#red-teaming — Public Fediverse posts

📬 GPTFuzz: Automatisierte KI-Jailbreaks bringen selbst ChatGPT und Llama an ihre Grenzen
#ITSicherheit #KünstlicheIntelligenz #ChatGPT #GPTFuzz #Jailbreaks #KIJailbreaks #LargeLanguageModels #Llama #LLMSicherheit #OpenSource #PromptInjection #RedTeaming https://sc.tarnkappe.info/a4a1c9

📬 GPTFuzz: Automatisierte KI-Jailbreaks bringen selbst ChatGPT und Llama an ihre Grenzen
#ITSicherheit #KünstlicheIntelligenz #ChatGPT #GPTFuzz #Jailbreaks #KIJailbreaks #LargeLanguageModels #Llama #LLMSicherheit #OpenSource #PromptInjection #RedTeaming https://sc.tarnkappe.info/a4a1c9

New blog post!

I recently got to use both of the tools I published on Codeberg (Axmar and Tessera) during an engagement, and so I decided to make a brief writeup as a case study of what these tools can do.

https://ti-kallisti.com/tales/schedule.html

#infosec #pentesting #redteam #redteaming #Microsoft #ActiveDirectory #MSSQL

New blog post!

I recently got to use both of the tools I published on Codeberg (Axmar and Tessera) during an engagement, and so I decided to make a brief writeup as a case study of what these tools can do.

https://ti-kallisti.com/tales/schedule.html

#infosec #pentesting #redteam #redteaming #Microsoft #ActiveDirectory #MSSQL

📬 Prompt-Injection: Studie erklärt Erfolg von Angriffen auf Sprachmodelle
#KünstlicheIntelligenz #CoTForgery #ICML2026 #KIAgenten #KISicherheit #LLM #OpenAI #PromptInjection #RedTeaming #RoleConfusion #Sprachmodelle https://sc.tarnkappe.info/17b147

📬 Prompt-Injection: Studie erklärt Erfolg von Angriffen auf Sprachmodelle
#KünstlicheIntelligenz #CoTForgery #ICML2026 #KIAgenten #KISicherheit #LLM #OpenAI #PromptInjection #RedTeaming #RoleConfusion #Sprachmodelle https://sc.tarnkappe.info/17b147

More coding!

This one is not really anything new.
It's just a tool that allows to interact with Microsoft SQL from the command line in different ways.

I used it in a few engagements I had and I thought it came in handy every time, so I decided to publish the code.

Maybe someone else will find it useful as well.

https://codeberg.org/ti-kallisti/Tessera

#foss #coding #InfoSec #pentesting #redteaming #codeberg #windows #mssql #csharp

More coding!

This one is not really anything new.
It's just a tool that allows to interact with Microsoft SQL from the command line in different ways.

I used it in a few engagements I had and I thought it came in handy every time, so I decided to publish the code.

Maybe someone else will find it useful as well.

https://codeberg.org/ti-kallisti/Tessera

#foss #coding #InfoSec #pentesting #redteaming #codeberg #windows #mssql #csharp

New blog post!

I recently completed the OffSec Expert Penetration Tester (OSEP) certificate.

Here are my thoughts on it:

https://ti-kallisti.com/certs/osep.html

#InfoSec #RedTeam #RedTeaming #EDR #Offsec #Metasploit

New blog post!

I recently completed the OffSec Expert Penetration Tester (OSEP) certificate.

Here are my thoughts on it:

https://ti-kallisti.com/certs/osep.html

#InfoSec #RedTeam #RedTeaming #EDR #Offsec #Metasploit

RT @0x0SojalSec: Ein vollständig lokales 26B MoE-Modell wurde für Red-Teaming und Bug-Hunting entwickelt. Es wurde mit hochwertigen Bug-Berichten und realen Umgehungstaktiken trainiert und mittels DPO für die Denkweise eines „Hunters“ feinjustiert. Claude sieht Ihre Payloads in den Logs; deshalb ist BugTraceAI Apex 26B lokal für echte Red-Teamer gedacht. Es führt WAF-Umgehungen mit internen Denkblöcken aus. Es erzwingt tiefgreifende interne Reasoning-Prozesse, bevor es jegliche Ausgabe generiert. Es liefert WAF/EDR-Umgehungen auf Produktionsniveau mit AES-256-GCM-Obfuskation. Keine Ablehnungen, trainiert auf realen, hochwertigen Berichten und Umgehungstechniken. Passt in 16,7 GB. Läuft auf einer RTX 3060.

