#RedTeam
1. Offensive tooling notes and experiments in AutoIt v.3
https://github.com/V1V1/OffensiveAutoIt
2. Scan installed EDRs/AVs on Windows
https://www.fourcore.vision/blogs/Red-Team-Adventure:-Digging-into-Windows-Endpoints-for-EDRs-and-profit-cUf
]-> https://github.com/FourCoreLabs/EDRHunt
@BlueRedTeam
1. Offensive tooling notes and experiments in AutoIt v.3
https://github.com/V1V1/OffensiveAutoIt
2. Scan installed EDRs/AVs on Windows
https://www.fourcore.vision/blogs/Red-Team-Adventure:-Digging-into-Windows-Endpoints-for-EDRs-and-profit-cUf
]-> https://github.com/FourCoreLabs/EDRHunt
@BlueRedTeam
GitHub
GitHub - V1V1/OffensiveAutoIt: Offensive tooling notes and experiments in AutoIt v3 (https://www.autoitnoscript.com/site/autoit/)
Offensive tooling notes and experiments in AutoIt v3 (https://www.autoitnoscript.com/site/autoit/) - V1V1/OffensiveAutoIt
tbone_v1.0.pdf
482.2 KB
#exploit
TBONE - A zero-click exploit for Tesla MCUs
]-> https://github.com/firmianay/security-paper/tree/master/Vehicle/TBONE%E2%80%93A_zero-click_exploit_for_Tesla_MCUs
@BlueRedTeam
TBONE - A zero-click exploit for Tesla MCUs
]-> https://github.com/firmianay/security-paper/tree/master/Vehicle/TBONE%E2%80%93A_zero-click_exploit_for_Tesla_MCUs
@BlueRedTeam
#RedTeam
A collection of handy and specific tools for the Red Teamer
https://github.com/Vyiel/RedTeamPets
@BlueRedTeam
A collection of handy and specific tools for the Red Teamer
https://github.com/Vyiel/RedTeamPets
@BlueRedTeam
GitHub
GitHub - Vyiel/RedTeamPets: A collection of handy and specific tools for the Red Teamer
A collection of handy and specific tools for the Red Teamer - GitHub - Vyiel/RedTeamPets: A collection of handy and specific tools for the Red Teamer
#exploit
1. CVE-2021-40865:
https://github.com/hktalent/CVE-2021-40865
2. CVE-2021-24084:
Windows MDM LPE
https://github.com/ohnonoyesyes/CVE-2021-24084
]-> Micropatching Unpatched LPE in Mobile Device Management Service
https://blog.0patch.com/2021/11/micropatching-unpatched-local-privilege.html
@BlueRedTeam
1. CVE-2021-40865:
https://github.com/hktalent/CVE-2021-40865
2. CVE-2021-24084:
Windows MDM LPE
https://github.com/ohnonoyesyes/CVE-2021-24084
]-> Micropatching Unpatched LPE in Mobile Device Management Service
https://blog.0patch.com/2021/11/micropatching-unpatched-local-privilege.html
@BlueRedTeam
GitHub
GitHub - hktalent/CVE-2021-40865: CVE-2021-40865
CVE-2021-40865. Contribute to hktalent/CVE-2021-40865 development by creating an account on GitHub.
#BlueTeam
Memory Forensics R&D Illustrated:
Detecting Mimikatz's Skeleton Key Attack
https://volatility-labs.blogspot.com/2021/10/memory-forensics-r-illustrated.html?m=1
@BlueRedTeam
Memory Forensics R&D Illustrated:
Detecting Mimikatz's Skeleton Key Attack
https://volatility-labs.blogspot.com/2021/10/memory-forensics-r-illustrated.html?m=1
@BlueRedTeam
Blogspot
Memory Forensics R&D Illustrated: Detecting Mimikatz's Skeleton Key Attack
In this blog post, we are going to walk you through the research and development process that leads to new and powerful memory analysis capa...
