Monday's redteam toolkit - Even more privileged ADCS ESC_CES

Web Enrollment and CES both perform certificate enrollment, but they are completely different HTTP protocols.

github.com/ADHDMurky/AD... #redteam #tool #ADCS #AD #fresh #attack #CES #tools #ESC_CES #critical #education

Monday's fuck up - Now and again great Citrix - Citrix NetScaler PreAuth Command Injection
CVE-2026-88771 Improper input validation leading to RCE in a default NetScaler configuration, with no additional product features required.
github.com/watchtowrlab... #redteam #critical #citrix #cve-2026-88771

Le fuzzing web est la première étape d'un pentest réussi, mais encore faut-il avoir les bonnes word lists. Les limites des listes publiques coûtent parfois cher en mission.

#Cybersécurité #Pentest #WebSecurity #RedTeam

🎧 Web: bit.ly/3TlTzfD
🎧 Spotify: bit.ly/4j3I5I0
🎧 YouTube: bit.ly/4hvmS8M

Track of the Day - Hanging Garden - Tunturi - www.youtube.com/watch?v=Q0z2... #redteam #track #music #my #vibe #playlist #gotic-metall

A listener profile for the Mythic C2 framework that utilizes AI vendors file API's

github.com/kyle41111/AI...

#infosec #cybersecurity #redteam #pentest

Is your AI app safe to ship?

LLM Red-Team Starter Kit: 50 ready-to-run tests mapped to OWASP LLM Top 10 (2025) + an Excel dashboard that scores your results.

Pay what you want:
https://techsavant013.gumroad.com/l/llm-redteam-starter-kit

#AISecurity #LLM #RedTeam

Video-MLLMs remain vulnerable to jailbreaks that exploit surrounding video scenario context rather than visual query formatting, with SceneJail adaptively constructing contexts and prompts to bypass video-level safety…

#AIsafety #jailbreak #VideoMLLM #redteam
https://arxiv.org/abs/2609.38899

Cross-platform syscall-powered implant & C2 — direct syscalls (Win), raw syscalls (Linux), HTTPS/DNS/ICMP channels. No winapi layer.

github.com/VoidSecSoftw...

#infosec #cybersecurity #redteam #pentest #opensource

@discord.com

Can we use one of the few million IDs that were recently stolen from you?

Or are of all those IDs no good now?

Asking for a friend.

🤣

#Discord
#DataBreech
#RedTeam
#PotatoSec
#Mashing
#IdentityTheft
#MeMBu

Wednesday's fuck up - now and again Wordpress - github.com/MRdark-ops/C... #redteam #exploit #critical #WP #wordpress #cve-2026-87902 #LFI #RCE

Track of the Day - Rise to the Sky - Bleeding Heart - www.youtube.com/watch?v=Mj57... #redteam #music #track #vibe #my #playlist #doom-metall #true

📬 Schutzmaßnahmen durchbrochen: Wurde Claude zur Zero-Day-Schmiede? Anthropic schweigt sich aus

#Cyberangriffe #KünstlicheIntelligenz #AISafety #Anthropic #ChatProtokolle #ClaudeBypass #ClaudeCode #HaikhavanSecurity #Jailbreaking #RedTeam #ThreatActors

RemoteThreat launches with $7M pre-seed funding to unify mission planning, C2, implants, obfuscation, targeting, analysis, and AI assistants for enterprise and government red teams. #RemoteThreat #RedTeam #USA

Need to pivot through a macOS target during a Red Team operation? 🍎
Mirage C2 includes built-in SOCKS proxying, letting operators route traffic through a compromised Mac and reach resources beyond the initial foothold.
Start it. Pivot. Keep moving.
Part of DarwinOps by BallisKit.
#RedTeam #macOS

Enumerate user accounts and registered authentication methods via the Microsoft Self-Service Password Reset (SSPR) portal.

github.com/mlcsec/Reset...

#infosec #cybersecurity #redteam #pentest #osint #opensource

notRDP: Havoc C2 plugin creates invisible Windows desktops via CreateDesktopW, streams JPEG to browser viewer, injects input via PostMessage. Variant captures real desktop with keystroke logging. #redteam #c2 #tool https://github.com/dagowda/notRDP

Monday's red team tool - geminiHunter

Find and assess exposed Google Gemini API keys in web assets and Android apps.

github.com/devploit/gem...

#redteam #tool #gemini #vibecoding #api #key #pentest #cybersecurity #top #new #hackers #tools

Monday's fuck up - This Time great Citrix -  U.S. CISA adds Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog

securityaffairs.com/199891/hacki... #redteam #citrix #real #attack #cisa #exploit #0day #critical