Malicious code in artifact-lab-3-package-e46d5661 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2269a33b8aa9a49d54f1cfc01613f285eb3014d0d6adb0ff0ff00fee4e7615d4 Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

Malicious code in artifact-lab-3-package-b9485a2f (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 902094a9d90c1b9cc5eca3aa3d809929f664931dfa9feaea432bf85d205b06ed Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

MAL-2024-12192 Malicious code in artifact-lab-3-package (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0c18a16c7c21d93a8819aed298f6691835b1a31546ca573eb94ce4265d4fb291 Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

Cervantes 安全漏洞

Cervantes is an open source collaboration platform designed for Pentester and Red Teams by Cervantes Open Source. A security vulnerability exists in Cervantes 0.5-alpha and earlier versions that stems from accepting insecure file uploads...

CISA Releases Advisory Detailing Red Team Activity During Assessment of US FCEB Organization, Highlighting Necessity of Defense-in-Depth

Today, CISA released CISA Red Team’s Operations Against a Federal Civilian Executive Branch Organization Highlights the Necessity of Defense-in-Depth in coordination with the assessed organization. This Cybersecurity Advisory CSA details key findings and lessons learned from a 2023 assessment,...

CISA Red Team’s Operations Against a Federal Civilian Executive Branch Organization Highlights the Necessity of Defense-in-Depth

EXECUTIVE SUMMARY In early 2023, the Cybersecurity and Infrastructure Security Agency CISA conducted a SILENTSHIELD red team assessment against a Federal Civilian Executive Branch FCEB organization. During SILENTSHIELD assessments, the red team first performs a no-notice, long-term simulation of...

CVE-2024-27292

creationtimestamp| type| source ---|---|--- 2024-07-01 11:07:29+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/8887 2024-07-06 17:27:40+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10791 2024-07-09 10:22:28+00:00| published-proof-of-concept|...

CVE-2024-21514

creationtimestamp| type| source ---|---|--- 2024-06-23 03:13:00+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7745 2024-06-25 01:53:58+00:00| published-proof-of-concept| Telegram/1R4TDqFZ4Kk2cvU-Q0KFcUmFIIGZm1AR7rtDO8Lr1H9Bg...

CVE-2024-36416

creationtimestamp| type| source ---|---|--- 2024-06-12 06:33:48+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7618...

Exploit for Improper Initialization in Linux Linux_Kernel

!Dirty Pipehttps://miro.medium.com/v2/resize:fit:1400/1G1ov2...

EvilSlackbot - A Slack Bot Phishing Framework For Red Teaming Exercises

EvilSlackbot A Slack Attack Framework for conducting Red Team and phishing exercises within Slack workspaces. Disclaimer This tool is intended for Security Professionals only. Do not use this tool against any Slack workspace without explicit permission to test. Use at your own risk. Background...

CVE-2024-34220

creationtimestamp| type| source ---|---|--- 2024-05-11 07:42:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7271...

CVE-2024-26517

creationtimestamp| type| source ---|---|--- 2024-05-08 20:34:28+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7251...

Bypassing MFA on Microsoft Azure Entra ID

TL;DR Even though MFA is effective it is one security control amongst many Even if MFA is in use, check its configuration Consider unexpected patterns of use, such as people logging in from Linux or macOS Make sure you log and can react to out-of-band behaviour Introduction On a recent Red Team...

Network Threats: A Step-by-Step Attack Demonstration

Follow this real-life network attack simulation, covering 6 steps from Initial Access to Data Exfiltration. See how attackers remain undetected with the simplest tools and why you need multiple choke points in your defense strategy. Surprisingly, most network attacks are not exceptionally...

CVE-2024-31233

creationtimestamp| type| source ---|---|--- 2024-04-13 05:31:40+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7035...

CVE-2024-29278

creationtimestamp| type| source ---|---|--- 2024-04-11 12:08:59+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6877...

How Red Team Exercises Increases Your Cyber Health

Delve into the world of red team exercises, their vital role in enhancing organizational security through simulated cyberattacks, including tactics like phishing and lateral movement within networks, and understand the need for regular testing and improvement to counter evolving threats effective...

CVE-2024-27476

creationtimestamp| type| source ---|---|--- 2024-04-05 03:02:42+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6945...

CVE-2024-2865

creationtimestamp| type| source ---|---|--- 2024-03-26 09:32:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6857 2024-03-26 09:32:09+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6858...