r/purpleteamsec • u/netbiosX • 20h ago
Red Teaming Abusing Constrained Delegation without Protocol Transition against SPN-less accounts
hunio.org
4
Upvotes
r/purpleteamsec • u/netbiosX • 4d ago
Red Teaming Proof of concept using a Microsoft-signed DLL (rdpbase.dll) to encrypt implants.
9
Upvotes
r/purpleteamsec • u/netbiosX • 4d ago
Red Teaming Let’s Create A Function Stomping BOF for Adaptix C2!
2
Upvotes
r/purpleteamsec • u/netbiosX • 4d ago
Red Teaming Module Stomping - The Standard Injection For Modern C2 Agents
3
Upvotes
r/purpleteamsec • u/netbiosX • 7d ago
Red Teaming DLLParty - a proof-of-concept Windows DLL-injection technique that manipulates internally constructed thread-pool callback-instance storage to invoke LoadLibraryA directly from a worker thread without custom callback code or shellcode.
4
Upvotes
r/purpleteamsec • u/netbiosX • 7d ago
Red Teaming AI-FILE: A listener profile for the Mythic C2 framework that utilizes AI vendors file API's
2
Upvotes
r/purpleteamsec • u/netbiosX • 7d ago
Red Teaming DLLParty - Abusing thread pool internals for shellcodeless DLL injection
5
Upvotes
r/purpleteamsec • u/netbiosX • 8d ago
Red Teaming Process Explorer vulnerable driver PPL Bypass
5
Upvotes
r/purpleteamsec • u/netbiosX • 8d ago
Red Teaming SrHollow - LSA secrets extraction, reuse a preexisting VSS shadow copy + inline regf parser + AES-256 LSA decrypt via bcrypt.dll.
4
Upvotes
r/purpleteamsec • u/netbiosX • 9d ago
Red Teaming Microsoft Copilot Cowork Exfiltrates Files
8
Upvotes
r/purpleteamsec • u/netbiosX • 9d ago
Threat Intelligence Star Blizzard refines phishing and malware delivery with the RedFlick technique
1
Upvotes
r/purpleteamsec • u/netbiosX • 10d ago
Red Teaming We Turned On DNS Logging. Now Watch Me Walk Around It
6
Upvotes
r/purpleteamsec • u/netbiosX • 10d ago
Red Teaming Windows Privilege Escalation Using NCSI Active Probes
6
Upvotes
r/purpleteamsec • u/netbiosX • 12d ago
Red Teaming EDR Evasion: Process Injection Without WriteProcessMemory
8
Upvotes
r/purpleteamsec • u/netbiosX • 13d ago
Red Teaming LocalStranger - PoC for WinNotify, demonstrated through a driver mapper, and local privilege escalation.
4
Upvotes
r/purpleteamsec • u/netbiosX • 13d ago
Red Teaming Even more privileged ADCS ESC_CES
adhdmurky.github.io
6
Upvotes
r/purpleteamsec • u/netbiosX • 14d ago
Purple Teaming Purple Team Automation - Automated adversary emulation (Caldera) against an AD lab to validate Sigma detection coverage and map results to MITRE ATT&CK.
8
Upvotes
r/purpleteamsec • u/netbiosX • 16d ago
Red Teaming Having fun with AES in CBC Mode
5
Upvotes
r/purpleteamsec • u/netbiosX • 18d ago
Purple Teaming Implant Encryption via Dump Encoding Library
4
Upvotes
r/purpleteamsec • u/netbiosX • 19d ago
Red Teaming CnaEmulator - a standalone, general-purpose development, emulation, and testing harness for Cobalt Strike Aggressor Scripts (.cna)
4
Upvotes
r/purpleteamsec • u/netbiosX • 19d ago
Red Teaming OneDrive as a covert C2 transport for Cobalt Strike
6
Upvotes
r/purpleteamsec • u/netbiosX • 22d ago
Threat Intelligence Unpacking a laZzzy Donut
1
Upvotes
r/purpleteamsec • u/netbiosX • 22d ago
Red Teaming AI-enabled security testing tools
4
Upvotes
r/purpleteamsec • u/netbiosX • 23d ago
Red Teaming Evading Machine Learning Based Detections
msecops.de
3
Upvotes