mehr auf Arint.info

#BugTraceAI #CyberSecurity #LocalAI #OpenSourceAI #RedTeaming #WAFBypass #arint_info

https://x.com/0x0SojalSec/status/2067037491253965274#m

HackTheBox. Прохождение Mini Pro Lab Unintended

Компания Unintended недавно перевела свою инфраструктуру на Active Directory . Руководство обеспокоено тем, что устаревшие методы и упущенные из виду ошибки конфигурации могут сделать среду уязвимой для внешних угроз. Вашей фирме поручено провести тестирование на проникновение с целью определения, может ли злоумышленник перейти от первоначального доступа к полному контролю над доменом. Unintended предоставляет практический опыт решения распространенных ошибок при развертывании Active Directory , демонстрируя, как злоумышленники могут переключаться между службами для повышения привилегий. Машина сочетает методы повышения привилегий в Linux с путями атак на Active Directory , что делает её ценной площадкой для практики как для специалистов по наступательной, так и по оборонительной безопасности. Unintended предназначена для тех, кто хочет расширить свои знания об эксплуатации Active Directory в среде, ориентированной на Linux . Машина хорошо подходит для тех, кто хочет понять реальные ошибки конфигурации в гибридной инфраструктуре. В этой лаборатории Red Team Operator уровня I игроки столкнутся со следующими темами: - Перечисление резервных копий Active Directory - Боковое перемещение - Пивотинг - Повышение привилегий в Linux - Криминалистический анализ резервных копий - Атаки на веб-приложения

https://habr.com/ru/articles/1041376/

#hackthebox #htb #redteam #redteaming #pentest #pentestit #hacking

HackTheBox. Прохождение Mini Pro Lab Puppet

Вам поручено провести проверку на проникновение в компанию Puppet Inc . Компания не разрешает передачу данных за пределы внутренней сети, поэтому внутри компании был создан сервер управления и контроля ( C2 ), и сотрудник запустил вредоносную программу для имитации успешной атаки с использованием методов социальной инженерии. Puppet — это небольшой сценарий Active Directory , в котором вы начинаете с уже работающего маяка Sliver C2 на внутренней системе. Он предназначен для отработки работы в рамках C2 -инфраструктуры в современной, сложной гибридной среде. Puppet разработан для специалистов по тестированию на проникновение и « красных команд », ищущих быструю и сложную лабораторию с уже настроенной C2 -инфраструктурой для отработки операций C2 . Эта лаборатория « Оператор красной команды уровня I » познакомит игроков со следующими темами: - Перечисление - Перечисление и атаки на Active Directory - Эксплуатация инфраструктуры DevOps - Боковое перемещение - Локальное повышение привилегий - Операции C2

https://habr.com/ru/articles/1039202/

#hackthebox #htb #redteam #redteaming #pentest #pentesting

Microsoft Unveils AI-Powered Red Teaming Tools to Bolster Software Security

Microsoft is shifting the conversation around AI safety from philosophical debates to hands-on action, empowering developers to build more secure software with innovative tools. With the launch of Rampart, a cutting-edge red-teaming tool, the company is putting AI-powered security into practice, helping developers…

https://osintsights.com/microsoft-unveils-ai-powered-red-teaming-tools-to-bolster-software-security?utm_source=mastodon&utm_medium=social

