▲ 7 r/purpleteamsec
Sentinel: Userland EDR for Windows. ETW telemetry, behavioral correlation, MITRE ATT&CK
github.comu/netbiosX — 4 days ago
u/netbiosX
r/vibehacking r/netsec r/purpleteamsec r/hackerworkspace r/netsecstudents r/blueteamsec r/redteamsec r/pwnhub r/cybersecurity
▲ 2 r/purpleteamsec
AI-FILE: A listener profile for the Mythic C2 framework that utilizes AI vendors file API's
github.comu/netbiosX — 13 days ago
▲ 4 r/purpleteamsec
DLLParty - Abusing thread pool internals for shellcodeless DLL injection
medium.comu/netbiosX — 13 days ago
▲ 7 r/purpleteamsec
Microsoft Copilot Cowork Exfiltrates Files
promptarmor.comu/netbiosX — 16 days ago
▲ 6 r/purpleteamsec
We Turned On DNS Logging. Now Watch Me Walk Around It
redhand.iou/netbiosX — 17 days ago
▲ 7 r/purpleteamsec
Windows Privilege Escalation Using NCSI Active Probes
labs.itresit.esu/netbiosX — 17 days ago
▲ 5 r/redteamsec
Implant Encryption via the Dump Encoding Library
ipurple.teamu/netbiosX — 24 days ago
▲ 2 r/purpleteamsec
CnaEmulator - a standalone, general-purpose development, emulation, and testing harness for Cobalt Strike Aggressor Scripts (.cna)
github.comu/netbiosX — 25 days ago
▲ 4 r/purpleteamsec
OneDrive as a covert C2 transport for Cobalt Strike
github.comu/netbiosX — 26 days ago
▲ 1 r/purpleteamsec
Introducing FalconDash, your tuning companion
falconforce.nlu/netbiosX — 1 month ago
▲ 2 r/purpleteamsec
Cross-platform syscall-powered implant & C2 - direct syscalls (Win), raw syscalls (Linux), HTTPS/DNS/ICMP channels. No winapi layer.
github.comu/netbiosX — 1 month ago
▲ 3 r/purpleteamsec
AD Rights Management Service (Part 2): Extraction, Offline Decryption, and the Unrotatable Key
huntress.comu/netbiosX — 1 month ago
▲ 6 r/purpleteamsec
BOF, Crystal Palace Linker and The JellyBee KORE Compiler: The new era of implants modularity
kdrajkit.github.iou/netbiosX — 1 month ago
▲ 4 r/purpleteamsec
Simulating legitimate Active Directory services on the network: the the case of GPO exploitation
synacktiv.comu/netbiosX — 2 months ago