Lenin alevski 🕵️💻

#security Eng @google ♥️ To Build and Break Stuff. Wannabe #Hacker. Personal opinions, review my PR please

Public Key

npub1qh0n8vcag4tg6gslg9xpd8y6h67swedc4v8p84hgg3s7kw5krguqguhm3s

NIP-05 Address

alevsk@infosec-exchange.mostr.pub

Profile Code

nprofile1qqsqthenkvw5245dyg05znqknjdta0g8vku2krsn6m5ygc0t82tp5wqpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dstft6yn

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub1qh0n8vcag4tg6gslg9xpd8y6h67swedc4v8p84hgg3s7kw5krguqguhm3s

Show more details

Last Notes

2025-08-28 19:04:18 UTC

Why is Stagehand a standout in browser automation? 🤔💻
Stagehand combines the precision of code (e.g., Playwright) with AI’s adaptability. Navigate unknown web pages through AI while sticking to code for predictable tasks. Plus, it previews/cache actions and integrates LLMs like OpenAI models effortlessly. #BrowserAutomation #AI
🔗 Project link on #GitHub 👉 https://github.com/browserbase/stagehand
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/107/945/382/100/853/original/d00fd2dad500c5fe.png

2025-08-25 19:03:00 UTC

Who keeps Google Cloud's IP ranges updated? 🌐🤔
Mark Adams' GitHub repo automates the fetching and parsing of Google's public IP ranges. It uses a Python script to extract JSON data from Google's authoritative source, making it easier for developers to integrate or analyze network configurations.
#GoogleCloud #Networking #GitHub
🔗 Project link on #GitHub 👉 https://github.com/mark-adams/gcp-ip-list
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/090/953/389/763/053/original/6c1eb2cde1a047b2.png

2025-08-22 19:06:51 UTC

How do you extract secrets and URLs effortlessly from JavaScript? 🛠️🔍
Meet `jsluice` by BishopFox—a Go-powered tool that combines AST parsing with custom matchers. Unlike regex, it intelligently identifies URLs in patterns like `window.open()` or `document.location`. Plus, it can spot secrets like API keys using syntax-aware matchers.
#JavaScript #CyberSecurity #GoLang
🔗 Project link on #GitHub 👉 https://github.com/BishopFox/jsluice
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/073/981/568/090/684/original/35946c3ba0b57c9c.jpg

2025-08-21 19:05:05 UTC

What makes a Firefox `user.js` file essential for privacy enthusiasts? 🔐🦊
A well-configured `user.js` hardens Firefox by tweaking settings to reduce tracking, enhance encryption, and limit browser fingerprinting. Examples include disabling Service Workers to block unwanted connections and tuning HTTP headers to restrict referer leaks.
#Firefox #Privacy
🔗 Project link on #GitHub 👉 https://github.com/pyllyukko/user.js
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/068/312/311/412/509/original/66007fe33f4e27b0.jpg

2025-08-20 19:06:47 UTC

What is MCP beyond just a protocol? 🤔🚀
AWS MCP Servers are lightweight applications tailoring LLM behavior by connecting them to real-world tools and data. Imagine a chatbot with AWS documentation access or an IDE with Terraform-accurate code generation. These servers integrate seamlessly via the Model Context Protocol, enhancing LLMs with dynamic context. #AI #AWS
🔗 Project link on #GitHub 👉 https://github.com/awslabs/mcp
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/062/656/711/659/462/original/ccdadd905d625524.png

2025-08-19 19:54:48 UTC

Why settle for one AI agent when you can deploy 250+ specialized ones? 🤔⚙️
HexStrike AI v7.0 is leveling up: streamlined setups, Docker support, deep JavaScript runtime analysis, and 40% memory optimization. It bridges GPTs to tools like Nmap & Ghidra for cutting-edge automated pentesting. #AI #Cybersecurity
🔗 Project link on #GitHub 👉 https://github.com/0x4m4/hexstrike-ai
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/057/183/155/295/116/original/8fb488fceaf98b91.png

2025-08-18 19:03:04 UTC

Why write multi-line shell scripts to manage Kubernetes when you can use Cypher-inspired queries? 🤔✨
Cyphernetes simplifies operations like deleting non-running pods:
```cypher
MATCH (p:Pod)
WHERE p.status.phase != "Running"
DELETE p;
```
Readable, relational, and efficient. #Kubernetes #DevOps
🔗 Project link on #GitHub 👉 https://github.com/AvitalTamir/cyphernetes
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/051/317/430/976/141/original/5301d7ad83fa4a6e.png

2025-08-18 03:23:03 UTC

💻 Wondering how to run covert web investigations securely? 👀
Open vBrowser (OvB) is a containerized browser platform tailored for cybersecurity pros. It’s tested on Linux (amd64), and provides anonymity while accessing the deep or dark web. Perfect for SOC teams lacking sandbox tools. #CyberSecurity #Linux
🔗 Project link on #GitHub 👉 https://github.com/fish-not-phish/open-vbrowser
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/047/621/167/593/752/original/5a32546e6dc85c63.png

2025-08-15 19:06:41 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
TerraSchema converts Terraform `.tf` files into JSON Schema (Draft-07) for variable validation. It handles types, defaults, and validation rules directly, making `.tfvars.json` file generation seamless. Install via `go` or binaries. #Terraform #JSONSchema
🔗 Project link on #GitHub 👉 https://github.com/HewlettPackard/terraschema
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/034/344/731/698/102/original/9e5319a87ba95dbd.png

2025-08-14 19:06:35 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
The `awscurl` tool simplifies making signed AWS API requests directly from your terminal. It combines cURL with AWS Signature Version 4, so you can interact with AWS services securely without manually signing headers. #AWS #DevOps
🔗 Project link on #GitHub 👉 https://github.com/okigan/awscurl
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/028/682/035/033/127/original/b0ba0a48176358de.png