#AipoweredSecurity #RedTeaming #SoftwareSecurity #Microsoft #GenerativeAi

Viele denken, der Übergang vom Penetrationstest ins Red Teaming sei eine logische, graduelle Weiterentwicklung. In der Praxis zeigt sich schnell: Es ist ein echter Perspektivwechsel.
Die größten Unterschiede liegen nicht in den Tools, sondern im Mindset:
🔹 OPSEC first – Jede Aktion wird hinterfragt: Welche Spuren hinterlasse ich? Wie reagiert der Verteidiger?
🔹 Realismus vor Geschwindigkeit – Es geht nicht darum, möglichst schnell ans Ziel zu kommen, sondern einen echten Angreifer abzubilden.
🔹 Kontinuierliches Lernen – Standard-Tools werden zunehmend erkannt. Wer sich nicht weiterentwickelt, wird sichtbar.
🔹 Fehler als Lernmoment – Der Moment, in dem man erkannt wird, verändert die eigene Denkweise nachhaltig.
In unserem neuen Blogartikel beschreibt Marcel Heisel, wie wir neue Mitarbeitende auf genau diesen Wechsel vorbereiten – und was dabei wirklich den Unterschied macht.
👉 https://research.hisolutions.com/2026/05/vom-pentester-zum-red-teamer-wie-wir-neue-mitarbeitende-fit-machen/
#RedTeaming #Pentesting #CyberSecurity #OffensiveSecurity #OPSEC #InfoSec #ActiveDirectory

I'm looking forward to our cybersecurity capture the flag trying out together afternoon! This event is free and open for all genders. No registration required, just show up with your computer (or borrow one from us).
More info on the website. :)

And they're are always cockies, offline and with real life crumbles. 😅

#it #cybersecurity #fliNTA #feminist #Frauen #linux #meetup #opensource #ctf #ccc #c3w #tu #University #selforganized #vienna #Austria #Wien #meetup #learning #workshop #cyberchef #hacking #ethicalHacking #redteaming
#blueteaming
@totientfunction @c3wien

I'm looking forward to our cybersecurity capture the flag trying out together afternoon! This event is free and open for all genders. No registration required, just show up with your computer (or borrow one from us).
More info on the website. :)

And they're are always cockies, offline and with real life crumbles. 😅

#it #cybersecurity #fliNTA #feminist #Frauen #linux #meetup #opensource #ctf #ccc #c3w #tu #University #selforganized #vienna #Austria #Wien #meetup #learning #workshop #cyberchef #hacking #ethicalHacking #redteaming
#blueteaming
@totientfunction @c3wien

New blog post!

This time I talk about my new favorite evasive shellcode loader, Charon. I give a brief overview about what it does, how it works and which techniques it uses.

Also a brief addendum for enjoyers of bloated Implants such as Sliver.

https://ti-kallisti.com/general/ms/descending-into-hades.html

#InfoSec #Malware #Shellcode #RedTeam #RedTeaming #Pentesting #Charon #Sliver #Merlin #Mythic

New blog post!

This time I talk about my new favorite evasive shellcode loader, Charon. I give a brief overview about what it does, how it works and which techniques it uses.

Also a brief addendum for enjoyers of bloated Implants such as Sliver.

https://ti-kallisti.com/general/ms/descending-into-hades.html

#InfoSec #Malware #Shellcode #RedTeam #RedTeaming #Pentesting #Charon #Sliver #Merlin #Mythic

Halo semua! Saya Analis Siber Purwakarta. Saya mendokumentasikan perjalanan belajar saya di bidang #CyberSecurity, fokus pada #RedTeaming, #PenetrationTesting, dan analisis #CVE.

Saat ini saya sedang mendalami Python untuk networking dan riset kerentanan. Cek dokumentasi teknis saya di sini: https://analis-siber-purwakarta.blogspot.com/

#Indonesia #Infosec #Python #LearningJourney

Halo semua! Saya Analis Siber Purwakarta. Saya mendokumentasikan perjalanan belajar saya di bidang #CyberSecurity, fokus pada #RedTeaming, #PenetrationTesting, dan analisis #CVE.

Saat ini saya sedang mendalami Python untuk networking dan riset kerentanan. Cek dokumentasi teknis saya di sini: https://analis-siber-purwakarta.blogspot.com/

#Indonesia #Infosec #Python #LearningJourney

Here's the thing, there may be more people (if not 99% of the people) on other social networks, but at the end the day, I still need to actually *do something* with my projects or it is all just idle entertainment under the guise of not or I have no idea.

