BOF to perform stealthy LDAP queries over AD WS

https://github.com/mandiant/cleanldap

#infosec #cybersecurity #redteam #pentest #opensource

CustomDpapi: Calling the undocumented DPAPI RPC interface directly, no more calling public CryptUnprotectData! https://github.com/EvilBytecode/CustomDpapi #redteam

New cheatsheets pushed

https://github.com/r1cksec/cheatsheets

#infosec #cybersecurity #redteam #pentest #threatintel #bugbounty #malware #opensource

Secure your cloud now → https://cyberdudebivash.gumroad.com/l/hobkwf

DM or email: iambivash@cyberdudebivash.com

Read the full report & grab the tool now - https://cyberdudebivash-news.blogspot.com/2026/02/introducing-cyberdudebivash-cloud.html

#CloudSecurity #CSPM #Cybersecurity #CloudMisconfiguration #DevSecOps #AWS #Azure #GCP #CloudComputing #SecurityAutomation #PenetrationTesting #RedTeam #CyberSecIndia #CyberDudeBivash

CYBERDUDEBIVASH® – Beast Mode Activated

From spoofing to tunnelling: New Red Team networking techniques for initial access and evasion

https://blog.apnic.net/2026/01/16/from-spoofing-to-tunnelling-new-red-team-networking-techniques-for-initial-access-and-evasion/

#infosec #redteam

🏋️ 𝗡𝗼𝗿𝘁𝗵𝗦𝗲𝗰 𝟮𝟬𝟮𝟲 𝗙𝗼𝗿𝗺𝗮𝘁𝗶𝗼𝗻𝘀/𝗧𝗿𝗮𝗶𝗻𝗶𝗻𝗴𝘀 (𝟭/𝟭𝟮) : "Red Team Training" 𝗽𝗮𝗿/𝗯𝘆 Charles F. Hamilton from CYPFER

📅 Dates: May 12 and 13 2025 (2 days)
🎯 Level: Medium

Description: "𝘛𝘩𝘦 𝘵𝘳𝘢𝘪𝘯𝘪𝘯𝘨 𝘪𝘴 𝘥𝘪𝘷𝘪𝘥𝘦𝘥 𝘪𝘯𝘵𝘰 𝘧𝘪𝘷𝘦 𝘴𝘦𝘤𝘵𝘪𝘰𝘯𝘴: 𝘐𝘯𝘪𝘵𝘪𝘢𝘭 𝘍𝘰𝘰𝘵𝘩𝘰𝘭𝘥, 𝘎𝘢𝘪𝘯𝘪𝘯𝘨 𝘈𝘤𝘤𝘦𝘴𝘴, 𝘖𝘧𝘧𝘦𝘯𝘴𝘪𝘷𝘦 𝘊𝘰𝘥𝘪𝘯𝘨, 𝘐𝘯𝘵𝘦𝘳𝘯𝘢𝘭 𝘙𝘦𝘤𝘰𝘯𝘯𝘢𝘪𝘴𝘴𝘢𝘯𝘤𝘦, 𝘢𝘯𝘥 𝘓𝘢𝘵𝘦𝘳𝘢𝘭 𝘔𝘰𝘷𝘦𝘮𝘦𝘯𝘵. 𝘌𝘢𝘤𝘩 𝘴𝘦𝘤𝘵𝘪𝘰𝘯 𝘸𝘪𝘭𝘭 𝘣𝘦 𝘤𝘰𝘷𝘦𝘳𝘦𝘥 𝘪𝘯 𝘥𝘦𝘱𝘵𝘩, 𝘱𝘳𝘰𝘷𝘪𝘥𝘪𝘯𝘨 𝘵𝘦𝘤𝘩𝘯𝘪𝘤𝘢𝘭 𝘦𝘷𝘪𝘥𝘦𝘯𝘤𝘦 𝘰𝘧 𝘩𝘰𝘸 𝘦𝘢𝘤𝘩 𝘵𝘦𝘤𝘩𝘯𝘪𝘲𝘶𝘦 𝘸𝘰𝘳𝘬𝘴 𝘣𝘦𝘩𝘪𝘯𝘥 𝘵𝘩𝘦 𝘴𝘤𝘦𝘯𝘦𝘴. 𝘙𝘦𝘥 𝘵𝘦𝘢𝘮 𝘦𝘹𝘦𝘳𝘤𝘪𝘴𝘦𝘴 𝘸𝘪𝘭𝘭 𝘣𝘦 𝘱𝘦𝘳𝘧𝘰𝘳𝘮𝘦𝘥 𝘵𝘰 𝘢𝘴𝘴𝘦𝘴𝘴 𝘳𝘦𝘴𝘱𝘰𝘯𝘴𝘪𝘷𝘦𝘯𝘦𝘴𝘴 𝘢𝘯𝘥 𝘥𝘦𝘵𝘦𝘤𝘵𝘪𝘰𝘯 𝘤𝘢𝘱𝘢𝘣𝘪𝘭𝘪𝘵𝘪𝘦𝘴. 𝘈𝘴 𝘢 𝘳𝘦𝘥 𝘵𝘦𝘢𝘮𝘦𝘳, 𝘪𝘵 𝘪𝘴 𝘪𝘮𝘱𝘰𝘳𝘵𝘢𝘯𝘵 𝘵𝘰 𝘶𝘯𝘥𝘦𝘳𝘴𝘵𝘢𝘯𝘥 𝘸𝘩𝘢𝘵 𝘦𝘢𝘤𝘩 𝘵𝘰𝘰𝘭 𝘢𝘯𝘥 𝘤𝘰𝘮𝘮𝘢𝘯𝘥 𝘺𝘰𝘶 𝘶𝘴𝘦 𝘪𝘴 𝘥𝘰𝘪𝘯𝘨 𝘣𝘦𝘩𝘪𝘯𝘥 𝘵𝘩𝘦 𝘴𝘤𝘦𝘯𝘦𝘴 𝘵𝘰 𝘱𝘳𝘰𝘷𝘪𝘥𝘦 𝘱𝘳𝘰𝘱𝘦𝘳 𝘨𝘶𝘪𝘥𝘢𝘯𝘤𝘦. 𝘌𝘹𝘱𝘦𝘤𝘵 𝘵𝘰 𝘱𝘦𝘳𝘧𝘰𝘳𝘮 𝘤𝘰𝘥𝘦 𝘳𝘦𝘷𝘪𝘦𝘸𝘴, 𝘯𝘦𝘵𝘸𝘰𝘳𝘬 𝘢𝘯𝘢𝘭𝘺𝘴𝘪𝘴, 𝘤𝘰𝘥𝘦 𝘣𝘦𝘩𝘢𝘷𝘪𝘰𝘳 𝘢𝘯𝘢𝘭𝘺𝘴𝘪𝘴, 𝘢𝘯𝘥 𝘸𝘳𝘪𝘵𝘦 𝘤𝘰𝘥𝘦 𝘵𝘰 𝘦𝘯𝘩𝘢𝘯𝘤𝘦 𝘺𝘰𝘶𝘳 𝘳𝘦𝘥 𝘵𝘦𝘢𝘮 𝘤𝘢𝘱𝘢𝘣𝘪𝘭𝘪𝘵𝘪𝘦𝘴."

