A post about how to perform phishing using github issues
https://blog.atsika.ninja/posts/the-phishy-github-issue-case
A detailed guide to emulating advanced phishing attacks on GitHub for Red Team operations, leveraging fake issues and notifications to exploit a TOCTOU race condition, tricking developers into authorizing malicious OAuth apps for initial access while bypassing MFA and using only trusted infrastructure.
Lightweight Asymmetric Encryption for C2 Implants — from XOR to Rabin KEM
Why Rabin beats RSA for implants: ~60 lines of pure C, no external deps, no heavy constants, provably as hard as factoring.
Covers the full crypto pipeline: XOR → AES-CTR → Rabin key encapsulation, with a working Python toolkit.
https://medium.com/@alfred.abston/lightweight-asymmetric-encryption-for-c2-implants-a-red-teamers-guide-from-xor-to-rabin-42e9b6b275d6
#redteam #infosec #malware #pentesting #crypto #cybersecurity
🪟 Forrester names Microsoft a Leader in the 2026 Extended...
📝 We are excited ...
📰 Microsoft Security Blog
Windows security research toolkit for LPE, persistence, COM hijacking, and attack surface enumeration.
https://github.com/kernelstub/Ferrum
#infosec #cybersecurity #redteam #pentest #opensource #windows
Attackers don't test your defenses once a year.
Why should your security team? 🔐
One-time pentests provide a snapshot. Continuous pentesting delivers ongoing visibility, real-time risk discovery, and faster remediation.
Attackers work every day. Security testing should too.
🌐 https://www.vaptsecurity.com/
#CyberSecurity #Pentest #ContinuousPentesting #VAPT #CloudSecurity #APISecurity #CTEM #RedTeam #CyberDefense
r1cksec
KL3FT3Z
EuskalHack
Alfredo
leHACK
0xBughunter
Nathan Labs