#Threat_Research
Keybase App Vulnerability:
Incomplete Cleanup of Messages In Keybase
for Android/iOS (CVE-2021-34421)
https://www.oliviaohara.com/keybase
@BlueRedTeam
Keybase App Vulnerability:
Incomplete Cleanup of Messages In Keybase
for Android/iOS (CVE-2021-34421)
https://www.oliviaohara.com/keybase
@BlueRedTeam
OLIVIA O'HARA
CVE-2022-22779: Retained Exploded Messages in Keybase Clients for macOS and Windows — OLIVIA O'HARA
In Keybase desktop versions before 5.9.0, users can retain "exploded" messages with a few clever clicks, meaning your sensitive chats may be read after you want them gone.
#tools
#BlueTeam
Testing TLS/SSL encryption anywhere on any port
https://github.com/drwetter/testssl.sh
@BlueRedTeam
#BlueTeam
Testing TLS/SSL encryption anywhere on any port
https://github.com/drwetter/testssl.sh
@BlueRedTeam
GitHub
GitHub - testssl/testssl.sh: Testing TLS/SSL encryption anywhere on any port
Testing TLS/SSL encryption anywhere on any port . Contribute to testssl/testssl.sh development by creating an account on GitHub.
#RedTeam
How to execute shellcodes from memory in Rust
https://kerkour.com/rust-execute-from-memory
]-> 8 techniques to achieve RCE on developers', CI/CD, or users' machines:
https://kerkour.com/rust-crate-backdoor
@BlueRedTeam
How to execute shellcodes from memory in Rust
https://kerkour.com/rust-execute-from-memory
]-> 8 techniques to achieve RCE on developers', CI/CD, or users' machines:
https://kerkour.com/rust-crate-backdoor
@BlueRedTeam
#exploit
A Collection of Chrome Sandbox Escape POCs/Exploits
for learning
https://github.com/allpaca/chrome-sbx-db
@BlueRedTeam
A Collection of Chrome Sandbox Escape POCs/Exploits
for learning
https://github.com/allpaca/chrome-sbx-db
@BlueRedTeam
GitHub
GitHub - allpaca/chrome-sbx-db: A Collection of Chrome Sandbox Escape POCs/Exploits for learning
A Collection of Chrome Sandbox Escape POCs/Exploits for learning - allpaca/chrome-sbx-db
#RedTeam
Rust Weaponization for Red Team Engagements
https://github.com/trickster0/OffensiveRust
@BlueRedTeam
Rust Weaponization for Red Team Engagements
https://github.com/trickster0/OffensiveRust
@BlueRedTeam
GitHub
GitHub - trickster0/OffensiveRust: Rust Weaponization for Red Team Engagements.
Rust Weaponization for Red Team Engagements. Contribute to trickster0/OffensiveRust development by creating an account on GitHub.
#BlueTeam
1. Code and yara rules to detect and analyze Cobalt Strike
https://github.com/Te-k/cobaltstrike
]-> https://www.randhome.io/blog/2020/12/20/analyzing-cobalt-strike-for-fun-and-profit
2. APT-Hunter is Threat Hunting tool for windows event logs
https://github.com/ahmedkhlief/APT-Hunter
@BlueRedTeam
1. Code and yara rules to detect and analyze Cobalt Strike
https://github.com/Te-k/cobaltstrike
]-> https://www.randhome.io/blog/2020/12/20/analyzing-cobalt-strike-for-fun-and-profit
2. APT-Hunter is Threat Hunting tool for windows event logs
https://github.com/ahmedkhlief/APT-Hunter
@BlueRedTeam
GitHub
GitHub - Te-k/cobaltstrike: Code and yara rules to detect and analyze Cobalt Strike
Code and yara rules to detect and analyze Cobalt Strike - Te-k/cobaltstrike
#exploit
CVE-2021-21234:
Spring Boot Actuator Logview Directory Traversal
https://pyn3rd.github.io/2021/10/25/CVE-2021-21234-Spring-Boot-Actuator-Logview-Directory-Traversal
@BlueRedTeam
CVE-2021-21234:
Spring Boot Actuator Logview Directory Traversal
https://pyn3rd.github.io/2021/10/25/CVE-2021-21234-Spring-Boot-Actuator-Logview-Directory-Traversal
@BlueRedTeam
Pyn3Rd
CVE-2021-21234 Spring Boot Actuator Logview Directory Traversal
AbstractPrior to spring-boot-actuator-logview 0.2.13, the securityCheck() method exists in LogViewEndpoint, but the securityCheck() method only filter the .. in fileName, ignoring the security check o
#ecploit
Micropatching Unpatched LPE in Mobile Device Management Service (CVE-2021-24084/0day)
https://blog.0patch.com/2021/11/micropatching-unpatched-local-privilege.html
@BlueRedTeam
Micropatching Unpatched LPE in Mobile Device Management Service (CVE-2021-24084/0day)
https://blog.0patch.com/2021/11/micropatching-unpatched-local-privilege.html
@BlueRedTeam
0Patch
Micropatching Unpatched Local Privilege Escalation in Mobile Device Management Service (CVE-2021-24084 / 0day)
by Mitja Kolsek, the 0patch Team Update 12/21/2021: Microsoft provided an official fix for this issue on December 14. Our associated mi...
