LOLRMM is a curated list of Remote Monitoring and Management (RMM) tools that could potentially be abused by threat actors.
https://lolrmm.io
#infosec #cybersecurity #redteam #pentest
ANIMO is a comprehensive Azure AD / Entra ID assessment platform that combines PowerShell-based session management, Azure CLI parity, and native Graph / ARM API integration.
https://github.com/dmcxblue/ANIMO
#infosec #cybersecurity #redteam #pentest #cloud #opensource
Kallisti
@kallisti@infosec.exchange
Digital being trapped in an analog body. Some Machine Spirits seem to like me better than they like the people running them. Profile picture by LEIXV (https://vgen.co/LEIXV) Profile banner by wolisa (https://vgen.co/wolisa)
infosec.exchange
Replying to
@kallisti@infosec.exchange
New blog post!
I recently got to use both of the tools I published on Codeberg (Axmar and Tessera) during an engagement, and so I decided to make a brief writeup as a case study of what these tools can do.
https://ti-kallisti.com/tales/schedule.html
#infosec #pentesting #redteam #redteaming #Microsoft #ActiveDirectory #MSSQL
BSidesLuxembourg
@BSidesLuxembourg@infosec.exchange
We are back in 2026!! May 6-8th in Belval Follow this feed for news! or subscribe to our newsletter -> https://bsides.lu/wws/subscribe/newsletter Tickets are available here -> https://pretix.eu/BSidesLux/2026/ Schedule -> https://pretalx.com/bsidesluxembourg-2026/schedule/ Website -> https://2026.bsides.lu
infosec.exchange
🎥 A session from BSides Luxembourg 2026 is now available to watch!
🟣🤖 𝗚𝗢𝗢𝗗𝗕𝗬𝗘 𝗣𝗨𝗥𝗣𝗟𝗘 𝗧𝗘𝗔𝗠, 𝗛𝗘𝗟𝗟𝗢 𝗣𝗨𝗥𝗣𝗟𝗘 𝗕𝗢𝗧𝗦 🛡️⚔️
Patrick Mkhael https://pretalx.com/bsidesluxembourg-2026/speaker/WHMGFD/
Ralph El Khoury https://pretalx.com/bsidesluxembourg-2026/speaker/X9QCJN/
Watch Patrick Mkhael and Ralph El Khoury's session, recorded live at the Digital Learning Hub during BSides Luxembourg 2026.
https://archive.org/details/BSidesLuxembourg2026/d1+t2+08+Goodbye+Purple+Team%2C+Hello+Purple+Bots+-+Patrick+Mkhael+and+Ralph+El+Khoury.mkv "smartCard-inline"
#BSidesLuxembourg2026 #CyberSecurity #PurpleTeam #RedTeam #BlueTeam #AI
Windows Provisioning Package (.ppkg) generator. Payload runs as SYSTEM on apply.
https://github.com/init1Security/PPKGPacker
#infosec #cybersecurity #redteam #pentest
Simon Roses Femerling
@simonroses@infosec.exchange
AppSec, Pen Testing, Technology, Business and anything interesting. Founder & CEO of VULNEX (https://www.vulnex.com) - Un mallorquin explorando el mundo
infosec.exchange
🛡️ USecVisLib — open-source Universal Security Visualization Library.
Attack trees, attack graphs, STRIDE threat models, MAESTRO AI-agent
threat modeling, binary viz & more. Python + FastAPI + Vue 3. Apache 2.0.
https://github.com/vulnex/usecvislib
#infosec #threatmodeling #opensource #redteam #blueteam
A litterbox integration for the Mythic Command and Control Server
https://github.com/Whispergate/Sphinx
#infosec #cybersecurity #redteam #pentest
Notes on Windows Component Object Model (COM hijacking, elevation of privilege, DCOM lateral movement, and persistence). Notes were generated by Kimi K3 Swarm may contain inaccuracies.
https://github.com/An0nUD4Y/Offensive-COM
#infosec #cybersecurity #redteam #pentest #windows
Hacker Sidekick
@hackersidekick@infosec.exchange
The Agentic Workbench for Cybersecurity. Sovereign AI. Local execution. Your tools, your machine.
infosec.exchange
The Agentic Workbench for Cybersecurity has been rebuilt from the ground up. Our biggest update ever!
Hacker Sidekick actually does the work in one window where the analysis lives next to the execution.
What the rebuild unlocks:
An agent that drives a real browser. Not screenshots of a browser, a real sandboxed Chromium it operates for you. It inspects the DOM, pulls full request and response bodies, reads storage and cookies including HttpOnly, walks login flows, and intercepts traffic proxy-style to hold, modify, or block requests.
77 tool integrations that pull your critical data into one place. Threat intel, SIEM, EDR, and ticketing, plus a built-in intel server with MITRE ATT&CK, NVD, VirusTotal, Shodan, Censys, and Exploit-DB out of the box with no key.
Watch mode, a second set of eyes. Toggle it and a passive monitor observes your terminal and browser and surfaces brief advice: a missed step, forgotten cleanup, a scope concern. It only advises. It has no tools of its own and never acts.