2025-08-13 19:07:10 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
BlackCat is a PowerShell module tailored for analyzing Microsoft Azure configurations. It detects potential security vulnerabilities while adhering to best practices. A vital tool for Azure security audits. #Azure #PowerShell
🔗 Project link on #GitHub 👉 https://github.com/azurekid/blackcat
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/023/022/045/908/505/original/563e36da4f3e5e7b.png

2025-08-12 19:06:27 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
KubeIP v2 takes node-level public IP management in Kubernetes to the next level. By supporting GKE, EKS, and OCI, it assigns static public IPs to nodes where necessary (e.g., for gaming or IP whitelisting). Transitioning from a controller to a DaemonSet improves reliability and flexibility. #Kubernetes #CloudNetworking
🔗 Project link on #GitHub 👉 https://github.com/doitintl/kubeip
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/017/356/926/595/795/original/b0fd30d310cbb78d.png

2025-08-11 19:06:46 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
GitHub repositories like "awesome-mcp-servers" are community-curated lists, often aggregating useful servers/tools in the Minecraft Protocol (MCP) niche. Perfect for exploring third-party server projects or modding tools. #Minecraft #OpenSource
🔗 Project link on #GitHub 👉 https://github.com/punkpeye/awesome-mcp-servers
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/011/695/839/634/038/original/c01bb4b7a2a0f398.png

2025-08-08 19:02:14 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
GitHub repo alert: Santiago-Labs' Go implementation for OCSF (Open Cybersecurity Schema Framework) simplifies standardized event logging. Critical for improving threat detection and interoperability.
#Cybersecurity #DevOps
🔗 Project link on #GitHub 👉 https://github.com/Santiago-Labs/go-ocsf
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/994/691/066/587/371/original/bbfb1cb55b0292ba.png

2025-08-07 19:02:17 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
The OpenPubKey SSH project aims at enhancing SSH security by using a distributed PKI to authenticate public keys through DNSSEC and public repositories. It reduces reliance on centralized authorities like CA-based PKIs. A modern approach to securing SSH connections. #CyberSecurity #OpenSource
🔗 Project link on #GitHub 👉 https://github.com/openpubkey/opkssh
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/989/028/959/480/751/original/c2ab9f6431a42869.png

2025-08-06 19:02:31 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
RustScan is an open-source, ultra-fast port scanner built in Rust. It optimizes scanning by parallelizing requests, and its `--ulimit` feature ensures no OS-imposed bottlenecks. Perfect for speeding up network reconnaissance. #RustLang #Cybersecurity
🔗 Project link on #GitHub 👉 https://github.com/bee-san/RustScan
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/983/367/568/920/091/original/1dc79f7f8d2f0a29.png

2025-08-05 19:02:51 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
Subfinder is a fast tool for discovering subdomains by leveraging passive enumeration. It uses sources like Shodan, Censys, and more to gather accurate results without triggering rate limits. Ideal for reconnaissance in security workflows. #CyberSecurity #OSINT
🔗 Project link on #GitHub 👉 https://github.com/projectdiscovery/subfinder
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/977/706/560/211/649/original/058cd0132142e4d8.jpg

2025-08-04 19:03:06 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
GitHub repositories like General-Analysis/GA emphasize how version control enables transparent collaboration. Every commit documents changes, ensuring accountability and facilitating teamwork—even across distributed teams. #GitHub #VersionControl
🔗 Project link on #GitHub 👉 https://github.com/General-Analysis/GA
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/972/045/270/798/345/original/b221ae70cf452570.png

2025-08-01 19:02:54 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
Sherlock is a Python-based tool designed to find accounts across multiple platforms using a username. It queries over 300 social networks, making it powerful for OSINT tasks. Simple yet effective for gathering public data within seconds. #OSINT #Cybersecurity
🔗 Project link on #GitHub 👉 https://github.com/sherlock-project/sherlock
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/955/057/492/089/101/original/7e099f22d7a58dbb.png

2025-07-31 19:03:11 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
Pivotnacci is a toolkit for network pivoting in pentesting. It automates SOCKS proxies, SSH tunnels, and port forwards, making lateral movement more efficient during red team operations. Great for complex multi-hop environments. #CyberSecurity #PenTesting
🔗 Project link on #GitHub 👉 https://github.com/blackarrowsec/pivotnacci
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/949/396/338/180/422/original/cd212675665437f0.png

2025-07-30 19:03:16 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
Chisel is a fast TCP/UDP tunnel that works over HTTP, making it a lightweight tool for bridging networks or bypassing firewalls. Perfect for remote access when SSH is blocked. Encrypted and simple to use. #Networking #OpenSource
🔗 Project link on #GitHub 👉 https://github.com/jpillora/chisel
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/943/734/341/291/293/original/679c92fca744c67c.png

2025-07-29 19:03:34 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
DefectDojo is an open-source application vulnerability management tool built on Django. It integrates with scanners like OWASP ZAP, Burp Suite, and more to streamline vulnerability tracking across projects. #Cybersecurity #OpenSource
🔗 Project link on #GitHub 👉 https://github.com/DefectDojo/django-DefectDojo
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/938/073/198/069/896/original/2ef812b62927579b.png

2025-07-28 19:03:05 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
PrivateBin is a minimalist, open-source pastebin alternative where data is encrypted in the browser before uploading. The server never sees plaintext, ensuring full confidentiality. Ideal for sharing sensitive info securely. #WebSecurity #Encryption
🔗 Project link on #GitHub 👉 https://github.com/PrivateBin/PrivateBin
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/932/409/008/904/761/original/562bd3b9fcdcf4dc.png

2025-07-04 19:03:06 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
NetExec (formerly CrackMapExec) is a Python-based tool for network enumeration and exploitation, tailored to Active Directory environments. Fully open-source, it's designed for red teams and pentesters tackling complex security contexts. #pentesting #infosec
🔗 Project link on #GitHub 👉 https://github.com/Pennyw0rth/NetExec
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/796/513/640/749/478/original/0e86a89fb4a445ec.jpg