#BlueTeam
Tracking a P2P network related to TA505
https://research.nccgroup.com/2021/12/01/tracking-a-p2p-network-related-with-ta505
@BlueRedTeam
Tracking a P2P network related to TA505
https://research.nccgroup.com/2021/12/01/tracking-a-p2p-network-related-with-ta505
@BlueRedTeam
Nccgroup
Cyber Security Research
Cutting-edge cyber security research from NCC Group. Find public reports, technical advisories, analyses, & other novel insights from our global experts.
#exploit #SSRF
1. CVE-2021-30625:
Google Chrome Blink setBaseAndExtent use after free vulnerability
https://talosintelligence.com/vulnerability_reports/TALOS-2021-1352
2. VMware vCenter 7.0.2 unauth Arbitrary File Read + SSRF + Reflected XSS
https://github.com/l0ggg/VMware_vCenter
@BlueRedTeam
1. CVE-2021-30625:
Google Chrome Blink setBaseAndExtent use after free vulnerability
https://talosintelligence.com/vulnerability_reports/TALOS-2021-1352
2. VMware vCenter 7.0.2 unauth Arbitrary File Read + SSRF + Reflected XSS
https://github.com/l0ggg/VMware_vCenter
@BlueRedTeam
GitHub
GitHub - l0ggg/VMware_vCenter: VMware vCenter 7.0.2.00100 unauth Arbitrary File Read + SSRF + Reflected XSS
VMware vCenter 7.0.2.00100 unauth Arbitrary File Read + SSRF + Reflected XSS - l0ggg/VMware_vCenter
CVE-2021
Plex media server local privilige escalation poc - CVE-2021-42835
https://github.com/netanelc305/PlEXcalaison
@BlueRedTeam
Plex media server local privilige escalation poc - CVE-2021-42835
https://github.com/netanelc305/PlEXcalaison
@BlueRedTeam
GitHub
GitHub - netanelc305/PlEXcalaison: Plex media server local privilige escalation poc - CVE-2021-42835
Plex media server local privilige escalation poc - CVE-2021-42835 - GitHub - netanelc305/PlEXcalaison: Plex media server local privilige escalation poc - CVE-2021-42835
CVE-2021
A vulnerability scanner that detects CVE-2021-21980 vulnerabilities.
https://github.com/Osyanina/westone-CVE-2021-21980-scanner
@BlueRedTeam
A vulnerability scanner that detects CVE-2021-21980 vulnerabilities.
https://github.com/Osyanina/westone-CVE-2021-21980-scanner
@BlueRedTeam
GitHub
GitHub - Osyanina/westone-CVE-2021-21980-scanner: A vulnerability scanner that detects CVE-2021-21980 vulnerabilities.
A vulnerability scanner that detects CVE-2021-21980 vulnerabilities. - Osyanina/westone-CVE-2021-21980-scanner
#exploit
CVE-2021-42325:
Froxlor Server Management Panel 0.10.28/0.10.29.x - RCE
https://www.exploit-db.com/exploits/50502
@BlueRedTeam
CVE-2021-42325:
Froxlor Server Management Panel 0.10.28/0.10.29.x - RCE
https://www.exploit-db.com/exploits/50502
@BlueRedTeam
Exploit Database
Froxlor 0.10.29.1 - SQL Injection (Authenticated)
Froxlor 0.10.29.1 - SQL Injection (Authenticated). CVE-2021-42325 . webapps exploit for PHP platform