NEW BOT Телеграм, страница

Red Blue Team

#exploit
- Unauthenticated RCE Chain in SysAid ITIL - CVE-2021-43971, CVE-2021-43972, CVE-2021-43973, CVE-2021-43974
https://www.atredis.com/blog/2022/1/5/unauthenticated-rce-chain-in-sysaid-itil
- CVE-2022-0219:
Improper Restriction of XML External Entity Reference in skylot/jadx
https://github.com/Haxatron/CVE-2022-0219

@BlueRedTeam

Atredis Partners

Unauthenticated Remote Code Execution Chain in SysAid ITIL — Atredis Partners

Atredis Partners found a chain of vulnerabilities in the ITIL product offering by SysAid during personal research. Other competitors to this SysAid product are ManageEngine, Remedy, or other ticketing and workflow systems. The full chain of issues allows…

413 views07:45

Red Blue Team

#Red_Team

TREVORproxy/TREVORspray 2.0 - Increasing the Speed and Effectiveness of Password Sprays

https://blog.blacklanternsecurity.com/p/introducing-trevorproxy-and-trevorspray

@BlueRedTeam

Blacklanternsecurity

Introducing TREVORproxy and TREVORspray 2.0

Increasing the Speed and Effectiveness of Password Sprays

357 views08:35

Red Blue Team

#tools
#Blue_Team

- beacon-fronting: A simple command line tool to help defender test their detections for network beacon patterns and domain fronting

https://github.com/BinaryDefense/beacon-fronting

- ICS Network Protocol Parsers

https://github.com/cisagov/ICSNPP

@BlueRedTeam

GitHub

GitHub - BinaryDefense/beacon-fronting: A simple command line program to help defender test their detections for network beacon…

A simple command line program to help defender test their detections for network beacon patterns and domain fronting - BinaryDefense/beacon-fronting

381 views08:43

Red Blue Team

#Red_Team

Red Team

https://github.com/forensiva/RedTeam

@BlueRedTeam

GitHub

GitHub - forensiva/RedTeam: Red Team

Red Team. Contribute to forensiva/RedTeam development by creating an account on GitHub.

392 views08:50

Red Blue Team

#Blue_Team

1. A series of PowerShell noscripts to automate collection of forensic artefacts in most Incident Response environments

https://github.com/hackjalstead/IRCP

2. Snooping on Android 12’s Privacy Dashboard

https://thebinaryhick.blog/2022/01/22/snooping-on-android-12s-privacy-dashboard
]-> Android Logs Events And Protobuf Parser:
https://github.com/abrignoni/ALEAPP

@BlueRedTeam

GitHub

GitHub - hackjalstead/IRCP: A series of PowerShell noscripts to automate collection of forensic artefacts in most Incident Response…

A series of PowerShell noscripts to automate collection of forensic artefacts in most Incident Response environments - hackjalstead/IRCP

426 views06:31

Red Blue Team

#exploit

CVE-2021-45467:
CWP CentOS Web Panel - preauth RCE

https://octagon.net/blog/2022/01/22/cve-2021-45467-cwp-centos-web-panel-preauth-rce
-

CVE-2021-30949:
XNU kernel use-after-free in mach_msg

https://bugs.chromium.org/p/project-zero/issues/detail?id=2232

@BlueRedTeam

382 views09:14

Red Blue Team

#Blue_Team
Hunting with weak signals:
How to find malware with mutated strings and YARA rules
https://stairwell.com/news/hunting-with-weak-signals

@BlueRedTeam

Stairwell

Hunting with weak signals — Stairwell

411 views09:22

Red Blue Team

Forwarded from Network Penetration Testing

Active Directory security check in seconds The PingCastle tool allows you to perform more than 100K AD security checks, without installation, administration or sending data "to the cloud", while generating a convenient report. Some of the checks include potential risks, so there may be occasional false positives.

https://github.com/vletoux/pingcastle

#redteam
#ad
@NetPentesters

GitHub

GitHub - netwrix/pingcastle: PingCastle - Get Active Directory Security at 80% in 20% of the time

PingCastle - Get Active Directory Security at 80% in 20% of the time - netwrix/pingcastle

393 views21:22

Red Blue Team

#Red_Team

Red Team Reconnaissance Tool for Windows systems

https://github.com/bvoris/RedTeamRecon

@BlueRedTeam

GitHub

GitHub - bvoris/RedTeamRecon: Red Team Reconnaissance Tool for Windows systems

Red Team Reconnaissance Tool for Windows systems. Contribute to bvoris/RedTeamRecon development by creating an account on GitHub.