2025-07-02 19:02:38 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
Binwalk v3 is a firmware analysis tool rebuilt in Rust for improved speed and precision. It identifies and extracts embedded files, supports entropy analysis, and integrates with Rust projects. Install via Docker, Cargo, or source. #RustLang #FirmwareAnalysis
🔗 Project link on #GitHub 👉 https://github.com/ReFirmLabs/binwalk
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/785/187/161/675/146/original/bd9934ebfee34c3d.png

2025-07-01 19:02:02 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
Transform Kubernetes manifests, Helm charts, and even live cluster states into detailed architecture diagrams with KubeDiagrams. Highly configurable for custom resources and outputs multiple formats like PNG, SVG, or even interactive dot_json. A must-have for Kubernetes visibility. #Kubernetes #DevOps
🔗 Project link on #GitHub 👉 https://github.com/philippemerle/KubeDiagrams
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/779/522/463/727/737/original/e2d4ece33723bd3b.png

2025-06-27 19:02:25 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
Cloudflare's `poc-watermark` explores embedding undetectable watermarks in images generated by Stable Diffusion. Built with Rust and Python, it employs pseudorandom error-correcting codes for robust watermarking. Ideal for verifying AI-generated content integrity. #watermark #AI
🔗 Project link on #GitHub 👉 https://github.com/cloudflareresearch/poc-watermark
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/756/874/767/313/119/original/fb31f00485e601c7.png

2025-06-26 19:01:32 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
Convert Sigma rules to SIEM queries in your browser with detection.studio. Privacy-focused, supports Splunk SPL, Elasticsearch ES|QL, Grafana Loki. All local, no server-side processing. Built with Vue, powered by Pyodide. #SIEM #Cybersecurity
🔗 Project link on #GitHub 👉 https://github.com/northsh/detection.studio
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/751/208/954/631/182/original/1f91ccf4b6c2f8b8.jpg

2025-06-24 19:01:58 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
Kubeshark brings Wireshark-like functionality to Kubernetes, capturing real-time protocol-level traffic across pods, nodes, and clusters. Think API observability at scale with support for Helm and Homebrew. #Kubernetes #DevOps
🔗 Project link on #GitHub 👉 https://github.com/kubeshark/kubeshark
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/739/886/061/166/316/original/6d6ec5a6628f9622.png

2025-06-23 19:01:51 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
Threat Designer by AWS uses Generative AI to automate threat modeling for secure system design. It leverages services like AWS Lambda, Amplify, and DynamoDB to analyze architectures, detect threats, and streamline security workflows. #cybersecurity #AI
🔗 Project link on #GitHub 👉 https://github.com/awslabs/threat-designer
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/734/223/270/119/838/original/979c6ddfd4625a84.png

2025-06-19 19:02:04 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
A Rust-powered Windows kernel rootkit, **shadow-rs**, blends advanced system manipulation with Rust's safety principles. Features include process hiding, privilege elevation, callback management, and more. For research/education. 🌐 #RustLang #KernelDevelopment
🔗 Project link on #GitHub 👉 https://github.com/joaoviictorti/shadow-rs
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/711/574/902/734/629/original/f1882e3ad2a7b54d.png

2025-06-18 19:01:57 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
PurpleLab offers a fully deployable cybersecurity lab with a web-based UI. Includes Windows Server 2019 sandbox, detection rule management, and MITRE ATT&CK integration. Ideal for testing detection rules or simulating attacks. #Cybersecurity #DevSecOps
🔗 Project link on #GitHub 👉 https://github.com/Krook9d/PurpleLab
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/705/912/143/854/737/original/d8fc23f725178676.png

2025-06-17 19:02:08 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
Transform any URL into an LLM-ready input with `Reader`. Just prefix the URL with `https://r.jina.ai/` for clean, readable content extraction. Perfect for enhancing agents & RAG pipelines. #LLM #NLP
Need web search results for your LLM? Prepend queries with `https://s.jina.ai/` to fetch top results—content included. E.g., `https://s.jina.ai/your+query` brings knowledge directly to your model. #AItools #DataEngineering
Reader API now supports images! Captions are auto-generated for images missing alt tags, giving LLMs better context for reasoning and summarizing multimedia pages. #MachineLearning #AI
🔗 Project link on #GitHub 👉 https://github.com/jina-ai/reader
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/700/250/517/238/983/original/f6fb8fb92c6068c4.png

2025-06-16 19:01:50 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
Using Microsoft Teams as a C2 channel? Meet convoC2. It embeds commands in hidden span tags and extracts outputs from Adaptive Card image URLs. Detection is tough—Teams logs aren’t antivirus-friendly. #CyberSecurity #RedTeam
🔗 Project link on #GitHub 👉 https://github.com/cxnturi0n/convoC2
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/694/587/041/458/386/original/084822dfc7e47ee2.png

2025-06-12 19:02:45 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
Falcoctl streamlines Falco administration with commands for managing plugins, rules, and registries. From adding an artifact index to searching specific plugins like `cloudtrail`, it’s built for precision. Works with multiple backends (HTTP, S3, GCS). Config files simplify repeat usage. #Falco #DevSecOps
🔗 Project link on #GitHub 👉 https://github.com/falcosecurity/falcoctl
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/671/941/417/200/654/original/b68e7d845379c77e.png

2025-06-10 19:02:13 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
MCP-Hydra bridges AI assistants like ChatGPT with security tools (e.g., Nmap, Sqlmap) via the Model Context Protocol (MCP). It simplifies AI-assisted pentesting and analysis by making tools extensible and scriptable. #Cybersecurity #AI
🔗 Project link on #GitHub 👉 https://github.com/HappyHackingSpace/mcp-hydra
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/660/614/663/129/088/original/3b031eb14213ad7b.png

