BestHub
Sign in
Tagged articles
17 articles
Page 1 of 1
Black & White Path
Black & White Path
May 29, 2026 · Information Security

GhostType: Open‑Source Forensic Scanner for Leaked Credentials in AI Chat Histories

GhostType is an open‑source forensic scanner that parses local conversation files from popular AI coding assistants, uses TruffleHog’s 800+ detectors plus custom regex rules to locate exposed API keys or passwords, verifies their validity in real time, and outputs detailed JSON or CSV reports for red‑team or DLP use.

AI assistantsDLPGhostType
0 likes · 3 min read
GhostType: Open‑Source Forensic Scanner for Leaked Credentials in AI Chat Histories
Black & White Path
Black & White Path
May 13, 2026 · Information Security

Comprehensive Red Team Information‑Gathering Guide

This article presents a step‑by‑step red‑team information‑gathering methodology covering domain CDN detection, real‑IP extraction, subdomain enumeration, DNS history analysis, SSL certificate probing, host‑IP collision, company‑level queries, and a curated list of open‑source tools and command‑line examples for each phase.

CDN BypassInformation GatheringNetwork Scanning
0 likes · 19 min read
Comprehensive Red Team Information‑Gathering Guide
Black & White Path
Black & White Path
May 5, 2026 · Information Security

KreiosC2 v3: Using Social Media as a Botnet C2 Server

KreiosC2 v3 replaces traditional command‑and‑control servers with Twitter and LinkedIn posts, adds Windows support, and introduces dynamic control language updates, while outlining evasion tactics, detection challenges, and defensive measures for red‑team and blue‑team practitioners.

C2KreiosC2LinkedIn
0 likes · 4 min read
KreiosC2 v3: Using Social Media as a Botnet C2 Server
Black & White Path
Black & White Path
Mar 30, 2026 · Information Security

Chrome Users Beware: Google Patches Eight Critical Zero‑Click Vulnerabilities

Google has issued an emergency update that patches eight high‑severity Chrome flaws capable of zero‑click remote hijacking, detailing the red‑team exploitation opportunities, the blue‑team rapid response timeline, the broader Chromium impact, and practical steps users should take to stay protected.

Blue TeamBrowser SecurityCVE-2026
0 likes · 10 min read
Chrome Users Beware: Google Patches Eight Critical Zero‑Click Vulnerabilities
Black & White Path
Black & White Path
Mar 17, 2026 · Information Security

Red Team Playbook: From External Breach to Internal Network Domination

This guide walks through the full red‑team workflow—from reconnaissance and initial access through defense evasion, credential theft, lateral movement, and operational security—detailing concrete tools, commands, and techniques for compromising both external and internal networks.

Lateral MovementOPSECOSINT
0 likes · 10 min read
Red Team Playbook: From External Breach to Internal Network Domination
Black & White Path
Black & White Path
Mar 11, 2026 · Information Security

AI Doctor Can Be Hijacked to Alter Prescription Dosage and Give Wrong Medical Advice

Security researchers demonstrated that Doctronic’s AI doctor can be easily hijacked via prompt‑injection attacks, allowing attackers to leak system prompts, alter the AI’s memory, fabricate SOAP notes and even inflate prescription dosages, raising serious concerns for medical AI safety despite claimed safeguards.

AI safetyDoctronicSOAP notes
0 likes · 6 min read
AI Doctor Can Be Hijacked to Alter Prescription Dosage and Give Wrong Medical Advice
Huolala Safety Emergency Response Center
Huolala Safety Emergency Response Center
Jan 21, 2026 · Information Security

How to Build an Automated Red‑Team Framework for LLM Security Testing

This article presents a systematic approach to evaluating large language model (LLM) safety by constructing an automated red‑team testing platform that measures prompt jailbreak, privacy leakage, and tool‑execution risks, defines quantitative metrics, compares commercial and open‑source models, and outlines a continuous evolution pipeline for attack samples.

AI safetyLLM Securityadversarial testing
0 likes · 20 min read
How to Build an Automated Red‑Team Framework for LLM Security Testing
Huolala Tech
Huolala Tech
Jan 21, 2026 · Artificial Intelligence

Building an Automated Red‑Team Framework for LLM Security Testing

This article presents a systematic approach to evaluating large language model security by defining threat models, categorizing attack surfaces such as jailbreak and privacy leakage, and describing an automated red‑team platform that generates, mutates, scores, and evolves adversarial prompts to continuously assess model robustness.

LLM SecurityRisk Assessmentadversarial AI
0 likes · 20 min read
Building an Automated Red‑Team Framework for LLM Security Testing
DevOps Coach
DevOps Coach
Jan 8, 2026 · Information Security

Why VPNs Are Obsolete: 12 Top Zero‑Trust Tools to Secure Your Network

This article explains why traditional VPNs are increasingly insecure, outlines the core principles of zero‑trust security, reviews twelve leading zero‑trust solutions with features, real‑world red‑team examples and quick‑setup commands, and provides a step‑by‑step migration guide from VPN to zero‑trust.

Access ControlVPN replacementZero Trust
0 likes · 21 min read
Why VPNs Are Obsolete: 12 Top Zero‑Trust Tools to Secure Your Network
DevOps
DevOps
Jul 6, 2021 · Information Security

Security Chaos Engineering (SCE): Concepts, Challenges, Benefits, and the ChaoSlingr Case Study

The article introduces Security Chaos Engineering (SCE) as a proactive experimental approach to uncover security control failures, discusses the limitations of traditional red/blue/purple team exercises, outlines SCE's advantages, and presents the open‑source ChaoSlingr framework as a practical implementation example.

SCEchaos engineeringpurple team
0 likes · 8 min read
Security Chaos Engineering (SCE): Concepts, Challenges, Benefits, and the ChaoSlingr Case Study
Huolala Tech
Huolala Tech
Nov 11, 2020 · Information Security

How Red Team Techniques Uncover Phishing Attack Origins: A Step‑by‑Step Guide

This article demonstrates how red‑team methods can be applied to phishing traceability, detailing phishing classifications, email‑header extraction, malicious site analysis, web‑shell decryption, privilege‑escalation techniques, log mining, and attacker attribution to reconstruct the full attack chain.

Webshellemail analysislog analysis
0 likes · 33 min read
How Red Team Techniques Uncover Phishing Attack Origins: A Step‑by‑Step Guide
DevOps Cloud Academy
DevOps Cloud Academy
Dec 6, 2019 · Information Security

Jenkins Security Threats: Attack Vectors, Exploitation Techniques, and Mitigation Strategies

This article examines how adversaries target Jenkins automation servers, detailing common discovery methods, exploitation techniques such as Java deserialization and mis‑configured authentication, and practical red‑team demonstrations of credential extraction, script‑console abuse, and malicious job creation to illustrate mitigation recommendations.

Credential TheftDevOpsJenkins
0 likes · 14 min read
Jenkins Security Threats: Attack Vectors, Exploitation Techniques, and Mitigation Strategies