Coercing the domain controller machine account to authenticate to a host which is under the control of a threat actor could lead to domain compromise. The most notable technique which involves coer…

Red Team Tools. Contribute to dmcxblue/RedTeam development by creating an account on GitHub.

C2X-HTTP - C2/Post-Exploitation Tool For Red Teaming and Ethical Hacking [on HTTP(S)] - silveryseaChens/nxenon7

Introduction With the emergence of the Log4j security vulnerability, we’ve already seen multiple threat actors, mostly financially motivated, immediately add it to their exploitation arsenal. It comes as no surprise that some nation-sponsored actors also…

Red Team Resources. Contribute to Digit4lBytes/RedTeam development by creating an account on GitHub.

Red Team Repository. Contribute to nhunt16/RTR development by creating an account on GitHub.

Summary In November of 2021, we described several techniques used by attackers to deliver malware through infected Microsoft Office files. In addition to

Red Team Tool kit. Contribute to kombat1/RedToolkit development by creating an account on GitHub.

CVE-2021-46075 - A Privilege Escalation vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. Staff account users can access the admin resources and perform CRUD Operations....

CVE-2021-46076 - Sourcecodester Vehicle Service Management System 1.0 is vulnerable to File upload. An attacker can upload a malicious php file in multiple endpoints it leading to Code Execution. -...

Nim version of MDSec's Parallel Syscall PoC. Contribute to frkngksl/ParallelNimcalls development by creating an account on GitHub.

In this blog, we walk users through identifying beaconing malware in their environment using our beaconing identification framework.

Alias identity manager for Red Teams, OSINT collectors, journalists, and privacy-conscious people - srcmtd/sockdrawer

Tool Information Gathering & social engineering Write By [Python,JS,PHP] - GitHub - ultrasecurity/DarkSide: Tool Information Gathering & social engineering Write By [Python,JS,PHP]

Introduction

CVE-2022-21907: detection, protection, exploitation and demonstration. Exploitation: Powershell, Python, Ruby, NMAP and Metasploit. Detection and protection: Powershell. Demonstration: Youtube. - m...

I'm putting together my class notes, practice results, and other information I accumulate over time on Red Team operation courses and work. - GitHub - SlyJose/Red-Team: I'm putting ...

Cobalt Strike BOF Files with Nim! Contribute to byt3bl33d3r/BOF-Nim development by creating an account on GitHub.

Machine accounts play a role in red team operations as in a number of techniques are utilized for privilege escalation, lateral movement and domain escalation. However, there are also cases which a…