2025-06-09 19:01:54 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
Kubernetes History Inspector (KHI) is an agentless log viewer built for visualizing Kubernetes audit logs. Its timeline-based log analysis and resource relationship diagrams simplify cluster troubleshooting—no complex setups or commands required. #Kubernetes #Observability
🔗 Project link on #GitHub 👉 https://github.com/GoogleCloudPlatform/khi
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/654/951/163/266/767/original/0ecea000a9b572ba.png

2025-06-06 19:02:00 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
Pocket ID is an OIDC provider simplifying authentication with passkeys. No passwords. Think secure logins using Yubikeys or biometrics. Lightweight compared to Keycloak or Hydra and ideal for focused use cases. Built for Docker setups. #Passkeys #OIDC
🔗 Project link on #GitHub 👉 https://github.com/pocket-id/pocket-id
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/637/964/598/783/995/original/b2cb3aced4ae11e6.png

2025-06-04 19:15:28 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
Groundhog by @ghuntley explains AI coding agents like Cursor from first principles. Built in Rust, it teaches the inner workings of coding assistants—perfect for learning or building your own. #AI #RustLang
🔗 Project link on #GitHub 👉 https://github.com/ghuntley/groundhog
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/626/692/932/190/431/original/6fa397b20b3ee2ff.png

2025-06-02 19:02:52 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
Sops encrypts secrets in YAML, JSON, ENV, or INI formats, ensuring encrypted leaf values while preserving file structure. Supported integrations include AWS KMS, GCP KMS, Azure Key Vault, age, and PGP. Edit files seamlessly, with automated encryption/decryption during save. #encryption #devops
🔗 Project link on #GitHub 👉 https://github.com/getsops/sops
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/615/318/790/002/946/original/c4ede275f5a2ff55.png

2025-05-29 19:02:01 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
Google's MCP Security repo integrates various security solutions like Chronicle, GTI, SOAR, & SCC via Model Context Protocol servers. Flexible deployment options make it easy to adapt to diverse environments. Documentation is thorough—local Sphinx builds supported. #CyberSecurity #DevOps
🔗 Project link on #GitHub 👉 https://github.com/google/mcp-security
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/592/666/199/737/098/original/fe5bf9a1dcb67757.png

2025-05-28 19:02:19 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
ScareCrow: A framework for crafting payloads designed to bypass Endpoint Detection and Response (EDR). It flushes EDR hooks in DLLs using methods like `VirtualProtect` & indirect syscalls, ensuring stealth execution. Written in Go, it even uses obfuscation tools like Garble. #CyberSecurity #MalwareDevelopment
🔗 Project link on #GitHub 👉 https://github.com/Tylous/ScareCrow
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/587/005/051/163/296/original/3d607af6e1d242e9.jpg

2025-05-26 19:02:15 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
Living Off the Land (LOL) techniques exploit legitimate tools for malicious purposes. This GitHub repo curates an impressive list of methods and resources attackers use across endpoints, cloud services, and more. Great for defenders seeking to enhance detection strategies. #Cybersecurity #Infosec
🔗 Project link on #GitHub 👉 https://github.com/danzek/awesome-lol-commonly-abused
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/575/680/152/125/032/original/18db990c948f738a.png

2025-05-19 19:13:44 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
Real-time deepfake tech evolves: Deep-Live-Cam lets you swap faces and transform videos with just one image. GPU support (NVIDIA/AMD) ensures smooth performance for realistic results. Ethical use rules apply to prevent misuse. #DeepFake #AI
🔗 Project link on #GitHub 👉 https://github.com/hacksider/Deep-Live-Cam
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/536/089/139/992/889/original/07047d42f3809537.png

2025-05-16 19:02:23 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
pwncat is more than a basic reverse shell handler—it's a post-exploitation platform. With features like PTY spawning, privilege escalation automation, and persistence management, it simplifies red team operations across Linux and now Windows (alpha). Python 3.9+ required. #CyberSecurity #RedTeamTools
🔗 Project link on #GitHub 👉 https://github.com/calebstewart/pwncat
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/519/057/575/858/998/original/bcdd44ab73815ccd.png

2025-05-14 19:01:59 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
Loading PowerShell scripts from C# while bypassing AMSI, ETW, and logging? Meet Stracciatella. Think SharpPick but designed for evasion—with Constrained Language Mode & defenses disabled on startup using .NET runspaces. Intricate yet efficient. #CSharp #RedTeam
🔗 Project link on #GitHub 👉 https://github.com/mgeeky/Stracciatella
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/507/731/373/139/365/original/fb1b79c7a9b774e1.png

2025-05-13 19:46:38 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
Want to explore the runtime & security context of your container? `amicontained` is a lightweight introspection tool that reveals namespaces, capabilities, AppArmor profiles, and more. Useful for debugging or auditing container setups. #containers #Linux
🔗 Project link on #GitHub 👉 https://github.com/genuinetools/amicontained
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/502/244/639/891/868/original/f8dea3dc738669e5.png

2025-05-12 19:01:55 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
Watson is a .NET tool for enumerating missing KBs on Windows systems and identifying privilege escalation vulnerabilities with associated exploits. Supported OS: Win10 (1507–2004), Server 2016 & 2019. Archived but still useful. #CyberSecurity #PrivilegeEscalation
🔗 Project link on #GitHub 👉 https://github.com/rasta-mouse/Watson
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/496/406/509/100/504/original/e05aed701c44dd8c.jpg

2025-05-09 23:26:14 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
SQLMap-AI elevates SQL injection testing by integrating AI for decision-making. Features like DBMS-specific strategies and WAF bypass streamline complex tasks, making vulnerability assessments more efficient. Requires Python 3.7+ and SQLMap. #cybersecurity #AI
🔗 Project link on #GitHub 👉 https://github.com/atiilla/sqlmap-ai
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/480/458/935/545/533/original/e79fd6382398ec71.jpg

