Deldroid's campfire

Will Valid for a week https://t.me/+_wabY9aYJio0MmNk

Full corpus: tagged via GPU (v1.0), enjoy! #hacking #malware #research #threatintel #blueteam

whiskers - a minimalist micro TI / SOC context panel powered by local AI + Malpedia API some AI features: 🧠 brief - a tight SOC brief: what it is, primary risk, and two or three detection ideas. Cached after first generation. 🧠 explain rule - plain-English explanation of a YARA rule and its false-positive risk; turns opaque auto-generated rules into something readable. 💬 ask this family - ask a question answered only from that family's data; it refuses ("Not stated in Malpedia data") rather than guess. TODO (with GPU): semantic search + "similar families" (embeddings) - embedding each family description once (batch processing on the GPU). Then on the CPU: searching for concepts. embeddings and a pre-computed list of "similar families" AI summary for the entire corpus - running something like qwen3:27B once in GPU for all 3763 families to pre-record each SOC synopsis in a synopsis table. #hacking #blueteam #purpleteam #malware #research #apt #threatintel

https://github.com/nikosecurity/CVE-2026-26179/tree/main

https://github.com/danieldev23/trafexia A powerful desktop application for intercepting, analyzing, and manipulating HTTP/HTTPS traffic from mobile devices. Built with Electron, Vue 3, and TypeScript.

https://github.com/BlackSnufkin/BYOVD BYOVD is a collection of PoCs demonstrating how vulnerable drivers can be exploited to disable AV/EDR solutions.

Windows exploits RedSun and UnDefend are not patched yet

https://github.com/XingTuLab/JSIMPLIFIER Powerful, new JS DEobfuscator And the research paper

New persistence method - windows narrator https://trustedsec.com/blog/hack-cessibility-when-dll-hijacks-meet-windows-helpers TL;DR - dll hijacking the narrator, then making the narrator start automatically using accessibility settings. Can also persist as SYSTEM

First known AI-powered ransomware https://x.com/ESETresearch/status/1960365364300087724 AVs/EDRs also use AI. Now it's AI vs AI 🚀🚀🚀

free courses! https://redteamleaders.coursestack.com/courses/

https://blog.deeb.ch/posts/maldev-myths/ Myths about AV/EDR evasion. Interesting as fuck

Red Team Tactics: Writing Windows Kernel Drivers for Advanced Persistence (Part 1) Red Team Tactics: Writing Windows Kernel Drivers for Advanced Persistence (Part 2) This post, as indicated by the title, will cover the topic of writing Windows kernel drivers for advanced persistence. Because the subject matter is relatively complex, I have decided to divide the project into a three or a four part series. This being the first post in the series, it will cover the fundamental information you need to know to get started with kernel development. This includes setting up a development environment, configuring remote kernel debugging and writing your first “Hello World” driver.

https://github.com/dslee2022/SignatureKid copy signature from one file to another and make Windows think it's legit (copied signature won't be valid on any machine, you need to execute things to make the signature trustworthy, it's not for initial access) still cool tho

https://github.com/unicorn-engine/unicorn multi-architecture CPU emulator framework

Decrypt App-Bound encrypted keys in Chrome 127+, using the IElevator COM interface bypassing path validation and encryption protections. https://github.com/xaitax/Chrome-App-Bound-Encryption-Decryption

ThatsThem email lookup script leaked, the code is not obfuscated and looks safe

https://github.com/es3n1n/defendnot Fresh research messing with Windows Security Centre