🔥 SPF Attacks: Quick Overview

1️⃣ Alignment Bypass
SPF checks MAIL FROM, not the visible From - easy spoofing.

2️⃣ SoftFail Abuse
~all / ?all often deliver anyway.

3️⃣ Lookalike Domains
Fake domains with valid SPF look legit.

4️⃣ DNS Poisoning (no DNSSEC)
SPF TXT records can be spoofed.

5️⃣ Macro Abuse
Macros leak info or behave unpredictably.

6️⃣ Oversized SPF
>10 lookups → PermError → sometimes treated as pass.

7️⃣ Subdomain Takeover / Abuse
Forgotten subdomains with weak policies.

8️⃣ Trusted Sender Hijack
Compromised authorized mail services = SPF pass.

💡 Takeaway

SPF alone is weak. Use DKIM + DMARC enforcement.

🚨 110+ Splunk Queries for SOC Analysts ⚡

Collection of real-world detection queries a goldmine for SOC analysts, threat hunters, and blue teamers.

#SOC #Blue_Team #security

☠️ EVADING EDR ☠️

The Definitive Guide to Defeating Endpoint Detection Systems.

#Offensive #Red_Team #penetration_testing

🧨 This github repository contains a collection of 150+ tools and resources that can be useful for red teaming activities. 🧨

Some of the tools may be specifically designed for red teaming, while others are more general-purpose and can be adapted for use in a red teaming context.

Get it 👉 Here

#Offensive #Red_Team #penetration_testing

🛠️ Security Operations Centre 🛠️

Exploring this SOC Analyst guide really highlights how critical structured security operations are in today’s evolving threat landscape.

#SOC #Blue_Team #Cyber_Sec

🧨 JWT Hacking Toolkit: 20 Real Hacker Techniques to Master Authentication Attacks 🧨

Get it 👉 Here

#Offensive #Red_Team #penetration_testing

🤖 Using Artificial Intelligence (AI) in Cybersecurity: Automate Threat Modeling with STRIDE GPT 🤖

The STRIDE methodology has been the gold standard for systematic threat identification, categorizing threats into Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege. However, applying STRIDE effectively requires not just understanding these categories but also having the experience to identify how they manifest in specific application architectures.

To solve this problem, we have 💥 STRIDE GPT 💥 By combining the analytical power of AI with the proven STRIDE methodology, this tool can generate comprehensive threat models, attack trees, and mitigation strategies in minutes rather than hours or days.

In this article, we’ll walk you through how to install STRIDE GPT, check out its features, and get you started using them.

👉 Let’s get rolling!

#SOC #Blue_Team #Cyber_Sec

Nyx (goddess of the night in Greek mythology) is a self-contained noscript for cleaning forensic traces on Linux, macOS, and Windows.

GitHub: 🔗 Here

#Offensive #Red_Team #penetration_testing

💥 NEW RECENT THREAT: React2Shell: CVE-2025-55182 💥

Learn about CVE-2025-55182 (React2Shell) and understand how the Flight protocol and deserialization work, dissect a working PoC, and exploit a vulnerable server. Furthermore, explore detection and mitigation.

Lear about: 👉 Here

#Offensive #Red_Team #penetration_testing

⚡ Kali Linux Wireless Penetration Testing Cookbook ⚡

Identify and assess vulnerabilities present in your wireless
network, Wi-Fi, and Bluetooth enabled devices to improve your
wireless security.

#Offensive #Red_Team #penetration_testing

💀 Practitioners Guide to Ransomware Response and Recovery is a comprehensive guide for responding to and recovering from ransomware incidents. 💀

The guide is designed for industry professionals and includes detailed checklists, resources, and tools.

It offers detailed checklists, resources to aid in effectively managing and mitigating ransomware attacks.

Get it: 👉 Here

#SOC #Cyber_Crime #ransomware

Azure Red Team: Azure Security Resources and Notes

Learn about: 👉 Here

#Offensive #Red_Team #penetration_testing

👾 Malware Development Academy - the introductory module helps you get familiar with the course structure and maximize your learning experience. 👾

The course does not teach programming from scratch - it focuses on practical work with the C language, so students should already understand its basic concepts.

💥 If you want to dive deeper into how malware works from the inside and how it is created - this course is a great starting point. 💥

#Offensive #Red_Team #penetration_testing #Mal_Dev

🕸️ The Art of Pivoting - Techniques for Intelligence Analysts to
Discover New Relationships in a Complex World. 🕸️

This book explores how intelligence and cyber-security analysts can uncover hidden links between threat actor infrastructure and ongoing investigations by pivoting on both classic and unconventional indicators — many of which are often overlooked.
The material is grounded in empirical, field-tested strategies used in cyber-security, digital forensics, cyber threat intelligence, and intelligence analysis more broadly.

#Offensive #Red_Team #penetration_testing #Pivoting