The article introduces a free, open‑source Active Directory enumeration mindmap that visualizes every AD attack path—from user and computer discovery to Kerberos and BloodHound data collection—providing red‑team practitioners with a systematic, fast, and comprehensive reconnaissance workflow.
The 2026 Cyber Shield exercise, the U.S. Department of Defense’s largest non‑classified cyber‑defense drill, focused on OT and power‑grid security, while China’s Protective Net emphasized real‑world attack‑defense and rapid remediation, highlighting differing goals, scopes, and international collaboration between the two nations.
This tutorial walks through essential PowerShell techniques for red‑team operations, covering command basics, credential harvesting, execution‑policy bypass, file download, in‑memory payloads, downgrade attacks, anti‑AV evasion, persistence, hidden execution, command‑history handling, scheduled‑task abuse, session management, log cleaning, and a stealthy Utilman backdoor.
Security researcher aniziki discovered that the `/btw` command in Claude Code runs in an isolated side‑channel, allowing requests blocked by the main‑dialogue guard to be answered there and then forked back into the normal session, effectively bypassing Claude Fable 5’s protective mechanisms.
The article provides a detailed technical assessment of the open‑source 1.5 billion‑parameter security‑SLM‑1.5B language model, covering its architecture, quantized GGUF format, blue‑team and red‑team capabilities, training metrics, performance improvements, and step‑by‑step deployment on CPU via Ollama, llama.cpp, and Python.
recon-skills is a community‑maintained open‑source repository that bundles 156 offensive security skills—validated on over 600 real targets across more than 45 industries—covering information gathering, vulnerability discovery, attack‑chain construction, and anti‑detection techniques, with full manuals and quick‑start instructions.
CredSpy, an open‑source tool released by security researcher RedByte1337, leverages Microsoft’s public GetCredentialType API to enumerate, without any authentication, the full set of supported authentication methods for a given Microsoft 365 (Entra ID) account, aiding red‑team reconnaissance and defensive assessments.
The BugTraceAI CORE Ultra 27B model, fine‑tuned on 2,541 real vulnerability reports, generates fully functional Nuclei templates, CVE PoCs, webshell bypasses, JWT cracking tools, and kernel exploits with a 0 % rejection rate, and its quantized Q4 version runs on a single 24 GB GPU, making advanced red‑team automation accessible.
An NSA director allegedly said Anthropic’s Mythos AI breached almost every classified system within hours, sparking a ten‑day silence, viral social‑media exposure, conflicting official and Anthropic narratives, and raising urgent questions about AI‑driven cyber‑offense, red‑team testing, and regulatory gaps.
Storm‑Breaker is an open‑source red‑team framework built with PHP and Python that provides device information harvesting, real‑time location tracking, remote camera and microphone access via deceptive web pages, offers a visual web panel, supports multiple deployment platforms (Kali, macOS, Android/Termux, self‑hosted), and includes installation commands, default credentials, and legal usage guidelines.
OALABS recovered over 1,000 Claude and Codex session logs from a compromised server, revealing how the attackers duplicated AI agents, used them for reconnaissance, vulnerability exploitation, data theft, and even attempted cryptocurrency cracking across at least 14 companies, demonstrating that AI agents can dramatically lower the technical barrier for sophisticated cyber‑attacks.
A teenage developer built a no‑registration site where real people answer questions as AI, amassing 50 million visits in three months, and the article analyzes its design, points economy, addictive appeal, and the contrasting red‑team and blue‑team perspectives.
c2detect is a command‑line static fingerprint scanner that quickly identifies popular C2 frameworks such as Cobalt Strike, Sliver, Mythic, Havoc and Brute Ratel in files, directories or API inputs, outputs risk scores in JSON, SARIF or MCP formats, and integrates seamlessly into CI/CD pipelines and AI agents.
KeyHacks lets security engineers quickly test the validity of more than a hundred different API keys by providing ready‑made curl commands, eliminating the need to write code or read documentation and streamlining red‑team workflows.
