# red team

Published articles for red team.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Legba: An Asynchronous Rust Framework for Authentication Bruteforcing

DevFeed: [Legba: An Asynchronous Rust Framework for Authentication Bruteforcing](<https://devfeed.tech/articles/enumerate-bruteforce-attack-all-the-things-presenting-legba-41268.md>)

Original publisher: [Read original article](<https://www.evilsocket.net/2023/11/02/Enumerate-Bruteforce-Attack-All-The-Things-Presenting-Legba/>)

Author: Simone Margaritelli

Published: 2023-11-02T16:46:32Z

Content type: opinion

Language: en

Sources: [evilsocket](<https://devfeed.tech/sources/evilsocket.md>)

Topics: [Tool](<https://devfeed.tech/topics/tool.md>), [Rust](<https://devfeed.tech/topics/rust.md>), [Tokio](<https://devfeed.tech/topics/tokio.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [Code](<https://devfeed.tech/topics/code.md>)

Tags: [amqp](<https://devfeed.tech/tags/amqp.md>), [async](<https://devfeed.tech/tags/async.md>), [asynchronous](<https://devfeed.tech/tags/asynchronous.md>), [authentication](<https://devfeed.tech/tags/authentication.md>), [benchmark](<https://devfeed.tech/tags/benchmark.md>), [bruteforce](<https://devfeed.tech/tags/bruteforce.md>), [cassandra](<https://devfeed.tech/tags/cassandra.md>), [csrf-token](<https://devfeed.tech/tags/csrf-token.md>), [dns-subdomain-enumeration](<https://devfeed.tech/tags/dns-subdomain-enumeration.md>), [http](<https://devfeed.tech/tags/http.md>), [hydra](<https://devfeed.tech/tags/hydra.md>), [imap](<https://devfeed.tech/tags/imap.md>), [kerberos](<https://devfeed.tech/tags/kerberos.md>), [kerberos-pre-authentication](<https://devfeed.tech/tags/kerberos-pre-authentication.md>), [ldap](<https://devfeed.tech/tags/ldap.md>), [legba](<https://devfeed.tech/tags/legba.md>), [mongodb](<https://devfeed.tech/tags/mongodb.md>), [mssql](<https://devfeed.tech/tags/mssql.md>), [multi-protocol](<https://devfeed.tech/tags/multi-protocol.md>), [mysql](<https://devfeed.tech/tags/mysql.md>), [ntlm](<https://devfeed.tech/tags/ntlm.md>), [offensive-tools](<https://devfeed.tech/tags/offensive-tools.md>), [oracle](<https://devfeed.tech/tags/oracle.md>), [password](<https://devfeed.tech/tags/password.md>), [pgsql](<https://devfeed.tech/tags/pgsql.md>), [pop3](<https://devfeed.tech/tags/pop3.md>), [project-release](<https://devfeed.tech/tags/project-release.md>), [rdp](<https://devfeed.tech/tags/rdp.md>), [red-team](<https://devfeed.tech/tags/red-team.md>), [rust](<https://devfeed.tech/tags/rust.md>), [tokio](<https://devfeed.tech/tags/tokio.md>), [tool](<https://devfeed.tech/tags/tool.md>), [wordlist](<https://devfeed.tech/tags/wordlist.md>)

### AI overview

The article presents Legba, a Rust-based authentication bruteforcing tool developed as an asynchronous and modular alternative to tools such as THC Hydra. It discusses the motivation, design objectives, supported features, and a limited localhost benchmark comparing Legba with Hydra.

### Source excerpt

During the last few weeks I've been working on a new tool that started as a way for me to become more familiar with Rust and its

## Building an Application Security Team

DevFeed: [Building an Application Security Team](<https://devfeed.tech/articles/building-an-application-security-team-36672.md>)

Original publisher: [Read original article](<https://shostack.org/blog/application-security-team/>)

Author: Jonathan Marcil

Published: 2017-10-15T00:00:00Z

Content type: opinion

Language: en

Sources: [Shostack & Friends Blog](<https://devfeed.tech/sources/shostack-friends-blog.md>)

Topics: [Application Security](<https://devfeed.tech/topics/application-security.md>), [Security](<https://devfeed.tech/topics/security.md>)

Tags: [application-security](<https://devfeed.tech/tags/application-security.md>), [critical](<https://devfeed.tech/tags/critical.md>), [false-positives](<https://devfeed.tech/tags/false-positives.md>), [red-team](<https://devfeed.tech/tags/red-team.md>), [security](<https://devfeed.tech/tags/security.md>), [team](<https://devfeed.tech/tags/team.md>), [teams](<https://devfeed.tech/tags/teams.md>)

### AI overview

The article discusses how to build an application security team and why the role requires both broad and specialized skills. It contrasts product-based security tools with penetration testing services, comparing their coverage, accuracy, false positives, creativity, and technical depth. It also describes the evolution of penetration testing toward Red Team operations.

### Source excerpt

[no description provided]