#exploit
1. Microsoft Office Word MSHTML RCE
https://github.com/34zY/Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit

2. HSMX Internet Gateway Vulnerability Exploitation including RCE - a guest Wi-Fi system used in hundreds of hotels
https://web.archive.org/web/20211123141312/http://etizazmohsin.com/hsmx.html

@BlueRedTeam

#Red_Team

d4rk Ghost is a all in one hacking framework . Red Team Pentesting Framework it contains all things

https://github.com/d4rkconsole/d4rk_ghost

@BlueRedTeam

#tools
#Blue_Team
1. Catalyst is a SOAR system that helps to automate alert handling and incident response processes
https://github.com/SecurityBrewery/catalyst
2. Rogue Assembly Hunter is a utility for discovering 'interesting' .NET CLR modules in running processes
https://github.com/bohops/RogueAssemblyHunter
3. Detecting Anomalous Network Traffic Resulting from a Successful Log4j Attack
https://www.ironnet.com/blog/detecting-anomalous-network-traffic-resulting-from-a-successful-log4j-attack

@BlueRedTeam

#exploit
CVE-2021-41730:
TENDA Authorization RCE
https://github.com/IBUILI/CVE-2021-41730

@BlueRedTeam

#Red_Team

1. Inside a PBX - Discovering a Firmware Backdoor
https://blog.redteam-pentesting.de/2021/inside-a-pbx
2. RCE in Visual Studio Code's Remote WSL for Fun and Negative Profit
https://parsiya.net/blog/2021-12-20-rce-in-visual-studio-codes-remote-wsl-for-fun-and-negative-profit
3. Auerswald COMpact Multiple Backdoors
https://www.redteam-pentesting.de/en/advisories/rt-sa-2021-007/-auerswald-compact-multiple-backdoors

@BlueRedTeam

#exploit

1. CVE-2021-4061:
Type Confusion in V8
https://github.com/msrkp/exploits/tree/main/CVE-2021-4061

2. CVE-2021-43224:
Windows Common Log File System Driver PoC
https://github.com/KaLendsi/CVE-2021-43224-POC

@BlueRedTeam

#CVE-2021
#Log4j
#CheetSheet

Log4J CVE-2021-44228 : Mitigation Cheat Sheet

https://github.com/thedevappsecguy/Log4J-Mitigation-CVE-2021-44228--CVE-2021-45046--CVE-2021-45105

@BlueRedTeam

#exploit
1. CVE-2021-44659:
Adding a new pipeline in GoCD server 21.3.0 has a functionality that could be abused to do an un-intended action in order to achieve a SSRF
https://github.com/Mesh3l911/CVE-2021-44659

2. A buffer overflow vulnerability in a babykernel.ko driver. The exploit is written in a way to bypass SMEP protection and the technique used is ret2usr
https://github.com/0x3SC4L4T3/Babykernel-ctf-ret2usr

@BlueRedTeam

#Red_Team

1. macOS Gatekeeper Bypass (CVE-2021-30853)
https://objective-see.com/blog/blog_0x6A.html
2. Responder and IPv6 attacks
https://g-laurent.blogspot.com/2021/12/responder-and-ipv6-attacks.html?m=1

@BlueRedTeam

#Blue_Team
1. This tool reveals hidden desktops and investigate processes/threads utilizing hidden desktops
https://github.com/AgigoNoTana/HiddenDesktopViewer
2. Analysis of Log4jShell Attack
https://www.goggleheadedhacker.com/blog/post/log4jshell-analysis

@BlueRedTeam

#Log4j

Examining Log4j Vulnerabilities in Connected Cars
and Charging Stations

https://www.trendmicro.com/en_us/research/21/l/examining-log4j-vulnerabilities-in-connected-cars.html

@BlueRedTeam

#Red_Team
1. Path traversal in Grafana 8.x allows UnAuth arbitrary local file read
https://hackerone.com/reports/1415820
2. Flickr Account Takeover
https://security.lauritz-holtmann.de/advisories/flickr-account-takeover

@BlueRedTeam

#Blue_Team
#Log4j
How to exploit Log4j vulnerabilities in VMWare vCenter

https://www.sprocketsecurity.com/blog/how-to-exploit-log4j-vulnerabilities-in-vmware-vcenter

@BlueRedTeam

#Blue_Team

Zabbix vulnerability assessment plugin
https://github.com/vulnersCom/zabbix-threat-control

@BlueRedTeam

#exploit
1. CVE 2020-14871:
Sun Solaris PoC Exploit
https://github.com/robidev/CVE-2020-14871-Exploit

2. CVE-2021-45105:
DoS via Uncontrolled Recursion in Log4j Strsubstitutor
https://www.zerodayinitiative.com/blog/2021/12/17/cve-2021-45105-denial-of-service-via-uncontrolled-recursion-in-log4j-strsubstitutor

@BlueRedTeam

#Red_Team

A robust Red Team proxy written in Go.

https://github.com/chdav/GoWard

@BlueRedTeam

#Blue_Team
Cache Poisoning at Scale:
Identifying and Exploiting over 70 Cache Poisoning vulnerabilities
https://youst.in/posts/cache-poisoning-at-scale

@BlueRedTeam

#Red_Team

PHP LFI with Nginx Assistance
https://bierbaumer.net/security/php-lfi-with-nginx-assistance

@BlueRedTeam

#Red_Team
Overlord - Red Teaming Infrastructure Automation

https://github.com/qsecure-labs/overlord

@BlueRedTeam

#Red_Team
1. Nim implementation of Process Hollowing using syscalls (PoC)
https://github.com/snovvcrash/NimHollow
2. Minimal Cobalt Strike C2 Profile for Bypassing Defender
https://gist.github.com/tothi/8abd2de8f4948af57aa2d027f9e59efe

@BlueRedTeam

#Blue_Team
1. WELA - Windows Event Log Analyzer
https://github.com/Yamato-Security/WELA
2. Tutorial: Lateral movement playbook
https://docs.microsoft.com/en-us/defender-for-identity/playbook-lateral-movement

@BlueRedTeam