Blue Team News
@blueteamsec1
Followers
46,180
Following
9,401
Media
5,053
Statuses
8,841
The cybersecurity home for the latest #BlueTeam , #DFIR , and #ThreatHunting news and tools.
Denver, CO
Joined March 2019
Don't wanna be here?
Send us removal request.
Explore trending content on Musk Viewer
Iran
• 608772 Tweets
ايران
• 488412 Tweets
BALENCIAGA BOY FOTFOT
• 266219 Tweets
#V最協S6
• 99024 Tweets
スペースマウンテン
• 67095 Tweets
アルゼンチン
• 45570 Tweets
#Fes蓮ノ空TSFライブ
• 41302 Tweets
ゲリラ豪雨
• 38789 Tweets
JD NOVEL FEST 2024
• 29594 Tweets
ハイキュー
• 24886 Tweets
土砂降り
• 20452 Tweets
Summer with NuNew
• 20316 Tweets
#バレーボール男子日本代表
• 18051 Tweets
#男子バレー
• 16955 Tweets
ツルギくん
• 11703 Tweets
どらほー
• 10865 Tweets
ポランコ
• 10143 Tweets
松木平初勝利
• 10137 Tweets
5
173
757
Kali Linux 2023.2 - Penetration Testing and Ethical Hacking Linux Distribution
#Distribution
#Distro
#Kali
#KaliLinux
0
99
507
Blackbird - An OSINT Tool To Search For Accounts By Username In 101 Social Networks
#Blackbird
#JSON
#OSINT
#OSINTTool
4
138
491
5
124
427
#Fortiscan
- A High Performance
#FortiGate
SSL-VPN
#Vulnerability
Scanning And
#Exploitation
Tool
#hacktool
#kitploit
#infosec
1
121
409
1
76
341
KoodousFinder - A Simple Tool To Allows Users To Search For And Analyze Android Apps For Potential Security Threats And Vulnerabilities
#KoodousFinder
#MalwareAnalysis
#ReverseEngineering
3
74
316
1
115
332
3
98
327
EvilSelenium - A Tool That Weaponizes Selenium To Attack Chromium Based Browsers
#EvilSelenium
#WhatsApp
#Windows
8
98
316
5
109
314
4
87
305
365Inspect - A PowerShell Script That Automates The Security Assessment Of Microsoft Office 365 Environments
#365Inspect
#PowerShell
#PowerShellScript
#Scanning
1
93
314
PhoneSploit-Pro - An All-In-One Hacking Tool To Remotely Exploit Android Devices Using ADB And Metasploit-Framework To Get A Meterpreter Session
#AndroidHacking
#HackingScript
#MetasploitFramework
#PentestScripts
3
100
287
SMBeagle: Intro SMBeagle is an (SMB) fileshare auditing tool that hunts out all files it can see in the network and reports if the file can be read and/or written. All these findings are streamed out to either a CSV file or…
#cyber
#threathunting
#infosec
6
90
271
1
90
257
1
73
263
OffensivePipeline - Tool To Download, Compile (Without Visual Studio) And Obfuscate C# Tools For Red Team Exercises
#BloodHound
#GroupPolicy
#ManintheMiddle
#mimikatz
2
76
248
Cbrutekrag - Penetration Tests On SSH Servers Using Brute Force Or Dictionary Attacks. Written In C
#Cbrutekrag
#DictionaryAttack
#Dictionaryattacks
#EthicalHacking
0
63
234
2
53
236
6
80
230
linWinPwn - A Bash Script That Automates A Number Of Active Directory Enumeration And Vulnerability Checks
#Adsecurity
#CrackMapExec
#Exploitation
#Kerberoast
0
63
225
Github Incident Playbooks "Incident Response Process and Playbooks | Goal: Playbooks to be Mapped to MITRE Attack Techniques"
#security
#threathunting
#infosec
0
67
223
1
49
218
AWS Pen-Testing Laboratory - Pentesting Lab With A Kali Linux Instance Accessible Via Ssh And Wireguard VPN And With Vulnerable Instances In A Private Subnet
#Audit
#Auditing
#AWS
#AwsPentestingLab
2
60
221
Finding Privilege Escalation Vulnerabilities in Windows using Process Monitor - Wiki
#security
#threathunting
#infosec
0
86
213
microsoft/SandboxSecurityTools: Security testing tools for Windows sandboxing technologies
#cyber
#threathunting
#infosec
0
69
215
WindowSpy - A Cobalt Strike Beacon Object File Meant For Targetted User Surveillance
#PostExploitation
#Windows
#WindowSpy
3
83
204
0
65
211
What EDRs Hook on Microsoft Windows i.e. where the gaps exist in terms of telemetry / detection coverage
#security
#threathunting
#infosec
4
57
212
Lsass-Shtinkering: New method of dumping LSASS by abusing the Windows Error Reporting service. It sends a message to the service with the ALPC protocol to report an exception on LSASS. This report will cause the service to…
#cyber
#threathunting
#infosec
1
73
207
ransomwhere: a ransomware sample to test out your ransomware response strategy.
