#CVE-2021
#Log4j
Simple Python 3 noscript to detect the \"Log4j\" Java library vulnerability (CVE-2021-44228) for a list of URLs with multithreading

https://github.com/kal1gh0st/MyLog4Shell

@BlueRedTeam

#Log4j
#CVE-2021

Log4j_dos_CVE-2021-45105

https://github.com/cckuailong/Log4j_dos_CVE-2021-45105

@BlueRedTeam

#exploit
1. Android: apps have VM_MAYWRITE access to shared zygote JIT mapping
https://bugs.chromium.org/p/project-zero/issues/detail?id=2227

2. CVE-2021-45105:
Log4j2 DOS
https://github.com/cckuailong/Log4j_dos_CVE-2021-45105

@BlueRedTeam

#Red_Team
1. Alternative Process Injection
https://www.netero1010-securitylab.com/eavsion/alternative-process-injection
2. HTTP Parameter Pollution
https://medium.com/geekculture/http-parameter-pollution-981af7894c6e

@BlueRedTeam

#Red_Team
In this project, I acted as both Red Team and Blue Team, alternately, and examined the Kibana log files that were created by my Red Team actions.

https://github.com/Symantha/Project_2-RedTeam-vs-BlueTeam

@BlueRedTeam

#CVE-2021
#Log4Shell
Searches filesystem for CVE-2021-44228 and CVE-2021-45046 vulnerable instances, including embedded (jar/war/zip) packaged ones.

https://github.com/HynekPetrak/log4shell_finder

@BlueRedTeam

#CVE-2021
#log4j
Vulerability analysis, patch management and exploitation tool CVE-2021-44228 / CVE-2021-45046 / CVE-2021-4104

https://github.com/TheInterception/Log4J-Simulation-Tool

@BlueRedTeam

#Red_Team
Aretha Red Teaming conceptual mockup

https://github.com/electronicmax/arethart

@BlueRedTeam

#Red_Team
1. Primary Access Token Manipulation
https://www.ired.team/offensive-security/privilege-escalation/t1134-access-token-manipulation
2. Cover tracks during Linux Exploitation by leaving zero traces on system logs and filesystem timestamps
https://github.com/mufeedvh/moonwalk

@BlueRedTeam

#exploit
1. Microsoft Office Word MSHTML RCE
https://github.com/34zY/Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit

2. HSMX Internet Gateway Vulnerability Exploitation including RCE - a guest Wi-Fi system used in hundreds of hotels
https://web.archive.org/web/20211123141312/http://etizazmohsin.com/hsmx.html

@BlueRedTeam

#Red_Team

d4rk Ghost is a all in one hacking framework . Red Team Pentesting Framework it contains all things

https://github.com/d4rkconsole/d4rk_ghost

@BlueRedTeam

#tools
#Blue_Team
1. Catalyst is a SOAR system that helps to automate alert handling and incident response processes
https://github.com/SecurityBrewery/catalyst
2. Rogue Assembly Hunter is a utility for discovering 'interesting' .NET CLR modules in running processes
https://github.com/bohops/RogueAssemblyHunter
3. Detecting Anomalous Network Traffic Resulting from a Successful Log4j Attack
https://www.ironnet.com/blog/detecting-anomalous-network-traffic-resulting-from-a-successful-log4j-attack

@BlueRedTeam

#exploit
CVE-2021-41730:
TENDA Authorization RCE
https://github.com/IBUILI/CVE-2021-41730

@BlueRedTeam

#Red_Team

1. Inside a PBX - Discovering a Firmware Backdoor
https://blog.redteam-pentesting.de/2021/inside-a-pbx
2. RCE in Visual Studio Code's Remote WSL for Fun and Negative Profit
https://parsiya.net/blog/2021-12-20-rce-in-visual-studio-codes-remote-wsl-for-fun-and-negative-profit
3. Auerswald COMpact Multiple Backdoors
https://www.redteam-pentesting.de/en/advisories/rt-sa-2021-007/-auerswald-compact-multiple-backdoors

@BlueRedTeam

#exploit

1. CVE-2021-4061:
Type Confusion in V8
https://github.com/msrkp/exploits/tree/main/CVE-2021-4061

2. CVE-2021-43224:
Windows Common Log File System Driver PoC
https://github.com/KaLendsi/CVE-2021-43224-POC

@BlueRedTeam

#CVE-2021
#Log4j
#CheetSheet

Log4J CVE-2021-44228 : Mitigation Cheat Sheet

https://github.com/thedevappsecguy/Log4J-Mitigation-CVE-2021-44228--CVE-2021-45046--CVE-2021-45105

@BlueRedTeam

#exploit
1. CVE-2021-44659:
Adding a new pipeline in GoCD server 21.3.0 has a functionality that could be abused to do an un-intended action in order to achieve a SSRF
https://github.com/Mesh3l911/CVE-2021-44659

2. A buffer overflow vulnerability in a babykernel.ko driver. The exploit is written in a way to bypass SMEP protection and the technique used is ret2usr
https://github.com/0x3SC4L4T3/Babykernel-ctf-ret2usr

@BlueRedTeam

#Red_Team

1. macOS Gatekeeper Bypass (CVE-2021-30853)
https://objective-see.com/blog/blog_0x6A.html
2. Responder and IPv6 attacks
https://g-laurent.blogspot.com/2021/12/responder-and-ipv6-attacks.html?m=1

@BlueRedTeam

#Blue_Team
1. This tool reveals hidden desktops and investigate processes/threads utilizing hidden desktops
https://github.com/AgigoNoTana/HiddenDesktopViewer
2. Analysis of Log4jShell Attack
https://www.goggleheadedhacker.com/blog/post/log4jshell-analysis

@BlueRedTeam

#Log4j

Examining Log4j Vulnerabilities in Connected Cars
and Charging Stations

https://www.trendmicro.com/en_us/research/21/l/examining-log4j-vulnerabilities-in-connected-cars.html

@BlueRedTeam

#Red_Team
1. Path traversal in Grafana 8.x allows UnAuth arbitrary local file read
https://hackerone.com/reports/1415820
2. Flickr Account Takeover
https://security.lauritz-holtmann.de/advisories/flickr-account-takeover

@BlueRedTeam