About the trainer:
Charles F. Hamilton (Mr.Un1k0d3r) - Red Teamer with 10+ years experience delivering offensive testing services. Founder of RingZer0 Team website with 50,000+ members worldwide teaching hacking fundamentals. Prolific toolsmith and trainer who has delivered this training 20+ times. Specializes in covert Red Team operations in highly secured environments.

🔗 Get your ticket now to benefit from this world-class training: https://nsec.io/training-sessions/

#NorthSec #cybersecurity #infosec #redteam #activedirectory #EDR

An open-source port/reimplementation of the Cobalt Strike BOF Loader https://github.com/CodeXTF2/Cobaltstrike_BOFLoader #redteam

An interesting Clickfix attack vector

https://expel.com/blog/clearfake-new-lotl-techniques

The Lolbas technique has been known for some time

https://lolbas-project.github.io/lolbas/Scripts/Syncappvpublishingserver/

#infosec #cybersecurity #redteam #phishing #microsoft

Indirect Syscall with Acheron in Golang (Bypass Windows Defender on Windows 11)

https://www.youtube.com/watch?v=-SXX0-LdSFI

#cybersecurity #exploit #redteam

@BrideOfLinux THIS is why one has explicit comms prepared to get released immediately.

#RedTeam #RedTeaming #Pentesting #PhysicalSecurity #Itsec #InfoSec #OpSec #ComSec

Just stumbled upon Phishing Club, looks like a decent successor to Gophish!
https://github.com/phishingclub/phishingclub
#phishing #redteam

GC2 is a Command and Control application that allows an attacker to execute commands on the target machine using Google Sheet or Microsoft SharePoint List and exfiltrate files using Google Drive or Microsoft SharePoint Document.

https://github.com/looCiprian/GC2-sheet

#infosec #cybersecurity #redteam #pentest #threatintel #dfir

TaskHound hunts privileged Windows scheduled tasks and exports them for BloodHound attack path analysis.

https://github.com/1r0BIT/TaskHound

#infosec #pentesting #redteam

🚨 TREVORspray 2.4 drops w/ TENANT ENUM!
Big thanks to Sprocket Security for uncovering the secret API — details: https://sprocketsecurity.com/blog/tenant-enumeration-is-back
Update to the latest version with pipx upgrade trevorspray
Spray smarter, not harder. #RedTeam #InfoSec

This project maintains a list of binaries natively available in Proxmox VE that can be leveraged by adversaries during red team operations

https://lolprox.yxz.red

#infosec #cybersecurity #redteam #pentest

Corrupting the Hive Mind: Persistence Through Forgotten Windows Internals

https://www.praetorian.com/blog/corrupting-the-hive-mind-persistence-through-forgotten-windows-internals/

#cybersecurity #exploit #redteam

#CyberSecurity #InfoSec

Before Vegas: The “Red Hackers” Who Shaped China’s Cyber Ecosystem:

https://ethz.ch/content/dam/ethz/special-interest/gess/cis/center-for-securities-studies/pdfs/before-vegas-cyberdefense-report.pdf

#cybersecurity #redteam #informationsecurity #threathunting #exploitation #infosec