2025-05-06 23:04:36 UTC

How does a cyber threat group evolve from imitation to innovation? 🧑‍💻📦
An espionage-focused hacking group with links to Pakistan, identified as SideCopy—a sub-group within APT36 (Transparent Tribe)—has expanded its operations in India with a more refined toolkit and a broader victim profile. According to SEQRITE, their recent campaigns have moved beyond traditional targets like defense or maritime sectors to now include Indian ministries responsible for railways, oil and gas, and external affairs.
This shift is not just in targets but also tactics. The group has stopped relying on HTA files and now uses Microsoft Installer (MSI) packages for initial malware delivery. This change likely reflects an attempt to bypass growing detection rates associated with older techniques. These MSI files are often disguised as legitimate documents—like holiday schedules or security guidelines—and delivered via phishing emails.
Technically, the group relies on a mix of open-source remote access trojans (RATs) like Spark RAT and Xeno RAT, which have been modified to serve specific campaign needs. Spark RAT is cross-platform, while Xeno RAT has been customized using basic obfuscation methods. A key highlight is the emergence of CurlBack RAT, a previously undocumented Windows-based tool with advanced capabilities: system reconnaissance, command execution, file downloads, privilege escalation, and user enumeration.
SideCopy makes use of multiple post-exploitation methods including DLL side-loading, reflective payload loading, and AES-encrypted PowerShell scripts. They're also drawing from other known tools—borrowing features such as browser data theft from AsyncRAT, and using Cheex to extract images and documents.
Overall, the group’s progression reflects a maturing operation that integrates reused code, custom malware, and targeted social engineering to conduct surveillance and data theft at scale.
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/463/386/901/643/619/original/243cf5ca6cbecfbd.png

2025-05-06 19:09:29 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
Kubernetes Goat is a deliberately vulnerable Kubernetes cluster for hands-on security learning. From container escapes to RBAC misconfigurations, it’s packed with scenarios to explore real-world vulnerabilities in a safe environment. #Kubernetes #CloudSecurity
🔗 Project link on #GitHub 👉 https://github.com/madhuakula/kubernetes-goat
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/462/462/385/154/051/original/2483f0225752cde1.png

2025-05-05 19:00:59 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
The "Damn Vulnerable MCP Server" is a deliberately vulnerable implementation of the Model Context Protocol (MCP), designed for educational use. It includes 10 challenges that highlight specific security flaws, from prompt injection to multi-vector attacks. A hands-on tool for security researchers learning to secure MCP in LLM contexts. #Cybersecurity #AI
🔗 Project link on #GitHub 👉 https://github.com/harishsg993010/damn-vulnerable-MCP-server
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/456/766/650/541/904/original/aeddb93503f22dc8.png

2025-05-02 19:00:54 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
WinPwn simplifies internal Windows penetration testing by automating reconnaissance and exploitation through PowerShell. Features include domain recon, privilege escalation, Kerberoasting, UAC bypasses, and proxy-aware scripting. Also works offline with `Offline_Winpwn.ps1`. #cybersecurity #pentesting
🔗 Project link on #GitHub 👉 https://github.com/S3cur3Th1sSh1t/WinPwn
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/439/779/403/762/304/original/f11d52d2016177b2.png

2025-04-29 19:04:50 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
angr is a Python-based framework for binary analysis, spanning capabilities like symbolic execution, control-flow analysis, and decompilation. Ideal for CTF challenges and reverse engineering tasks. #binaryanalysis #reverseengineering
🔗 Project link on #GitHub 👉 https://github.com/angr/angr
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/422/807/947/300/266/original/f173777cf761d098.png

2025-04-28 19:04:45 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
GOAD (Game of Active Directory) by Orange-Cyberdefense is a lab for pentesting Active Directory environments. With multiple configurations like GOAD-Mini and SCCM labs, it helps security professionals practice AD attack techniques. Caution: Designed for isolated lab use only. #ActiveDirectory #Cybersecurity
🔗 Project link on #GitHub 👉 https://github.com/Orange-Cyberdefense/GOAD
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/417/145/290/885/050/original/e0d9fee076cd4074.png

2025-04-25 19:04:48 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
Mapping your threat-hunting workflows to the MITRE ATT&CK framework? Check out olafhartong's ThreatHunting Splunk app. With 130+ reports and dashboards, it simplifies hunting while integrating Sysmon data for deep insights. Requires tuning for best results. #ThreatHunting #MITREATTACK
🔗 Project link on #GitHub 👉 https://github.com/olafhartong/ThreatHunting
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/400/158/570/592/278/original/a48b4ded33465d0a.png

2025-04-24 19:01:02 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
Scopify is a Python-based recon tool for pentesters, leveraging `netify.ai` to analyze CDNs, hosting, and SaaS infra of target companies. Optional OpenAI integration adds AI-guided insights for deeper testing. Built by @nprofile…yeqq & Arcanum-Sec. #CyberSecurity #BugBounty
🔗 Project link on #GitHub 👉 https://github.com/Arcanum-Sec/Scopify
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/394/481/440/198/005/original/1a16be5d09e94701.png

2025-04-22 19:01:04 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
"Threat-Informed Defense" isn't just a buzzword. The Center for Threat-Informed Defense bridges MITRE ATT&CK with actionable tools like Adversary Emulation Plans and the Attack Workbench, empowering defenders to stay ahead of real-world TTPs. #CyberDefense #MITREATTACK
Want to map security controls to adversary behavior? Check out Mappings Explorer by the Center for Threat-Informed Defense. It aligns your defense strategy directly with the MITRE ATT&CK framework. Precision matters. #ThreatIntelligence #Cybersecurity
Attack Flow helps you visualize how attackers chain techniques into full-scale operations. An indispensable tool for understanding and mitigating attack sequences. Powered by the Center for Threat-Informed Defense. #SOCtools #ThreatModeling
TRAM leverages automation to map CTI reports directly to MITRE ATT&CK tactics and techniques. Less manual work, more actionable insights. Open-source ingenuity at its best. #CyberThreats #MITREATTACK
Building effective cyber analytics requires depth; "Summiting the Pyramid" delivers frameworks to challenge adversary evasion strategies. A research-backed way to harden defenses. #CyberAnalytics #ThreatHunting
🔗 Project link on #GitHub 👉 https://github.com/center-for-threat-informed-defense
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/383/156/978/211/803/original/ffb675ada92eee2d.png