I just want to nerd out on things that are cool to nerd out on and be able to talk about it with people that get it. That is all here.

Here are all the hashtags of things I'm working on and will be posting about, what I'm interested in from others, and whatever adjacent from folks in those spheres bubble up (I want a clubhouse).

#Malware #RedTeaming #PurpleTeaming #SocialEngineering #Vishing #ReverseEngineering

Here's the thing, there may be more people (if not 99% of the people) on other social networks, but at the end the day, I still need to actually *do something* with my projects or it is all just idle entertainment under the guise of not or I have no idea.

I just want to nerd out on things that are cool to nerd out on and be able to talk about it with people that get it. That is all here.

Here are all the hashtags of things I'm working on and will be posting about, what I'm interested in from others, and whatever adjacent from folks in those spheres bubble up (I want a clubhouse).

#Malware #RedTeaming #PurpleTeaming #SocialEngineering #Vishing #ReverseEngineering

PentAGI is an innovative tool for automated security testing that leverages cutting-edge artificial intelligence technologies.

#redteaming

Recently completed the #CAPT (#Certified #Associate #Penetration #Tester) Certification and received the #CWSE (#Certified #Web #Security #Expert) today.

Thanks a lot #Hackviser. This will help add up to the knowledge I have in my #cybersecurity #cybersec #ethicalhacking #redteaming #informationsecurity #infosec skills including the knowledge and skills gotten from my #networking #course from the #CompTIA CompTIA, Inc. #Network+ that I completed recently as well.

However, for me, University of the People is pretty much like a refresher because everything I expected from them has basically already been covered in courses I’ve already done. Haha!

Recently completed the #CAPT (#Certified #Associate #Penetration #Tester) Certification and received the #CWSE (#Certified #Web #Security #Expert) today.

Thanks a lot #Hackviser. This will help add up to the knowledge I have in my #cybersecurity #cybersec #ethicalhacking #redteaming #informationsecurity #infosec skills including the knowledge and skills gotten from my #networking #course from the #CompTIA CompTIA, Inc. #Network+ that I completed recently as well.

However, for me, University of the People is pretty much like a refresher because everything I expected from them has basically already been covered in courses I’ve already done. Haha!

HackTheBox. Прохождение Falafel. Уровень — Сложный

Прохождение сложной Linux машины на платформе HackTheBox под названием Falafel . Предварительно нужно подключиться к площадке HackTheBox по VPN . Желательно использовать отдельную виртуальную машину. Учимся работать с готовыми эксплоитами и metasploit -ом. Разбираем SQLi (Boolean-based Blind), PHP Type Juggling Attack (Magic Hashes), Filename Truncation Attack to Upload a PHP Script.

https://habr.com/ru/articles/1002710/

#hackthebox #htb #redteam #redteaming #pentest #pentesting

HackTheBox. Прохождение HackTheBox — Chatterbox. Уровень — Средний

Прохождение средней Windows машины на платформе HackTheBox под названием Chatterbox . Предварительно нужно подключиться к площадке HackTheBox по VPN . Желательно использовать отдельную виртуальную машину. Учимся работать с готовыми эксплоитами и metasploit -ом.

https://habr.com/ru/articles/1002286/

#hackthebox #htb #redteam #redteaming #pentest #pentesting

HackTheBox. Прохождение CrimeStoppers. Уровень — Сложный

Прохождение сложной Linux машины на платформе HackTheBox под названием CrimeStoppers . Предварительно нужно подключиться к площадке HackTheBox по VPN . Желательно использоваться отдельную виртуальную машину. Реверсим приложение c помощью IDA PRO , потрошим Thunderbird, находим RCE на портале.

https://habr.com/ru/articles/1001618/

#hackthebox #htb #pentest #pentesting #redteam #redteaming

HackTheBox. Прохождение FluxCapacitor. Уровень — Средний

Прохождение средней Linux машины на платформе HackTheBox под названием FluxCapacitor . Предварительно нужно подключиться к площадке HackTheBox по VPN . Желательно использоваться отдельную виртуальную машину. Будет рассмотрен WAF и попытки его обойти.

