains. Support for websocket listener🕵️‍♂️ <br/><br/><a href="https://github.com/som3canadian/Cloudflare-Redirector">https://github.com/som3canadian/Cloudflare-Redirector</a><br/><br/>#infosec #cybersecurity #redteam #pentest #c2 #opensource #cloudflare 2025-04-16T11:13:38Z https://njump.me/nevent1qqsd8hfdzkl35t5vf5p5slrjyk3nqvlj3t5mle9pfnejfmwy4vx3gxszyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzcqwyjz A technical overview on phishing infrastructure and considerations for Red Teaming🕵️‍♂️ <br/><br/><a href="https://xbz0n.sh/blog/social-engineering-redteam">https://xbz0n.sh/blog/social-engineering-redteam</a><br/><br/>#infosec #cybersecurity #redteam #phishing #osint 2025-04-11T09:38:22Z https://njump.me/nevent1qqsxntdp2fzv39japslnulccxf8pfew7mepypkyrjumrstwlr8gpmwszyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzq2hwm9 This script analyzes the DCSync output file from several tools (such as Mimikatz, Secretsdump and SharpKatz...) 🕵️‍♂️ <br/><br/><a href="https://github.com/mordavid/dcsynchound">https://github.com/mordavid/dcsynchound</a><br/><br/>#infosec #cybersecurity #pentest #redteam #opensource 2025-04-10T06:47:12Z https://njump.me/nevent1qqsg5zzg8rrpy9csegyd2g3g45pxh76alhf98x9ttetvmnx3d3pnpvqzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wz9jc2zh A Browser-based XSS C2 for stealthy internal network exploration via infected browser🕵️‍♂️<br/><br/><a href="https://github.com/b3rito/peeko">https://github.com/b3rito/peeko</a><br/><br/>#infosec #cybersecurity #opensource #redteam #pentest 2025-04-08T11:47:34Z https://njump.me/nevent1qqsfu6uqpanltunmewrd9e3xl300gw50czqlvjy63c93cmal2zax7uszyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzzsx2t7 ActiveSyncBruter is a penetration testing tool designed to enumerate and brute-force credentials against Microsoft Exchange ActiveSync endpoints🕵️‍♂️ <br/><br/><a href="https://github.com/0xB455/ActiveSyncBruter">https://github.com/0xB455/ActiveSyncBruter</a><br/><br/>#infosec #cybersecurity #pentest #redteam #opensource 2025-04-07T07:12:53Z https://njump.me/nevent1qqsg5sugf3s5kss4gwzkjw2dnsj03f5zm2h4pyyqr2yhfwsralvpvnqzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wz39vjey Run any Linux process in a secure, unprivileged sandbox using Landlock. Think firejail, but lightweight, user-friendly, and baked into the kernel🕵️‍♂️ <br/><br/><a href="https://github.com/Zouuup/landrun">https://github.com/Zouuup/landrun</a><br/><br/>#infosec #cybersecurity #linux #malware #sandbox #opensource 2025-04-05T13:54:41Z https://njump.me/nevent1qqs2skpr2f8rmwsae7mn087ell6429ezqdd8klt5wnqdzf30et972gszyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzedfkmv How to kerberoast without having to send a TGS-REQ🕵️‍♂️<br/><br/><a href="https://rastamouse.me/kerberoasting-without-tgs-reqs/">https://rastamouse.me/kerberoasting-without-tgs-reqs/</a><br/><br/>#infosec #cybersecurity #redteam #pentest #windows 2025-04-02T06:23:43Z https://njump.me/nevent1qqsvvn074gphlgtd5uus6kpszq0f7gctpzr6h7qyu2tz7j5u055hf4qzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzua67ys A showcase of a payload development process for initial access phishing🕵️‍♂️ <br/><br/><a href="https://lorenzomeacci.com/advanced-initial-access-techniques">https://lorenzomeacci.com/advanced-initial-access-techniques</a><br/><br/>#infosec #cybersecurity #redteam #phishing #pentest 2025-04-01T07:43:45Z https://njump.me/nevent1qqsqq4th426r7pkn6apm0kzkvwq7m4rrccclrchfsxan4qkcvdhkfrgzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzg02kfh New cheatsheets pushed🕵️‍♂️ <br/><br/><a href="https://github.com/r1cksec/cheatsheets">https://github.com/r1cksec/cheatsheets</a><br/><br/>#infosec #cybersecurity #osint #pentest #redteam #threatintel #opensource 2025-03-29T10:13:32Z https://njump.me/nevent1qqsw8mfx0ryzj3xprs08xdsqtj7gxmefqdrt97khr67ngzzrdqsmqxczyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzpypr6g A proof-of-concept fileless DCOM Lateral Movement technique using trapped COM objects🕵️‍♂️ <br/><br/><a href="https://github.com/xforcered/ForsHops">https://github.com/xforcered/ForsHops</a><br/><br/>#infosec #cybersecurity #redteam #pentest 2025-03-27T11:16:25Z https://njump.me/nevent1qqst3zkr7umryd0r4346s4c4fejd8vc58hfsr3em887all2mhhtcmuqzyq9c9cl02d0lv39kk3qj2fxmpp7j0t0k7vx7knzncj79papaps8wzy6v64k A writeup about extracting YouTube creator Emails🕵️‍♂️ <br/><br/><a href="https://brutecat.com/articles/youtube-creator-emails">https://brutecat.com/articles/youtube-creator-emails</a><br/><br/>#infosec #cybersecurity #osint #bugbounty 2025-03-25T07:20:20Z