SEKTOR7 Institute

Life-time access is so back! From now on, individuals can get life-time access to all of our online courses. Learning how specific TTPs work, understanding coding, debugging and troubleshooting is much simpler with video-based content. Check it out - institute.sektor7.net/consumer #redteam #blueteam #elearning #maldev #malwaredevelopment

Silencing the EDR Silencers Analysis of techniques to disable or silence EDR agents and some countermeasures, a post by Jonathan Johnson (@JonnyJohnson_ ) Source: huntress.com/blog/silencing… #redteam #blueteam #maldev #malwaredevelopment

Stop settling for fluff. x33fcon 2026 training in Gdynia is 100% hands-on. Master the trenches with: 🤖 AI Security: @hramados 🤖 AI SecureOps: @abhinavbom 🐧 Linux: @cr0nym ☁️ Azure: @matthieubjl & Paul 🕵️ eCrime: @jark 🦠 Malware: @DrCh40s & @t0nvi 🍎 macOS: @surya4n6 🔑 AD: @wil_fri3d & Hugo 💻 Windows: @zodiacon 🔓 Physical: @tatramaco & Jiri Regular rates end April 30. Prices jump May 1. Full lineup in the thread below 🧵👇

Wyrm for Red Teams A Rust-based post exploitation, open source, Red Team security testing framework, by @0xfluxsec Source: docs.wyrm-c2.com #redteam #blueteam #maldev #malwaredevelopment

Remote EDR Discovery. Methods for detecting remote EDR deployments without local agent presence, a post by Jonathan Johnson (@JonnyJohnson_ ) Source: jonny-johnson.medium.com/no-agent-no-pr… #redteam #blueteam #maldev #malwaredevelopment

BypassAV list Map listing essential techniques to bypass anti-virus and EDR, in HTML and markdown format. A post by matro7ch habibi. Source: github.com/matro7sh/Bypas… #redteam #blueteam #maldev #malwaredevelopment

Initial Access with sideloading. Using DLL sideloading for initial access in red team operations. A post by @Print3M_ Source: print3m.github.io/blog/dll-sidel… #redteam #blueteam #maldev #malwaredevelopment

Persistence Techniques That Persist An overview of evolving persistence methods in malware and red team operations. A post by Ari Novick. Source: cyberark.com/resources/thre… #redteam #blueteam #maldev #malwaredevelopment

Remote DLL Injection with Timer-based Shellcode Execution Using classic DLL injection with CreateThreadpoolTimer to run shellcode in-memory using legit system threads. A tool by Andrea Bocchetti (andreisss) Source: github.com/andreisss/Remo… #redteam #blueteam #maldev #malwaredevelopment

Shuffle and TheHive for automatic Threat Detection A practical guide on building a SOC automation for Threat Detection lifecycle. A post by Hariharan Source: @hariharanss/soc-automation-automating-threat-detection-and-real-time-response-with-shuffle-and-thehive-2589d4e82cf8" target="_blank" rel="nofollow noopener">medium.com/@hariharanss/s… #redteam #blueteam #maldev #malwaredevelopment

Mythic C2 on EarlyBird. Leveraging Asynchronous Procedure Calls to execute memory-only shellcode within a legitimate process to avoid detection. A post by Ivan Spiridonov (@xbz0n) Source: xbz0n.sh/blog/mythic-c2… #redteam #blueteam #maldev #malwaredevelopment

xc - a lightweight reverse shell. Written in golang, works on both Linux and Windows. It is designed for simplicity and provides a basic mechanism for remote command execution. A tool by Martin Mielke (@xct_de) Source: github.com/xct/xc #redteam #blueteam #maldev #malwaredevelopment

Hijacking threads via ROP chains. A stealthy injection technique that manipulates existing threads to execute malicious code. A post by Umarex. Source: infosecwriteups.com/t-rop-h-thread… #redteam #blueteam #maldev #malwaredevelopment

SockTail - connecting target via a Tailscale network Red Team Operators should find it useful. A tool by @Yeeb_ Source: github.com/Yeeb1/SockTail #redteam #blueteam #maldev #malwaredevelopment

AV/EDR Lab Environment Setup A curated list of various resources helpful in building own malware-centric research lab. A post by Udayveer Singh (@m4lici0u5) Source: an0nud4y.notion.site/AV-EDR-Lab-Env… #redteam #blueteam #maldev #malwaredevelopment

DllShimmer - DLL proxy automation. The tool parses original DLLs to generate C++ projects, allowing users to insert custom code while maintaining functionality. A post by @Print3M_ Source: print3m.github.io/blog/dll-sidel… #redteam #blueteam #maldev #malwaredevelopment

@0xSero You might find greenboost driver helpful: forums.developer.nvidia.com/t/nvidia-green…

Kimi is going to fit on GPUs and I won't stop until it does. ):<

OtterCookie - a stealthy stealer malware from Lazarus Group. It targets browser credentials and crypto wallets. The post describes its delivery via fake job offers and its modular approach, often serving as a precursor to more advanced implants like InvisibleFerret. A post by Mauro Eldritch (@MauroEldritch ) Source: any.run/cybersecurity-… #redteam #blueteam #malware #malwaredevelopment

EDR bypassing with arg obfuscation. Use shell-independent command-line obfuscation (ArgFuscator) to test various EDR solutions. A post by Wietze Beukema (@Wietze ). Source: wietzebeukema.nl/blog/bypassing… #redteam #blueteam #maldev #malwaredevelopment

Bypassing Bitlocker encryption with bitpixie. A flaw in the Windows boot manager allowing local privilege escalation and BitLocker encryption bypass. Downgrading attack on the boot configuration data (BCD) can be used to unlock encrypted partitions. A post by Andreas Zeno Grasser. Source: blog.syss.com/posts/bitpixie/ #redteam #blueteam #maldev #malwaredevelopment