taser

Taser TASER Testing and Security Resource는 공격 보안 도구 제작 과정을 간소화하기 위해 사용되는 추상화 라이브러리입니다. 다양한 프로토콜과 클래스를 통해 모의 침투 중 커스텀 도구 개발을 효율적으로 진행할 수 있습니다. examples 디렉토리에는 사용법을 보여주는 여러 스크립트와 침투 테스터, 레드팀, 버그 바운티 헌터에게 유용한 도구가 포함되어 있습니다! ⚠ 경고: Taser는 작업 중인 라이브러리이며, 호환성을 깨는 변경 사항이 발생할 수 있습니다. 설치 옵션 1: 개발 버전 최신 코드 ...

VDT

Vulnerability Discovery Training VDT Training data for adva...

Mysterious Elephant: a growing threat

Introduction Mysterious Elephant is a highly active advanced persistent threat APT group that we at Kaspersky GReAT discovered in 2023. It has been consistently evolving and adapting its tactics, techniques, and procedures TTPs to stay under the radar. With a primary focus on targeting government...

Highlighting TA866/Asylum Ambuscade Activity Since 2021

TA866 also known as Asylum Ambuscade is a threat actor that has been conducting intrusion operations since at least 2020. TA866 has frequently relied on commodity and custom tooling to facilitate post-compromise activities. These tools often perform specific functions and are deployed and used as...

Nation-state threat actor Mint Sandstorm refines tradecraft to attack high-value targets

Over the past several months, Microsoft has observed a mature subgroup of Mint Sandstorm, an Iranian nation-state actor previously tracked as PHOSPHORUS, refining its tactics, techniques, and procedures TTPs. Specifically, this subset has rapidly weaponized N-day vulnerabilities in common...

How we developed our simple Harbour decompiler

https://github.com/KasperskyLab/hbdec Every once in a while we get a request that leaves us scratching our heads. With these types of requests, existing tools are usually not enough and we have to create our own custom tooling to solve the "problem". One such request dropped onto our desk at the...

Introducing Slackor, a Remote Access Tool Using Slack as a C2 Channel

As a penetration tester at Coalfire Labs, I frequently use exploitation frameworks such as Metasploit or PowerShell Empire to perform post-exploitation actions on compromised endpoints. While anti-virus AV bypass and detection avoidance is often trivial in all but the most mature environments,...