GhostType is an open‑source forensic scanner that parses local conversation files from popular AI coding assistants, uses TruffleHog’s 800+ detectors plus custom regex rules to locate exposed API keys or passwords, verifies their validity in real time, and outputs detailed JSON or CSV reports for red‑team or DLP use.
An AI‑assisted knowledge base that details practical red‑team evasion techniques—including PHP webshell stealth, AdaptixC2 BOF development, Java memory‑horse payloads, and Ghost Bits attacks—while explaining the underlying principles, compatibility constraints, and common pitfalls.
This article presents a step‑by‑step red‑team information‑gathering methodology covering domain CDN detection, real‑IP extraction, subdomain enumeration, DNS history analysis, SSL certificate probing, host‑IP collision, company‑level queries, and a curated list of open‑source tools and command‑line examples for each phase.
HackingTool is an open‑source all‑in‑one penetration‑testing toolbox that bundles over 185 security tools into a single interactive terminal menu, offering quick one‑command installation, Docker support, and categorized modules that streamline red‑team workflows.
KreiosC2 v3 replaces traditional command‑and‑control servers with Twitter and LinkedIn posts, adds Windows support, and introduces dynamic control language updates, while outlining evasion tactics, detection challenges, and defensive measures for red‑team and blue‑team practitioners.
This article details a red‑team engagement against a 30‑employee company that lacked a public website, describing how the team used phishing emails, custom Cobalt Strike payloads, shellcode encryption, internal network scanning, and a router tunnel to obtain footholds and extract data.
Google has issued an emergency update that patches eight high‑severity Chrome flaws capable of zero‑click remote hijacking, detailing the red‑team exploitation opportunities, the blue‑team rapid response timeline, the broader Chromium impact, and practical steps users should take to stay protected.
This guide walks through the full red‑team workflow—from reconnaissance and initial access through defense evasion, credential theft, lateral movement, and operational security—detailing concrete tools, commands, and techniques for compromising both external and internal networks.
Promptfoo is an open‑source framework that lets AI developers automate prompt evaluation, compare large‑model outputs, and perform red‑team security scans, turning LLM application development from guesswork into a measurable, engineering‑driven process.
Security researchers demonstrated that Doctronic’s AI doctor can be easily hijacked via prompt‑injection attacks, allowing attackers to leak system prompts, alter the AI’s memory, fabricate SOAP notes and even inflate prescription dosages, raising serious concerns for medical AI safety despite claimed safeguards.
This article presents a systematic approach to evaluating large language model (LLM) safety by constructing an automated red‑team testing platform that measures prompt jailbreak, privacy leakage, and tool‑execution risks, defines quantitative metrics, compares commercial and open‑source models, and outlines a continuous evolution pipeline for attack samples.
This article presents a systematic approach to evaluating large language model security by defining threat models, categorizing attack surfaces such as jailbreak and privacy leakage, and describing an automated red‑team platform that generates, mutates, scores, and evolves adversarial prompts to continuously assess model robustness.
This article explains why traditional VPNs are increasingly insecure, outlines the core principles of zero‑trust security, reviews twelve leading zero‑trust solutions with features, real‑world red‑team examples and quick‑setup commands, and provides a step‑by‑step migration guide from VPN to zero‑trust.
The article explains the nationwide "Huwang" cybersecurity red‑blue exercise, its purpose, rules, team roles, scheduling, and the lucrative daily earnings (1.5K‑3K ¥) for participants, while also showing how alumni can get internal referrals through the training institute.
The article introduces Security Chaos Engineering (SCE) as a proactive experimental approach to uncover security control failures, discusses the limitations of traditional red/blue/purple team exercises, outlines SCE's advantages, and presents the open‑source ChaoSlingr framework as a practical implementation example.
This article demonstrates how red‑team methods can be applied to phishing traceability, detailing phishing classifications, email‑header extraction, malicious site analysis, web‑shell decryption, privilege‑escalation techniques, log mining, and attacker attribution to reconstruct the full attack chain.
This article examines how adversaries target Jenkins automation servers, detailing common discovery methods, exploitation techniques such as Java deserialization and mis‑configured authentication, and practical red‑team demonstrations of credential extraction, script‑console abuse, and malicious job creation to illustrate mitigation recommendations.
