@ipurple

Red/Purple Teamer | Blogger | Mod @ https://nitter.cf/t.co/f4RyUGl0zb | https://nitter.cf/t.co/nLrzzAcQw9

 Internet
ipurple.team
Joined January 2012
  • Tweets15.6K
  • Following824
  • Followers27.3K
1.2KMedia
If you are looking at cyber security training, I wrote an article to highlight 4 companies to follow/attend their trainings
Panos Gkatziroulis 🦄
@ipurple
Sep 24

Cyber Training in the AI Era

Article · @ipurple
4
1,100
ADE Skills - Adversarial Detection Engineering Knowledge Base ADE taxonomy, worked technique files, platform bug patterns, mitigations, and purple-team scoping tooling. github.com/Adversarial-Detec…

GitHub - Adversarial-Detection-Engineering/adeskills: Adversarial Detection Engineering knowledge...

Adversarial Detection Engineering knowledge base — ADE taxonomy, worked technique files, platform bug patterns, mitigations, and purple-team scoping tooling. - Adversarial-Detection-Engineering/ade...

github.com
11
52
2,579
Build guide for Red Teaming home lab. GOAD lab setup in Proxmox and pfSense, Operator/C2, and Redirectors. github.com/pho5nix/Red-Team-…

GitHub - pho5nix/Red-Team-GOAD-Lab-Proxmox: Build guide for Red Teaming home lab. GOAD lab setup in...

Build guide for Red Teaming home lab. GOAD lab setup in Proxmox and pfSense, Operator/C2 and Redirectors. - pho5nix/Red-Team-GOAD-Lab-Proxmox

github.com
2
25
115
4,792
InjectSetConsole - Performs process code injection by leveraging a Windows named pipe. Unlike traditional techniques, it does not use the: ✅ VirtualAllocEx & ✅ WriteProcessMemory APIs github.com/TwoSevenOneT/Inje…

GitHub - TwoSevenOneT/InjectSetConsole: Proof of Concept for Process Code Injection Without Using...

Proof of Concept for Process Code Injection Without Using WriteProcessMemory - TwoSevenOneT/InjectSetConsole

github.com
3
19
85
5,005
notRDP - A Havoc C2 plugin that creates an invisible alternate Windows desktop, streams it to a browser-based viewer, and supports full mouse/keyboard interaction like RDP, but invisible to the target user github.com/dagowda/notRDP

GitHub - dagowda/notRDP

Contribute to dagowda/notRDP development by creating an account on GitHub.

github.com
4
58
287
11,475
DDE Callback Hijacking - A Process Injection Technique medium.com/@jaytiwari05/dde-…

DDE Callback Hijacking -A Process Injection Technique

I’m Jay, a student exploring the offensive security space with a focus on red teaming and malware development. I spend my time studying…

medium.com
1
26
90
6,320
Panos Gkatziroulis 🦄 retweeted
Jeremy
@sysfai1
Sep 26
Cyber training.... 👇
Panos Gkatziroulis 🦄
@ipurple
Sep 24

Cyber Training in the AI Era

Article · @ipurple
1
1
609
MemGuard - Zero-Dependency LSASS Memory Shield & EDR Hook Detector github.com/prox0959/MemGuard

GitHub - prox0959/MemGuard

Contribute to prox0959/MemGuard development by creating an account on GitHub.

github.com
1
18
41
2,595
LocalStranger - create a driver mapper to map unsigned kernel drivers into kernel space, and a program to elevate the user to NT-AUTHORITY github.com/nbs32k/LocalStran…

GitHub - nbs32k/LocalStranger: PoC for WinNotify, demonstrated through a driver mapper, and local...

PoC for WinNotify, demonstrated through a driver mapper, and local privilege escalation. - nbs32k/LocalStranger

github.com
8
14
54
2,975
Even more privileged ADCS ESC_CES adhdmurky.github.io/posts/po…

Even more privileged ADCS ESC_CES

For a long time, when people talked about NTLM relay to AD CS, the conversation usually focused on classic Web Enrollment on the following endpoints: /certsrv/ /certsrv/certfnsh.asp But AD CS has one...

adhdmurky.github.io
35
2
132
10,534
Purple Team Automation - Automated adversary emulation (Caldera) against an AD lab to validate Sigma detection coverage and map results to MITRE ATT&CK github.com/joshuagodwin7929/…

GitHub - joshuagodwin7929/Purple-Team-Automation: Automated adversary emulation (Caldera) against...

Automated adversary emulation (Caldera) against an AD lab to validate Sigma detection coverage and map results to MITRE ATT&CK. - joshuagodwin7929/Purple-Team-Automation

github.com
1
42
224
8,721
Panos Gkatziroulis 🦄 retweeted
Panos Gkatziroulis 🦄
@ipurple
Sep 24

Cyber Training in the AI Era

Article · @ipurple
4
2
11
3,629

Cyber Training in the AI Era

Article · @ipurple
4
2
11
3,629
🎙️ Earlier this week, I wrote about the Dump Encoding Library case that was disclosed recently. 💭 Are ransomware groups going to use the WerEnc.dll library to perform the encryption in the future? Possibly. The full flow of the technique is displayed below: 🖊️ ipurple.team/2026/09/21/dump…
1
13
1,073
Bypassing EDR with Local AI projectblack.io/blog/bypassi…

Bypassing EDR with Local AI

How hard is it to bypass EDR in the modern times with AI? As it turns out, not very hard.

projectblack.io
55
282
17,156
Playing with old techniques - Module Stomping in .NET
15
1,630
I wonder what would happen to Cyber if Anthropic decides to kill Sonnet 4.6 😀
9
1,148
OnTheEdge - a small Windows research PoC written in C for studying credential-related data that may be present in the memory of Microsoft Edge processes while the browser is running. github.com/JssNGC/OnTheEdge

GitHub - JssNGC/OnTheEdge: Edge Credential Dumper

Edge Credential Dumper. Contribute to JssNGC/OnTheEdge development by creating an account on GitHub.

github.com
6
26
2,063
Red Team vs Pentest: Active Directory Attack Workflow stillbigjosh.com/writeup.htm…
2
32
107
5,862
Load more