2025-04-21 19:04:37 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
The ThreatHunter-Playbook on GitHub is a robust resource for threat detection. It integrates MITRE ATT&CK with Jupyter notebooks to share detection techniques and enable testing on pre-recorded datasets. Perfect for security researchers streamlining hunting workflows. #ThreatHunting #CyberSecurity
🔗 Project link on #GitHub 👉 https://github.com/OTRF/ThreatHunter-Playbook
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/377/508/623/587/987/original/f251cabe78c529f5.png

2025-04-18 19:01:01 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
Google's GRR (GRR Rapid Response) is an open-source framework for remote live forensics and incident response. It allows security teams to investigate systems at scale without interrupting operations. Used for data collection, analysis, and hunting. #CyberSecurity #DFIR
🔗 Project link on #GitHub 👉 https://github.com/google/grr
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/360/507/517/215/355/original/301484f183a4c248.jpg

2025-04-16 19:04:46 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
Active Directory Certificate Services (AD CS) can be a goldmine if misconfigured. Tools like Certipy simplify enumeration and abuse, leveraging techniques like Shadow Credentials, Golden Certificates, and domain escalation paths (ESC1-ESC11). #CyberSecurity #RedTeam
Certipy's `shadow` command exemplifies ADCS weaknesses. By manipulating `msDS-KeyCredentialLink`, you can take over accounts via PKINIT. It's seamless but devastating for privilege escalation. #Pentesting #ActiveDirectory
Golden Certificates mimic Golden Tickets but target ADCS. Using a compromised CA private key, an attacker can forge certs for domain controllers or users. Certipy automates this process—caution with CA backups. #InfoSec #PKI
🔗 Project link on #GitHub 👉 https://github.com/ly4k/Certipy
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/349/197/628/136/425/original/9b282c5c3f4e16d6.png

2025-04-11 19:01:11 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
Want a Windows VM tailored for malware analysis and reverse engineering? FLARE-VM automates setup with Chocolatey and Boxstarter, offering a curated toolbox. Just meet the requirements: Win10+, PowerShell5+, 60GB+ disk. Ideal for secure sandboxing. #ReverseEngineering #MalwareAnalysis
🔗 Project link on #GitHub 👉 https://github.com/fireeye/flare-vm
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/320/872/037/464/961/original/c9bd45ae31de47ce.png

2025-04-09 19:01:32 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
The Adversary Emulation Library by the Center for Threat-Informed Defense is a robust resource for assessing cyber defenses. It provides detailed emulation plans inspired by real-world threat actor TTPs, such as APT29 and FIN7, aligning with ATT&CK. Ideal for red teams aiming to refine security measures. #cybersecurity #redteam
🔗 Project link on #GitHub 👉 https://github.com/center-for-threat-informed-defense/adversary_emulation_library
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/309/548/779/433/692/original/e7a5d836bbf3e391.png

2025-04-07 19:01:00 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
VISTA is a Python-based AI chatbot built using OpenAI GPT and LangChain. It integrates with Pinecone for vector databases, focusing on semantic search and managing context. Looks like a good starting point if you're exploring AI chatbot frameworks. #AI #Chatbots
🔗 Project link on #GitHub 👉 https://github.com/RitikaVerma7/VISTA
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/298/222/031/871/443/original/c0e02c3bd975dddc.png

2025-04-02 23:07:04 UTC

How is a clean, legitimate program helping hackers steal data from Ukraine? 🕵️🇺🇦
Researchers at Cisco Talos have uncovered an ongoing spear-phishing campaign by the Russia-linked group Gamaredon, also known as Armageddon or ACTINIUM. Active since November 2024, the attacks specifically target Ukrainian users with lures tied to military activity, such as troop-related documents.
The group distributes phishing emails that include ZIP archives or links to them. Inside those ZIPs are malicious shortcut (LNK) files made to look like Office documents. Once opened, these LNKs execute obfuscated PowerShell scripts that download a second-stage payload—Remcos RAT—using geo-fenced servers located in Russia and Germany. These servers often only respond to IP addresses originating from Ukraine, returning HTTP 403 errors to others.
Delivery of the Remcos malware follows a DLL sideloading technique. A notable example includes the use of "TivoDiag.exe," a legitimate executable bundled with a malicious DLL named "mindclient.dll." When the clean executable runs, it inadvertently loads and executes the malicious DLL, which decrypts and launches the Remcos backdoor hidden in the same ZIP file. This method helps bypass basic antivirus detection.
Remcos gives remote attackers full control over infected machines. Its use, combined with selective geo-targeting and deceptive file naming, points to a focused cyber-espionage effort against Ukrainian entities.
Talos provided indicators of compromise and detection rules to help defenders spot this activity. While Gamaredon has long relied on custom tools, their adoption of commercially available backdoors like Remcos reflects a shift toward more flexible, quickly deployable payloads suited for fast-moving espionage operations.
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️

2025-04-01 19:08:31 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
GhidraMCP is a tool designed to analyze Minecraft's obfuscated code using Ghidra. It bridges Ghidra, a powerful reverse engineering tool, with MCP mappings for better readability and easier navigation through Minecraft's code base.
This is particularly handy for modders or researchers aiming to understand or modify the game's internals. #ReverseEngineering #Minecraft #Ghidra
🔗 Project link on #GitHub 👉 https://github.com/LaurieWired/GhidraMCP
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/264/277/708/741/949/original/ed295248588ad5e9.png

