#exploit

1. CVE-2021-35296:
PTCL Modem HG150-Ub - Authentication Bypass through response manipulation
https://github.com/afaq1337/CVE-2021-35296

2. CVE-2017-5816:
RCE in HP Intelligent Management Center (iMC) PLAT
https://oxagast.org/posts/CVE-2017-5816

@BlueRedTeam

#Red_Team

Code for executing simulations used in the \"Training Intelligent Red Team Agents Via Deep Reinforcement Learning\" project

https://github.com/jaredalanis/Red-vs-Blue

@BlueRedTeam

#Blue_Team

CyberSecurity Blue Team Resources

https://blueteamresources.blogspot.com/2022/01/osi-model.html

@BlueRedTeam

#Blue_Team

Backdoor detection for VMware view post Log4j exploitation (CVE-2021-44228)
https://github.com/mr-r3b00t/CVE-2021-44228

@BlueRedTeam

#Red_Team
A collection of Python noscripts for Red Teaming or otherwise

https://github.com/kussic/offensive-noscripts

@BlueRedTeam

#exploit
1. CVE-2021-30937:
XNU: heap-use-after-free in inm_merge
https://bugs.chromium.org/p/project-zero/issues/detail?id=2224

2. PHP disable_functions bypass
https://github.com/mm0r1/exploits

@BlueRedTeam

#Red_Team

Red Team Templates For Obsidian.md

https://github.com/cwinfosec/redteam_obsidian_templates

@BlueRedTeam

#Red_Team

Polymorphic code obfuscator for use in Red Team operations

https://github.com/maltek-labs/Malcode-Obfuscator

@BlueRedTeam

#CVE-2021

Exploiting CVE-2021-44228 in VMWare Horizon for remote code execution and more.

https://github.com/puzzlepeaches/Log4jHorizon

@BlueRedTeam

#Red_Team

1. EDR Parallel-asis through Analysis
https://www.mdsec.co.uk/2022/01/edr-parallel-asis-through-analysis
2. Bypass IP source restrictions using HTTP headers
https://github.com/p0dalirius/ipsourcebypass


@BlueRedTeam

#Blue_Team

1. Recurring Active Directory Checks
https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/recurring-active-directory-checks/ba-p/3047258
2. Cobalt Strike Sleep Mask Kit IOCs
https://github.com/p0dalirius/ipsourcebypass

@BlueRedTeam

#exploit
PHP 7.3-8.1 disable_functions bypass using string concatenation (PoC)
https://github.com/mm0r1/exploits/tree/master/php-concat-bypass

@BlueRedTeam

#Threat_Research
Polygon Lack Of Balance Check Bugfix Postmortem

https://medium.com/immunefi/polygon-lack-of-balance-check-bugfix-postmortem-2-2m-bounty-64ec66c24c7d

@BlueRedTeam

#Red_Team

Red Team Field Manual tips and tricks automated via noscripts for fast and easy access during CTF events.

https://github.com/adm20-dev/rtfm-noscripts

@BlueRedTeam

#exploit
1. Unpacking CVE-2021-40444:
A Deep Technical Analysis of an Office RCE Exploit
https://billdemirkapi.me/unpacking-cve-2021-40444-microsoft-office-rce

2. CVE-2021-38000:
Chrome Intents Logic Flaw
https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2021/CVE-2021-38000.html

@BlueRedTeam

#Red_Team

A cheat sheet that contains advanced queries for SQL Injection of all types

https://github.com/kleiton0x00/Advanced-SQL-Injection-Cheatsheet

@BlueRedTeam

#Blue_Team
1. Strategically Aged Domain Detection: Capture APT Attacks With DNS Traffic Trends
https://unit42.paloaltonetworks.com/strategically-aged-domain-detection
2. Windows Process Listing using NTQuerySystemInformation
https://tbhaxor.com/windows-process-listing-using-ntquerysysteminformation

@BlueRedTeam

#Blue_Team
An "Attack Path" Mapping Approach to CVEs 2021-42287 and 2021-42278

https://www.trustedsec.com/blog/an-attack-path-mapping-approach-to-cves-2021-42287-and-2021-42278

@BlueRedTeam

#Red_Team
1. Domain Escalation - sAMAccountName Spoofing
https://pentestlab.blog/2022/01/10/domain-escalation-samaccountname-spoofing
2. Loading dbk64.sys and grabbing a handle to it
https://github.com/ioncodes/ceload
3. O365 - Bypass Malicious Link Analysis

<a href="phishing link">click</a> ==> junk
<a href="" href="phishing link">click</a> ==> inbox

// If you compose an email using the "Reply" function on O365 which has a link, intercept the request and add an extra empty href attribute then O365 won't scan the link anymore

@BlueRedTeam

#tools
#Blue_Team
1. SysmonSimulator: Sysmon event simulation utility which can be used to simulate the attacks to generate the Sysmon Event logs for testing the EDR detections and correlation rules
https://github.com/ScarredMonk/SysmonSimulator
2. DefenderDetectionhistoryParser: A parser of Windows Defender's DetectionHistory forensic artifact, containing substantial info about quarantined files and executables
https://github.com/jklepsercyber/defender-detectionhistory-parser

@BlueRedTeam

#Log4j

How to Create Home Lab for Log4j Exploit

https://letsdefend.io/blog/how-to-create-home-lab-for-log4j-exploit/

@BlueRedTeam