Lately, I have been working on a few projects such as OSSEM , HELK and ThreatHunter-Playbook with a main goal of integrating all of the...

Red team exercises focus on checking your internal team’s ability to respond and the resiliency of your IT systems against real-life cyber attacks.

Intro / TL;DR

Introduction: Densityscout calculates the density ( like entropy ) for files of any file system and makes analysts quickly find the packed malware in the potentially infected machine. It was written by Christian Wojner. In general, a normal file will have…

Researchers have a working exploit for the vulnerability (now patched), which allows for unauthenticated RCE and affects an estimated 70,000+ VPN/firewalls.

Learn how to detect the CVE-2021-42292 exploit, which relies on Excel fetching a second Excel file, through behavioral tricks.

TheHive is a scalable, open source and free Security Incident Response Platform, tightly integrated with MISP (Malware Information Sharing Platform), designed to make life easier for SOCs, CSIRTs, CERTs and any information security practitioner dealing with…

Join us with special guest RedTeam-Rob (m0rv4i ) for a deep dive into syscalls and how they are used to evade detection. Expand for more...


-----
OALABS DISCORD
https://discord.gg/6h5Bh5AMDU

OALABS PATREON
https://www.patreon.com/oalabs

OALABS TIP JAR…

A talk I gave at the Philly Security Shell meetup 2019-02-21 on how the Elastic Stack works and how you can use it for indexing and searching security logs.

Tools I mentioned:
Github repo with script and demo data - https://github.com/SecHubb/SecShell_Demo…

An analysis of current and potential kernel security mitigations Posted by Jann Horn, Project Zero Introduction This blog post de...