df_sec - Network

Ransomware Tool Matrix: This repository lists tools used by ransomware gangs. Defenders can detect and block these commonly reused tools to...

Ransomware Tool Matrix: This repository lists tools used by ransomware gangs. Defenders can detect and block these commonly reused tools to stop intrusions.

https://github.com/BushidoUK/Ransomware-Tool-Matrix

#infosec #blueteam

State-of-the-art phishing: MFA bypass by Jaeson Schultz...

State-of-the-art phishing: MFA bypass by Jaeson Schultz @TalosSecurity

https://blog.talosintelligence.com/state-of-the-art-phishing-mfa-bypass/

#infosec #blueteam

ArgFuscator is an open-source web app that generates obfuscated command lines for common system tools. Great for testing your defenses...

ArgFuscator is an open-source web app that generates obfuscated command lines for common system tools. Great for testing your defenses against real-world attack techniques.

https://argfuscator.net

#infosec #pentesting #redteam #blueteam

How well do you protect your privacy?The Privacy Checkup helps you assess your online surveillance defenses and take steps to protect your...

How well do you protect your privacy?
The Privacy Checkup helps you assess your online surveillance defenses and take steps to protect your data.

https://privacy-checkup.info (English, Deutsch, Español)

#privacy #infosec

A great read on the exploitation of VMware vulnerabilities - from both attacker and defender perspectives - plus practical recommendations...

A great read on the exploitation of VMware vulnerabilities - from both attacker and defender perspectives - plus practical recommendations to strengthen your security posture.

"Breaking the Virtual Barrier: From Web-Shell to Ransomware"

https://www.sygnia.co/threat-reports-and-advisories/breaking-the-virtual-barrier-web-shell-to-ransomware/

#infosec #blueteam

Eine kriminelle Organisation hinter mehr als 75.000 Fake-Shops, über 1 Mio. Bestellungen & mehr als $50M Schaden. Einblick in ihr...

Eine kriminelle Organisation hinter mehr als 75.000 Fake-Shops, über 1 Mio. Bestellungen & mehr als $50M Schaden. Einblick in ihr ausgeklügeltes System & wie sie Käufer täuschen.

#38C3: "Fake-Shops von der Stange: BogusBazaar" mit @kaibiermann und @kantorkel.
https://media.ccc.de/v/38c3-fake-shops-von-der-stange-bogusbazaar

#infosec

"Mastering Sysmon: Deploying, Configuring, and Fine-Tuning"A free mini eBook for #DFIR professionals with practical steps to...

"Mastering Sysmon: Deploying, Configuring, and Fine-Tuning"
A free mini eBook for #DFIR professionals with practical steps to deploy, fine-tune, and start logging with Sysmon.

https://dfirinsights.com/2024/11/27/mastering-sysmon-e-book-release/

#infosec #blueteam

Carseat is a Python implementation of GhostPack's Seatbelt, a situational awareness tool for analyzing Windows security...

Carseat is a Python implementation of GhostPack's Seatbelt, a situational awareness tool for analyzing Windows security configurations.

https://github.com/0xthirteen/Carseat

#infosec #pentesting #redteam

The fascinating security model of dark web marketplaces by @eb https://boehs.org/node/dark-web-security#infosec

The fascinating security model of dark web marketplaces by @eb

https://boehs.org/node/dark-web-security

#infosec

That's a Cybersecurity Advisory worth reading, with many important points to note.Enhancing Cyber Resilience: Insights from CISA Red...

That's a Cybersecurity Advisory worth reading, with many important points to note.

Enhancing Cyber Resilience: Insights from CISA Red Team Assessment of a US Critical Infrastructure Sector Organization
https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-326a

#infosec #blueteam

LOLESXi features a comprehensive list of binaries/scripts natively available in VMware ESXi that adversaries have utilised in their...

LOLESXi features a comprehensive list of binaries/scripts natively available in VMware ESXi that adversaries have utilised in their operations.

https://lolesxi-project.github.io/LOLESXi/#

#infosec #pentesting #redteam #blueteam

Phishing remains one of the most widespread cyberattacks - here are some tips on how to avoid falling victim!5 Phishing Email Scams and How...

Phishing remains one of the most widespread cyberattacks - here are some tips on how to avoid falling victim!

5 Phishing Email Scams and How NOT To Fall For Them
https://www.huntress.com/blog/5-phishing-email-scams-and-how-not-to-fall-for-them

#infosec

🚨 Exciting news for all hackers and tech enthusiasts! The #DEFCON32 talks are now available on YouTube!...

🚨 Exciting news for all hackers and tech enthusiasts! The #DEFCON32 talks are now available on YouTube! 🎉

https://youtube.com/playlist?list=PL9fPq3eQfaaB2scbXRczwvjVH0ckX4bwt

#infosec #pentesting #redteam #blueteam

A tool that uses the Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events...

A tool that uses the Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server.

https://github.com/netero1010/EDRSilencer

#infosec #pentesting #redteam

Spannend & unterhaltsam: Die #BigBrotherAwards prämieren jedes Jahr die größten Datensünder in Wirtschaft &...

Spannend & unterhaltsam: Die #BigBrotherAwards prämieren jedes Jahr die größten Datensünder in Wirtschaft & Politik!

BigBrotherAwards 2024: Preisträger, Bilder und Livestream unter https://bigbrotherawards.de/2024

Also available in English: https://bigbrotherawards.de/en/2024

#infosec #BBA24

Guidance on Detecting and Mitigating Active Directory...

Guidance on Detecting and Mitigating Active Directory Compromises

https://www.cisa.gov/news-events/alerts/2024/09/26/asds-acsc-cisa-and-us-and-international-partners-release-guidance-detecting-and-mitigating-active

#infosec #blueteam

Event Log Talks a Lot: Identifying Human-operated Ransomware through Windows Event...

Event Log Talks a Lot: Identifying Human-operated Ransomware through Windows Event Logs

https://blogs.jpcert.or.jp/en/2024/09/windows.html

#infosec #blueteam

Active Directory Hardening Series - Part 5 - Enforcing LDAP Channel...

Active Directory Hardening Series - Part 5 - Enforcing LDAP Channel Binding

https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/active-directory-hardening-series-part-5-enforcing-ldap-channel/ba-p/4235497

#infosec #blueteam

SharpExclusionFinder: This C# tool finds Windows Defender folder exclusions using Windows Defender through its command-line tool...

SharpExclusionFinder: This C# tool finds Windows Defender folder exclusions using Windows Defender through its command-line tool (MpCmdRun.exe)

https://github.com/Friends-Security/SharpExclusionFinder

A blog explaining the technique utilised can be viewed here: https://blog.fndsec.net/2024/10/04/uncovering-exclusion-paths-in-microsoft-defender-a-security-research-insight

#infosec #pentesting #redteam

ConPass: How to do password spraying while minimizing the risk of locking accounts.Spray passwords, avoid...

ConPass: How to do password spraying while minimizing the risk of locking accounts.

Spray passwords, avoid lockouts
https://en.hackndo.com/password-spraying-lockout/

#infosec #pentesting #redteam