#Blue_Team

1. Abusing MS Office Using Malicious Web Archive Files
https://www.netskope.com/blog/abusing-microsoft-office-using-malicious-web-archive-files
2. A Quick CVE-2022-21907 FAQ
https://isc.sans.edu/forums/diary/A+Quick+CVE202221907+FAQ+work+in+progress/28234

@BlueRedTeam

#Red_Team

Red Team Tool kit

https://github.com/kombat1/RedToolkit

@BlueRedTeam

#CVE-2021

CVE-2021-46075 - A Privilege Escalation vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. Staff account users can access the admin resources and perform CRUD Operations.

https://github.com/plsanu/CVE-2021-46075

@BlueRedTeam

#CVE-2021

CVE-2021-46076 - Sourcecodester Vehicle Service Management System 1.0 is vulnerable to File upload. An attacker can upload a malicious php file in multiple endpoints it leading to Code Execution.

https://github.com/plsanu/CVE-2021-46076

@BlueRedTeam

#Red_Team

Nim variant of MDSec's Parallel Syscalls EDR hook bypass

https://github.com/frkngksl/ParallelNimcalls

@BlueRedTeam

#Blue_Team

1. Identifying beaconing malware using Elastic

https://www.elastic.co/blog/identifying-beaconing-malware-using-elastic#

2. Suspicious named pipe events - 0xFF1B

https://medium.com/falconforce/falconfriday-suspicious-named-pipe-events-0xff1b-fe475d7ebd8

@BlueRedTeam

#Red_Team

Alias identity manager for Red Teams, OSINT collectors, journalists, and privacy-conscious people

https://github.com/mattreduce/sockdrawer

@BlueRedTeam

DarkSide - Tool Information Gathering & social engineering.

https://github.com/ultrasecurity/DarkSide

@BlueRedTeam

#Red_Team

Flexible C2 framework for Nation State Simulations in Red Team Assessments.

https://github.com/aidden-laoch/sabre

@BlueRedTeam

#Red_Team

BreadMan Module Stomping & API Unhooking Using Native APIs

https://medium.com/@Breadman602/breadman-module-stomping-api-unhooking-using-native-apis-b10df89cc0a2

@BlueRedTeam

#Blue_Team

1. This repository detects a system vulnerable to CVE-2022-21907 and protects against this vulnerability if desired
https://github.com/mauricelambert/CVE-2022-21907
2. Hardening HashiCorp Vault
https://github.com/hashicorp/vault-selinux-policies

@BlueRedTeam

#Red_Team
I'm putting together my class notes, practice results, and other information I accumulate over time on Red Team operation courses and work.

https://github.com/SlyJose/Red-Team

@BlueRedTeam

Cobalt Strike BOF Files with Nim!

https://github.com/byt3bl33d3r/BOF-Nim

@BlueRedTeam

#Red_Team

1. Domain Persistence - Machine Account
https://pentestlab.blog/2022/01/17/domain-persistence-machine-account
2. Shell command obfuscation to avoid SIEM/detection system
https://github.com/ariary/volana

@BlueRedTeam

#tools
OpenAPI Security Scanner:
discover authorization security issues
https://github.com/ngalongc/openapi_security_scanner#warning-before-use

@BlueRedTeam

#Red_Team
I'm putting together my class notes, practice results, and other information I accumulate over time on Red Team operation courses and work.

https://github.com/Raviikanth/working-assgmnt

@BlueRedTeam

#CVE-2021

Apache log4j2 CVE-20210-44228 poc

https://github.com/c4dr01d/CVE-2021-44228-poc

@BlueRedTeam

#Red_Team
#tools
1. A way to bypass multi-factor authentication (MFA) for Box accounts that use an SMS code for login verification
https://www.varonis.com/blog/box-mfa-bypass-sms
2. A tool for creating hidden accounts using the registry
https://github.com/wgpsec/CreateHiddenAccount

@BlueRedTeam

#Blue_Team

1. Suricata Language Server is an implementation of the Language Server Protocol for Suricata signatures. It adds syntax check, hints and auto-completion
https://github.com/StamusNetworks/suricata-language-server
2. Malicious Macros Analysis with OLETOOLS
https://infosecwriteups.com/maldoc101-malicious-macros-analysis-with-oletools-8be3cda84544

@BlueRedTeam

#Red_Team
My Collection of Red Team Tools Building

https://github.com/nobodyatall648/Red-Team-Tools-Collections

@BlueRedTeam

#CVE-2021

It is a nmap noscript for metabase vulnerability (CVE-2021-41277)

https://github.com/frknktlca/Metabase_Nmap_Script

@BlueRedTeam