The United States imposes sanctions on affiliates of group responsible for ransomware attacks on the U.S. financial sectorWASHINGTON — Today, the United States is designating two individuals who are affiliates of the Russia-based ransomware group LockBit.…

Key Takeaways More information about Gootloader can be found in the following reports: The DFIR Report, GootloaderSites, Mandiant, Red Canary, & Kroll. An audio version of this report can be … Read More

An incredibly fast proxy checker & IP rotator with ease. - mubeng/mubeng

This map lists the essential techniques to bypass anti-virus and EDR - matro7sh/BypassAV

A demo app that lets you personalize a GPT large language model (LLM) connected to your own content—docs, notes, videos, or other data.

How MS Exchange on-premises compromises Active Directory and what organizations can do to prevent that

Learn how the Black Lotus Labs team rediscovered a botnet named TheMoon, which has eclipsed its old size and activity.

Leak NTLM via Website tab in teams via MS Office. Contribute to soufianetahiri/TeamsNTLMLeak development by creating an account on GitHub.

Rebound is a monster Active Directory / Kerberos box. I’ll start off with a RID-cycle attack to get a list of users, and combine AS-REP-Roasting with Kerberoasting to get an crackable hash for a service account. That password is shared by a domain user, and…

notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094) - amlweems/xzbot