2025-04-01 05:13:11 UTC

How can a DNS mail record be used to trick you into giving up your login credentials? 📨😕
Researchers at Infoblox have identified a phishing-as-a-service (PhaaS) platform called Morphing Meerkat that’s been quietly operating for over five years. What makes it notable is its use of DNS MX (Mail Exchange) records in ways rarely reported before. Instead of the usual static phishing page setups, Morphing Meerkat queries the victim’s email provider’s MX record—using DNS-over-HTTPS via Google or Cloudflare—to tailor the phishing page dynamically. This means victims are shown spoofed login interfaces that mimic the exact service they use, complete with matching branding and pre-filled email fields.
The platform supports more than 114 brand templates and uses obfuscated JavaScript to evade detection. It also includes built-in translation capabilities based on browser profile or geolocation, making the fake login pages appear native to the user's language. Earlier versions began in 2020 targeting just five email services (Gmail, Outlook, Yahoo, AOL, Office 365). By mid-2023, they could generate phishing pages dynamically using MX records and now operate in over a dozen languages.
Morphing Meerkat campaigns rely on a set of centralized email servers, primarily hosted by UK ISP iomart and US-based HostPapa, indicating a coordinated infrastructure rather than a loose network of attackers. The phishing emails often impersonate trusted services—banks, shipping companies, etc.—and are distributed using compromised WordPress sites, open redirects from platforms like Google’s DoubleClick, and embedded links in shortened URLs.
Once a user submits credentials, the system may display a fake “Invalid Password” error to lure them into re-entering data, after which they are redirected to the real login page. This not only reduces suspicion but also increases the chance of capturing correct credentials. Stolen data is sent back via AJAX, PHP scripts, or Telegram bots, sometimes with evidence removed in real-time.
This operation shows a deep understanding of modern security blind spots—including how content delivery and DNS infrastructure can be turned against end users.
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️

2025-03-28 19:08:56 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
APTSimulator is a tool for security teams to simulate advanced persistent threat (APT) behavior in a controlled environment. It uses batch scripts to mimic common attack techniques, like privilege escalation or ransomware actions, without real payloads. Useful for testing detection rules. #CyberSecurity #ThreatSimulation
🔗 Project link on #GitHub 👉 https://github.com/NextronSystems/APTSimulator
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/241/630/144/229/772/original/579711289c5683a8.png

2025-03-27 19:01:05 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
Velociraptor is an advanced DFIR (Digital Forensics and Incident Response) tool. It focuses on endpoint monitoring, hunting, and data collection using flexible artifact-based queries. Its scripting language, VQL, allows custom queries tailored for specific investigations. #DigitalForensics #CyberSecurity
🔗 Project link on #GitHub 👉 https://github.com/Velocidex/velociraptor
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/235/936/978/100/568/original/9cfb5fb8e6814f5d.png

2025-03-26 19:01:01 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
Rubeus is a post-exploitation tool for Kerberos-related tasks on Windows. It supports ticket extraction, pass-the-ticket attacks, ticket forging, and more. A powerful choice for understanding and simulating Kerberos security flaws.
#CyberSecurity #Kerberos #RedTeam
🔗 Project link on #GitHub 👉 https://github.com/GhostPack/Rubeus
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/230/274/389/200/418/original/a945703bae33e7bd.png

2025-03-25 19:04:44 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
Blacksmith is a cloud-native adversary simulation tool that scales offensive testing in Azure. It’s built to automate simulation setups, leveraging Azure services like Sentinel for detection validation. Useful for red teaming and continuous security improvement.
#ThreatHunting #AzureSecurity
🔗 Project link on #GitHub 👉 https://github.com/OTRF/Blacksmith
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/224/626/684/651/771/original/c997167982ccc18f.png

2025-03-24 19:08:56 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
Azure Sentinel is Microsoft's cloud-native SIEM tool. It integrates AI to detect threats, automate responses, and monitor logs across environments. Useful for hybrid clouds, it supports connectors for platforms like AWS, Office 365, and more. #CloudSecurity #SIEM
🔗 Project link on #GitHub 👉 https://github.com/Azure/Azure-Sentinel
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/218/980/908/012/341/original/72c36efaefddbfe9.png

2025-03-23 19:18:43 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
CrackMapExec is a post-exploitation tool for penetration testers. It automates tasks like credential validation, lateral movement, and Active Directory enumeration on Windows environments. Built on Python, it supports SMB, WinRM, and other protocols. Extremely useful for red team assessments. #CyberSecurity #PenTest
🔗 Project link on #GitHub 👉 https://github.com/byt3bl33d3r/CrackMapExec
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/213/357/086/133/760/original/708055b3e18dbc43.jpeg

2025-03-20 19:00:37 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
Log4Shell still has lingering risks. If you're managing Java apps, check out Log4shell-detector on GitHub. It scans for vulnerable Log4j usage with minimal setup. Regular audits help keep your environment secure. #cybersecurity #Log4Shell
🔗 Project link on #GitHub 👉 https://github.com/Neo23x0/log4shell-detector
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/196/298/918/700/441/original/598aacb5c86f471b.png

2025-03-16 19:00:36 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
Sigma is a platform-independent framework to create security detections in a unified and structured way. Write rules once, convert them into formats like Splunk, Elastic, or SIEM-specific queries. It's a must-have for blue teams aiming for consistency and reuse. #Cybersecurity #ThreatHunting
🔗 Project link on #GitHub 👉 https://github.com/Neo23x0/sigma
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/173/649/668/729/368/original/c734dabbd2f947ba.png

2025-03-15 19:00:36 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
DataDog's KubeHound is a tool that queries Kubernetes clusters and surfaces Pod Security Standard violations. It works by analyzing a cluster against best practices with minimal setup. Useful for teams focused on securing their workloads in Kubernetes environments. #Kubernetes #CyberSecurity
🔗 Project link on #GitHub 👉 https://github.com/DataDog/KubeHound
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/167/987/321/845/759/original/7dda32cd1a6de2ca.png

