#CVE-2021
#Log4j
A vulnerable device scanner for CVE-2021-44228 (Log4j)

https://github.com/sblmnl/Scan4j

@BlueRedTeam

#CVE-2021
#Log4j
can find, analyse and patch Log4J files because of CVE-2021-44228, CVE-2021-45046

https://github.com/DANSI/PowerShell-Log4J-Scanner
@BlueRedTeam

#CVE-2021
#Log4j
CVE-2021-4438 LOG4J - Remote excution

https://github.com/longnguyen-2k/log4j

@BlueRedTeam

#Blue_Team
#Log4Shell
Nmap NSE noscripts to check against log4shell/LogJam vulnerabilities (CVE-2021-44228)

https://github.com/Diverto/nse-log4shell

@BlueRedTeam

#Red_Team

1. Price Manipulation Bypass Using Integer Overflow Method
https://marxchryz.medium.com/price-manipulation-bypass-using-integer-overflow-method-36ff23ebe91d

2. Bypassing Box’s Time-based One-Time Password MFA
https://www.varonis.com/blog/box-mfa-bypass-totp

@BlueRedTeam

#CVE-2021
#Log4j
CVE-2021-44228 Getshell

https://github.com/shakeman8/log4j_getshell

@BlueRedTeam

#CVE-2021
#Log4j
Simple Python 3 noscript to detect the \"Log4j\" Java library vulnerability (CVE-2021-44228) for a list of URLs with multithreading

https://github.com/kal1gh0st/MyLog4Shell

@BlueRedTeam

#Log4j
#CVE-2021

Log4j_dos_CVE-2021-45105

https://github.com/cckuailong/Log4j_dos_CVE-2021-45105

@BlueRedTeam

#exploit
1. Android: apps have VM_MAYWRITE access to shared zygote JIT mapping
https://bugs.chromium.org/p/project-zero/issues/detail?id=2227

2. CVE-2021-45105:
Log4j2 DOS
https://github.com/cckuailong/Log4j_dos_CVE-2021-45105

@BlueRedTeam

#Red_Team
1. Alternative Process Injection
https://www.netero1010-securitylab.com/eavsion/alternative-process-injection
2. HTTP Parameter Pollution
https://medium.com/geekculture/http-parameter-pollution-981af7894c6e

@BlueRedTeam

#Red_Team
In this project, I acted as both Red Team and Blue Team, alternately, and examined the Kibana log files that were created by my Red Team actions.

https://github.com/Symantha/Project_2-RedTeam-vs-BlueTeam

@BlueRedTeam

#CVE-2021
#Log4Shell
Searches filesystem for CVE-2021-44228 and CVE-2021-45046 vulnerable instances, including embedded (jar/war/zip) packaged ones.

https://github.com/HynekPetrak/log4shell_finder

@BlueRedTeam

#CVE-2021
#log4j
Vulerability analysis, patch management and exploitation tool CVE-2021-44228 / CVE-2021-45046 / CVE-2021-4104

https://github.com/TheInterception/Log4J-Simulation-Tool

@BlueRedTeam

#Red_Team
Aretha Red Teaming conceptual mockup

https://github.com/electronicmax/arethart

@BlueRedTeam

#Red_Team
1. Primary Access Token Manipulation
https://www.ired.team/offensive-security/privilege-escalation/t1134-access-token-manipulation
2. Cover tracks during Linux Exploitation by leaving zero traces on system logs and filesystem timestamps
https://github.com/mufeedvh/moonwalk

@BlueRedTeam

#exploit
1. Microsoft Office Word MSHTML RCE
https://github.com/34zY/Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit

2. HSMX Internet Gateway Vulnerability Exploitation including RCE - a guest Wi-Fi system used in hundreds of hotels
https://web.archive.org/web/20211123141312/http://etizazmohsin.com/hsmx.html

@BlueRedTeam

#Red_Team

d4rk Ghost is a all in one hacking framework . Red Team Pentesting Framework it contains all things

https://github.com/d4rkconsole/d4rk_ghost

@BlueRedTeam

#tools
#Blue_Team
1. Catalyst is a SOAR system that helps to automate alert handling and incident response processes
https://github.com/SecurityBrewery/catalyst
2. Rogue Assembly Hunter is a utility for discovering 'interesting' .NET CLR modules in running processes
https://github.com/bohops/RogueAssemblyHunter
3. Detecting Anomalous Network Traffic Resulting from a Successful Log4j Attack
https://www.ironnet.com/blog/detecting-anomalous-network-traffic-resulting-from-a-successful-log4j-attack

@BlueRedTeam

#exploit
CVE-2021-41730:
TENDA Authorization RCE
https://github.com/IBUILI/CVE-2021-41730

@BlueRedTeam

#Red_Team

1. Inside a PBX - Discovering a Firmware Backdoor
https://blog.redteam-pentesting.de/2021/inside-a-pbx
2. RCE in Visual Studio Code's Remote WSL for Fun and Negative Profit
https://parsiya.net/blog/2021-12-20-rce-in-visual-studio-codes-remote-wsl-for-fun-and-negative-profit
3. Auerswald COMpact Multiple Backdoors
https://www.redteam-pentesting.de/en/advisories/rt-sa-2021-007/-auerswald-compact-multiple-backdoors

@BlueRedTeam