https://habr.com/ru/articles/1000164/

#hackthebox #htb #pentest #pentesting #redteam #redteaming

HackTheBox. Прохождение Bashed. Для новичков. Ультра-легкий

Прохождение одной из самой легкой машины на платформе HackTheBox под названием Bashed . Предварительно нужно подключиться к площадке HackTheBox по VPN . Желательно использоваться отдельную виртуальную машину.

https://habr.com/ru/articles/996722/

#hackthebox #htb #pentest #pentesting #redteam #redteaming

So, one of my resolutions this year was to write more code.
I love to break stuff, but last year I reignited my passion for coding and I would really love to contribute to the community that has given me so much and continues to do so.
And contributing works a lot better by creating, rather than breaking.

So I created a codeberg account. And I already have a first repo published!
I called it Axmar.
Axmar is a C# implementation of the SilentHarvest technique that was published last year.
It uses backup access and rarely used APIs to (mostly) stealthily read the local credentials database in Windows system.

Enjoy!

https://codeberg.org/Ti-Kallisti/Axmar

#foss #coding #infosec #malware #pentesting #redteaming #codeberg #windows #csharp

So, one of my resolutions this year was to write more code.
I love to break stuff, but last year I reignited my passion for coding and I would really love to contribute to the community that has given me so much and continues to do so.
And contributing works a lot better by creating, rather than breaking.

So I created a codeberg account. And I already have a first repo published!
I called it Axmar.
Axmar is a C# implementation of the SilentHarvest technique that was published last year.
It uses backup access and rarely used APIs to (mostly) stealthily read the local credentials database in Windows system.

Enjoy!

https://codeberg.org/Ti-Kallisti/Axmar

#foss #coding #infosec #malware #pentesting #redteaming #codeberg #windows #csharp

RE: https://mastodon.social/@XC3LL/115990518822402879

Very valuable insight if you are into #redteaming

RE: https://mastodon.social/@XC3LL/115990518822402879

Very valuable insight if you are into #redteaming

https://winbuzzer.com/2025/12/23/openai-deploys-automated-attacker-to-harden-atlas-browser-admits-prompt-injection-is-unsolved-xcxwbn/

OpenAI Deploys Automated 'Attacker' to Harden Atlas Browser, Admits Prompt Injection Is 'Unsolved'

#AI #OpenAI #Cybersecurity #Security #AIAgents #AgenticAI #WebBrowsers #PromptInjection #ChatGPT #ChatGPTAtlas #RedTeaming #InfoSec #BrowserSecurity

📬 Gemini 3 Jailbreak offenbart hochgefährliche Anleitungen
#ITSicherheit #Jailbreaks #AdversarialPrompting #AimIntelligence #Cybersecurity #FrontierModelle #Gemini3 #google #Jailbreak #KISicherheit #RedTeaming #Sicherheitslücke https://sc.tarnkappe.info/4d59c6

via #AIFoundry : Assess Agentic Risks with the AI Red Teaming Agent in Microsoft Foundry

https://ift.tt/K6F7VMx
#MicrosoftFoundry #AI #RedTeaming #AgenticRisks #AIsecurity #AdversarialTesting #PyRIT #TrustworthyAI #Automation #RiskAssessment #NoCode #ContinuousIntegration #Sa…

Is there currently anything better than a #proxmark3? Any reason to not get it?
#fedihelp #redteaming #pentesting

Who keeps AI safe in practice? This #CSCW2025 paper proposes a framework for supporting RAI content workers who moderate, annotate, and red team harmful content. Read more https://tinyurl.com/aiworkersafety-cscw2025 #AI #AIsafety #datawork #redteaming #well-being

Kali Linux 2025.3 just dropped with 10 AI-powered tools that could transform the way we tackle cybersecurity. Ever wondered how AI is reshaping penetration testing? Dive into the future of hacking defense now.

https://thedefendopsdiaries.com/kali-linux-20253-ten-new-tools-redefine-penetration-testing-in-the-age-of-ai/

#kali2025
#penetrationtesting
#cybersecuritytools
#ethicalhacking
#aitools
#networksecurity
#infosec
#linuxsecurity
#redteaming
#cyberthreats