#cyber
#threathunting
#infosec
0
60
202
0
54
199
Sub404 - A Python Tool To Check Subdomain Takeover Vulnerability
#BugBounty
#Bugbounty
#BugbountyTool
#Linux
0
72
197
Detecting LDAP enumeration and Bloodhound‘s Sharphound collector using Active Directory Decoys
#security
#threathunting
#infosec
1
75
194
THREAT HUNTING WITH JUPYTER NOTEBOOKS – PART 1: CONNECT TO ELASTICSEARCH
#cyber
#threathunting
#infosec
1
64
198
DumpSMBShare - A Script To Dump Files And Folders Remotely From A Windows SMB Share
#ActiveDirectory
#DumpSMBShare
#Windows
1
71
190
CyberChef – Detection Engineering, TI, DFIR, Malware Analysis Edition – We’ve published a fork of
#CyberChef
with some additional operations for detection engineers working with
#YARA
and
@virustotal
– to YARA strings – get all casings –…
#Security
1
55
186
0
43
183
0
55
184
2
60
175
ScubaGear: Automation to assess the state of your M365 tenant against CISA's baselines
#cyber
#threathunting
#infosec
1
53
177
0
45
175
2
59
168
0
60
168
1
47
166
evtx-hunter - quickly spot interesting security-related activity in Windows Event Viewer (EVTX) files
#security
#threathunting
#infosec
1
77
167
1
68
162
Subcert - An Subdomain Enumeration Tool, That Finds All The Subdomains From Certificate Transparency Logs
#Bugbounty
#CertificateTransparency
#Enumeration
#Infosec
2
59
165
Indicator-Intelligence - Finds Related Domains And IPv4 Addresses To Do Threat Intelligence After Indicator-Intelligence Collects Static Files
#IndicatorIntelligence
#ThreatIntelligence
0
47
159
NSA releases a repository of signatures and analytics to secure Operational Technology
#cyber
#threathunting
#infosec
0
47
162
PacketSpy - Powerful Network Packet Sniffing Tool Designed To Capture And Analyze Network Traffic
#BetterCap
#Cybersecurity
#KaliLinux
#MITMf
0
49
163
GodPotato - Local Privilege Escalation Tool From A Windows Service Accounts To NT AUTHORITY\SYSTEM
#GodPotato
#PrivilegeEscalation
#Windows
0
51
156
SharpSniper - Find Specific Users In Active Directory Via Their Username And Logon IP Address
#mimikatz
#RedTeam
#RedTeamEngagement
#SharpSniper
1
57
155
Dlinject - Inject A Shared Library (I.E. Arbitrary Code) Into A Live Linux Process, Without Ptrace
#Assembly
#Dlinject
#LdPreload
#Procfs
1
65
153
Malware development: persistence - part 3. COM DLL hijack - as used by APT28
#cyber
#threathunting
#infosec
0
51
155
ADHuntTool - Official Repo for the AdHuntTool - It can be used by Cobalt Strike execute-assembly or as standalone executable
#security
#threathunting
#infosec
0
65
155
0
60
154
Freeze: Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods on Windows
#cyber
#threathunting
#infosec
2
60
151
PSSW100AVB: A list of useful Powershell scripts with 100% AV bypass (At the time of publication).
#cyber
#threathunting
#infosec
2
54
153
3
60
145
Malwarescanner - Simple Malware Scanner Written In Python
#Antivirus
#FileScanner
#MalwareAnalyzer
#MalwareDetection
1
50
148
MANSPIDER - Spider Entire Networks For Juicy Files Sitting On SMB Shares. Search Filenames Or File Content - Regex Supported!
#CIDR
#Debugging
#Extension
#GREP
0
47
149
PowerZure is a PowerShell project created to assess and exploit resources within Microsoft’s cloud platform, Azure. PowerZure was created out of the need for a framework that can both perform reconnaissance and exploitation…
#cyber
#threathunting
#infosec
1
58
143
0
54
146
1
49
141
Dismantling ZLoader: How malicious ads led to disabled security tools and ransomware
#cyber
#threathunting
#infosec
1
55
139
3
54
144
0
53
144
GitMonkey365 provides a tool for security consultants to easily conduct not only Microsoft 365, but also Azure subscriptions and Azure Active Directory security configuration reviews.
#Security
4
44
143
1
34
133
PurpleOps - An Open-Source Self-Hosted Purple Team Management Web Application
#MongoDB
#Nginx
#PurpleTeam
#PurpleOps
0
39
138
0
54
139
1
63
140
0
53
138
2
30
133
1
31
129
0
32
133
0
43
131
0
36
129
1
48
130
2
49
128
0
39
122
WinBoot: This PoC illustrate different technique to successfully excute Mimikatz with process injection – Embed Mimikatz as C# class, Mimikatz is converted to shellcode and converted to 3 digits format, Each syscall is obfuscated, Use C#…
#Security
0
49
127
Manuka is an Open-source intelligence (OSINT) honeypot that monitors reconnaissance attempts by threat actors and generates actionable intelligence for Blue Teamers.
#cyber
#threathunting
#infosec
0
40
127
0
38
127