2025-03-14 12:03:21 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
SpiderFoot is an open-source OSINT tool to automate data collection about targets. It supports over 200 modules, integrating DNS, IP, email, and infrastructure analysis. Perfect for security audits or threat intel workflows. #OSINT #Cybersecurity
🔗 Project link on #GitHub 👉 https://github.com/smicallef/spiderfoot
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/160/684/309/810/053/original/f5e52c897cf7b8c9.png

2025-03-14 07:02:49 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
Sqlmap is an open-source tool for automating SQL injection detection and exploitation. It supports multiple databases like MySQL, PostgreSQL, Oracle, and more. Widely used for penetration testing, it includes features like database dumping, password cracking, and file system access.
Remember: powerful tools require responsible use. #CyberSecurity #PenTesting
🔗 Project link on #GitHub 👉 https://github.com/sqlmapproject/sqlmap
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/159/502/555/832/325/original/d7a7f3f5db764dbb.png

2025-03-12 07:29:27 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
Mimikatz is a well-known open-source tool for extracting credentials from Windows systems. It can retrieve plaintext passwords, hash credentials, and even Kerberos tickets from memory. Used by both researchers and attackers, it highlights the importance of secure credential management in Active Directory environments. #CyberSecurity #WindowsSecurity
🔗 Project link on #GitHub 👉 https://github.com/gentilkiwi/mimikatz
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/148/282/721/125/519/original/ad7c0a57ab8857fb.png

2025-03-10 18:58:16 UTC

New Open-Source Tool Spotlight 🚨🚨🚨
Bettercap is a powerful, modular tool for network attacks and monitoring. It supports ARP spoofing, DNS spoofing, packet sniffing, and more. Written in Go, it's flexible and efficient for intercepting and manipulating network traffic on various protocols. #cybersecurity #networking
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/139/666/617/110/600/original/449cbda4edfa8ffa.png

2025-02-27 16:42:56 UTC

How can organizations trust their AI when the data it learns from might be compromised? 🧠🔐
Data poisoning is a growing concern in cybersecurity, especially with the expanding reliance on machine learning models. At its core, data poisoning involves malicious actors tampering with training datasets to undermine an AI system's performance or behavior. This manipulation could lead to subtle biases, complete dysfunction, or even harmful outcomes in critical applications like healthcare diagnostics, fraud detection, or autonomous systems.
For example, in a supervised learning model for financial fraud detection, attackers might inject fraudulent transaction data labeled as legitimate during the training process. As a result, the model becomes less effective at identifying real fraud cases. Detecting these poisoned inputs is immensely challenging, particularly in large-scale datasets where irregularities might appear statistically insignificant.
The threat becomes more pressing as organizations increasingly rely on third-party datasets or shared data repositories. Without stringent validation mechanisms, poisoned data can infiltrate and compromise AI at scale. Worse, attacks can be tailored—targeting specific outputs or patterns—allowing attackers to exploit vulnerabilities that are very difficult to predict or reverse.
Mitigating this risk requires advanced strategies. Techniques like data provenance checks, anomaly detection during data preprocessing, and model robustness testing can help. Also, employing federated learning (training models locally without centralizing data) limits exposure to malicious actors. But these defenses are resource-intensive and introduce their own complexities.
Ultimately, ensuring AI systems remain trustworthy hinges on securing the integrity of the data pipeline—not just reacting after the damage is done. As the adoption of AI accelerates, so does the urgency to prioritize its foundational safety.
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/076/849/020/224/341/original/d0d7a1baca59f25e.jpg

2025-02-26 17:10:51 UTC

Have you considered how "forgotten" data can still persist in AI systems? 🧠💻
Once shared, even for a moment, data can linger within generative AI chatbots like ChatGPT or Bard, potentially resurfacing in unexpected ways. Here's why: when you input information into these models, even if the original source is later deleted or access is restricted, the model may have already incorporated elements of that data during its training or refinement process.
This is particularly concerning because generative AI lacks traditional memory but learns by analyzing patterns in vast datasets. If sensitive details inadvertently become part of this learning, they can't easily be "unlearned." For example, if confidential company strategies are fed into a chatbot to draft a report, fragments of that data could indirectly reappear in future outputs.
Most providers try to manage this risk with clear limits on how inputs are used and improved privacy mechanisms. However, the challenge remains substantial. The lack of transparency over training datasets, combined with how models store relationships between words and ideas, makes control over such "forgotten" data complex.
Organizations and individuals must exercise caution by steering clear of sharing sensitive or private information with AI tools unless there's explicit assurance about privacy and data usage policies.
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/071/296/523/846/668/original/d3b91175fcad1242.jpg

2025-02-25 17:35:45 UTC

How secure is your information when you apply for a new job? 🛡️💻
A Texas-based recruitment software company has disclosed that hackers managed to access sensitive data belonging to job applicants. Among the stolen information were Social Security Numbers (SSNs), financial details, and potentially other personal data provided during job applications. This breach raises serious concerns about the security of applicant tracking systems, which are widely used by companies to process hiring.
These systems often collect a significant amount of personal information, from resumes to tax documents, making them a prime target for cybercriminals. The breach highlights vulnerabilities in how sensitive data is stored and transmitted within such platforms. While details about the specific method of attack weren't disclosed, this serves as a reminder that encryption, regular audits, and robust cybersecurity protocols are essential when handling personal data.
For individuals, it’s critical to stay vigilant after such breaches. Monitoring credit reports, placing fraud alerts, and using identity theft protection services can reduce the potential harm caused by stolen financial or identification details. Companies, meanwhile, must reassess their cybersecurity strategies, ensuring compliance not just with basic security standards but with advanced, proactive measures to deter breaches like this in the future.
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/065/732/114/579/449/original/d69320beb6fc5078.jpg