Because it is one integrated environment instead of a browser tab bolted onto a chat, all of this is faster, more powerful, and more connected. The agent plans and asks, security modes and approval gates keep it in bounds, and every command it runs is visible. Nothing happens off-screen.
That is the integrated hacking environment. Full tour: https://hackersidekick.com/inside-hacker-sidekick-desktop-feature-tour.html?utm_source=linkedin&utm_medium=social&utm_campaign=desktop_feature_tour
#cybersecurity #infosec #pentesting #hackersidekick #AI #dfir #redteam #threatintelligence
Rob Fuller
@mubix@infosec.exchange
(he/him) Dad / Husband / Marine / Student / Teacher / USMC / VC / Advisor / @hak5 / NoVAHackers / HBO’s Silicon Valley/ Mid-Atlantic CCDC / Marine Cyber Auxiliary
infosec.exchange
Anyone else feel like Hugging Face is setting the bar high for Red Team / Incident Response reports? :P https://huggingface.co/blog/agent-intrusion-technical-timeline
#blueteam #redteam time to up your game, customers are going to have pretty high expectations.
An open-source, self-hosted security research platform that turns focused AI analysis into de-duplicated, ranked findings with configurable validation and enrichment.
https://github.com/Kritt-ai/open-kritt
#infosec #ycbersecurity #redteam #pentest #ai
Nuclei-like credential surface scanner with BloodHound support. Audits local hosts for exposed secrets, cloud tokens, DevOps, and AI keys.
https://github.com/haxxm0nkey/credshound
#infosec #cybersecurity #redteam #pentest #opensource
payloadforge
@payloadforge@infosec.exchange
infosec.exchange
Replying to
@payloadforge@infosec.exchange
Patched forks if you want to test the fix before the PRs merge.
CertiGhost https://github.com/GregDurys/CVE-2026-54121
Impacket https://github.com/GregDurys/impacket
#ADCS #ActiveDirectory #RedTeam
Denny Fischer
@df_sec@infosec.exchange
IT-Security Consultant | Problem Solver | Father
infosec.exchange
SSH (Secure Shell) - Attacks and Best Practices by Compass Security
- Recon & Info Leakage
- Authentication, CAs, MFA & FIDO2
- Port Forwarding / Tunneling, Agent Forwarding
- Hardening, Post-Quantum Crypto, Auditing & more
0xBughunter
@bugxhunter@infosec.exchange
Automated Cybersecurity News Feed • CVE alerts & vulnerability disclosures • Bug bounty program updates • Threat intelligence & APT tracking • Zero-day exploit notifications Powered by AI | Curated for security professionals
infosec.exchange
🛡️ Cognyte Sells a Mobile Cell Surveillance Van
📝 Yet another Israeli mass surveillance company : Made by Israeli surveillance company Cognyte, the tec...
https://www.schneier.com/blog/archives/2026/07/cognyte-sells-a-mobile-cell-surveillance-van.html
📰 Schneier on Security
#RedTeam #CVE
Extract Windows credentials directly from VM memory snapshots and virtual disks
https://github.com/nikaiw/VMkatz
#infosec #cybersecurity #redteam #pentest #opensource
There is a documented enforcement gap in Conditional Access policies that apply to "all resources" but have an exclusion for at least one resource.
https://dirkjanm.io/bypassing-conditional-access-with-resource-exclusio
#infosec #cybersecurity #redteam #pentest #cloud
This is a proof-of-concept tool to demonstrace CVE-2026-54121 a.k.a Certighost.
https://github.com/aniqfakhrul/CVE-2026-54121
#infosec #cybersecurity #redteam #pentest
Nuclei-like credential surface scanner with BloodHound support. Audits local hosts for exposed secrets, cloud tokens, DevOps, and AI keys.
https://github.com/haxxm0nkey/credshound
#infosec #cybersecurity #redteam #pentest #opensource
BSides Bratislava
@bsidesba@infosec.exchange
BSides Bratislava is a community-driven Information Security conference held in Bratislava, Slovakia. Organized entirely by volunteers, the event is built to foster open knowledge sharing, collaboration, and networking within the cybersecurity community. Our mission is to provide an inclusive and accessible platform where professionals, researchers, students, and enthusiasts can exchange ideas, showcase research, and connect with others who are passionate about cybersecurity. BSides Bratislava serves as a community-focused alternative to traditional commercial conferences, placing people, knowledge, and collaboration at the center of the experience.
infosec.exchange
🚀 Every year, we challenge ourselves to raise the bar.
A conference isn’t defined only by its talks, workshops, or Capture The Flag.
It’s also about creating an identity that people remember.
Today, we’re excited to share the visual direction for BSides Bratislava 2027.
🛡️ Guardians of the Future
This year’s theme represents those who stand at the front line of cybersecurity—professionals, researchers, students, defenders, and the community working together to protect tomorrow’s digital world.
This is only the beginning.
We’re incredibly excited for what’s ahead, and we can’t wait to welcome you to BSides Bratislava 2027.
The future isn’t something we wait for. It’s something we protect.
#BSidesBratislava #BSidesBA #CyberSecurity #InformationSecurity #BlueTeam #RedTeam #CTF #Community #CyberDefense #Bratislava #Slovakia #GuardiansOfTheFuture #Infosec #SecurityCommunity #BSidesBratislava2027