Extract Windows credentials directly from VM memory snapshots and virtual disks

https://github.com/nikaiw/VMkatz

#infosec #cybersecurity #redteam #pentest #opensource

There is a documented enforcement gap in Conditional Access policies that apply to "all resources" but have an exclusion for at least one resource.

https://dirkjanm.io/bypassing-conditional-access-with-resource-exclusio

#infosec #cybersecurity #redteam #pentest #cloud

This is a proof-of-concept tool to demonstrace CVE-2026-54121 a.k.a Certighost.

https://github.com/aniqfakhrul/CVE-2026-54121

#infosec #cybersecurity #redteam #pentest

Nuclei-like credential surface scanner with BloodHound support. Audits local hosts for exposed secrets, cloud tokens, DevOps, and AI keys.

https://github.com/haxxm0nkey/credshound

#infosec #cybersecurity #redteam #pentest #opensource

ProxyWatch is a real-time process and network behavior monitor for detecting proxy activity, tunnels, C2 sessions, beacons, and lateral movement.

https://github.com/In3x0rabl3/Proxywatch

#infosec #cybersecurity #redteam #pentest #dfir

A post about Git integrations that can be used to exploit insecure implementations.

https://nopnop.pro/2026/06/17/exploiting-git-integrations-in-cloud-services/

#infosec #cybersecurity #redteam #pentest

This blogpost explains how GPOs work and how filters can be applied in order to restrict their impact.

https://www.intrinsec.com/hide-the-threat-gpo-lateral-movement/

#infosec #cybersecurity #redteam #pentest

Living Off the Land Credentials. Public credential defaults, locations, and exposure patterns for real products, SaaS/cloud services, appliances, and deployment packages.

https://github.com/haxxm0nkey/lolcreds-data

#infosec #cybersecurity #redteam #pentest #password

Dump TGTs remotely and convert Windows' klist binary output to ccache.

https://github.com/jakeotte/klist2ccache

#infosec #cybersecurity #redteam #pentest #opensource

Entra ID user enumeration and auth method discovery via the public GetCredentialType API

https://github.com/RedByte1337/CredSpy

#infosec #cybersecurity #redteam #pentest #opensource #cloud

Noma Labs discovered a prompt injection vulnerability within GitHubs new Agentic Workflows, allowing an unauthenticated attacker to silently pull data from private repositories by posting a crafted GitHub Issue

https://noma.security/blog/gitlost-how-we-tricked-githubs-ai-agent-into-leaking-private-repos/

#infosec #cybersecurity #redteam #pentest

A public reference of protocol-level and implementation-level indicators of compromise(IoCs) for detecting Impacket-driven activity.

https://github.com/ThatTotallyRealMyth/Impacket-IoCs

#infosec #cybersecurity #redteam #pentest