414 views22:50

Red Blue Team

#Red_Team

1. RBCD WebClient attack
https://www.bussink.net/rbcd-webclient-attack
2. How to Detect and Compromise Azure Blobs and Storage Accounts
https://www.inversecos.com/2022/01/how-to-detect-and-compromise-azure.html?m=1

@BlueRedTeam

Inversecos

How to Detect and Compromise Azure Blobs and Storage Accounts

402 views09:01

Red Blue Team

#Red_Team

Cybersecurity blog. Red Team, pentest, malware analysis and dev

https://github.com/redhat-cop/automation-good-practices

@BlueRedTeam

GitHub

GitHub - redhat-cop/automation-good-practices: Recommended practices for all elements of automation using Ansible, starting with…

👍1

417 views17:27

Red Blue Team

#Red_Team

Red Teaming and Penetration Testing Checklist, Cheatsheet, Clicknoscript

https://github.com/ibr0wse/RedTeam-PenTest-Cheatsheet-Checklist

@BlueRedTeam

GitHub

GitHub - ibr0wse/RedTeam-PenTest-Cheatsheet-Checklist: Red Teaming and Penetration Testing Checklist, Cheatsheet, Clicknoscript

Red Teaming and Penetration Testing Checklist, Cheatsheet, Clicknoscript - ibr0wse/RedTeam-PenTest-Cheatsheet-Checklist

438 views23:19

Red Blue Team

#Red_Team

AD CS: weaponizing the ESC7 attack

https://www.blackarrow.net/adcs-weaponizing-esc7-attack

@BlueRedTeam

Tarlogic Security

BlackArrow - Offensive security services

BlackArrow is the offensive and defensive security services division of Tarlogic Security. A team of high level professionals

387 views07:44

Red Blue Team

#exploit
CVE-2021-4034:
pwnkit - LPE in polkit's pkexec
https://github.com/berdav/CVE-2021-4034
https://github.com/Ayrx/CVE-2021-4034
https://github.com/arthepsy/CVE-2021-4034

2. CVE-2022-0185:
Linux Kernel Can Allow Container Escape in Kubernetes
https://github.com/Crusaders-of-Rust/CVE-2022-0185

@BlueRedTeam

GitHub

GitHub - berdav/CVE-2021-4034: CVE-2021-4034 1day

CVE-2021-4034 1day. Contribute to berdav/CVE-2021-4034 development by creating an account on GitHub.

488 views07:50

Red Blue Team

#Red_Team
Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.

https://github.com/Pa1ntex/Classic-Gui---Saktkia51-Script-op-

@BlueRedTeam

GitHub

Pa1ntex/Classic-Gui---Saktkia51-Script-op-

local b=game:GetService("Players")local c=game:GetService("ReplicatedStorage")local d=game:GetService("StarterGui")local e=game:GetService(&amp...

412 views20:51

Red Blue Team

#Red_Team

1. Delegate to KRBTGT service
https://skyblue.team/posts/delegate-krbtgt
2. Attacks on JSON Web Token (JWT)
https://infosecwriteups.com/attacks-on-json-web-token-jwt-278a49a1ad2e

@BlueRedTeam

skyblue.team

Delegate to KRBTGT service | Sky Blueteam

This article describe a new persistence technique in Active Directory that allows to create valid TGT (i.e. have a master key). This technique relies on a Service Account with a Constrained Delegation to the KRBTGT service.

👍1

421 views07:00

Red Blue Team