#Red_Team

AD CS: weaponizing the ESC7 attack

https://www.blackarrow.net/adcs-weaponizing-esc7-attack

@BlueRedTeam

#exploit
CVE-2021-4034:
pwnkit - LPE in polkit's pkexec
https://github.com/berdav/CVE-2021-4034
https://github.com/Ayrx/CVE-2021-4034
https://github.com/arthepsy/CVE-2021-4034

2. CVE-2022-0185:
Linux Kernel Can Allow Container Escape in Kubernetes
https://github.com/Crusaders-of-Rust/CVE-2022-0185

@BlueRedTeam

#Red_Team
Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.

https://github.com/Pa1ntex/Classic-Gui---Saktkia51-Script-op-

@BlueRedTeam

#Red_Team

1. Delegate to KRBTGT service
https://skyblue.team/posts/delegate-krbtgt
2. Attacks on JSON Web Token (JWT)
https://infosecwriteups.com/attacks-on-json-web-token-jwt-278a49a1ad2e

@BlueRedTeam

#exploit
1. CVE-2022-21882:
win32k LPE bypass CVE-2021-1732
https://github.com/KaLendsi/CVE-2022-21882
// tested on windows 20h2 19042

2. Technical Analysis of CVE-2022-22583:
Bypassing macOS System Integrity Protection (SIP)
https://perception-point.io/technical-analysis-of-cve-2022-22583-bypassing-macos-system-integrity-protection

@BlueRedTeam

#tools
#Blue_Team_Techniques
1. Acquiring Logs and Working with different log formats
https://github.com/Cyb3r-Monk/RITA-J
2. WMI for Script Kiddies
https://www.trustedsec.com/blog/wmi-for-noscript-kiddies
3. RipRaw is a small tool to analyse the memory of compromised Linux systems
https://github.com/cado-security/rip_raw

@BlueRedTeam

#Red_Team

The all-in-one Red Team extension for Web Pentester 🛠

https://github.com/LasCC/Hack-Tools

@BlueRedTeam

#Red_Team

Stratus Red team.

https://github.com/Datadog/stratus-red-team/

@BlueRedTeam

#Red_Team

1. Bypass Coudflare bot protection using Cloudflare Workers
https://github.com/jychp/cloudflare-bypass
2. Unveiling DNSStager: A tool to hide your payload in DNS
https://shells.systems/unveiling-dnsstager-a-tool-to-hide-your-payload-in-dns
3. Dumping Stored Credentials with SeTrustedCredmanAccessPrivilege
https://www.tiraniddo.dev/2021/05/dumping-stored-credentials-with.html

@BlueRedTeam

#exploit
1. CVE-2022-23967:
TightVNC Vulnerability
https://github.com/MaherAzzouzi/CVE-2022-23967

2. Exploit to bypass Google's JS security protection
when using MITM phishing tools
https://github.com/456478/evilginx.botguard

@BlueRedTeam

#Blue_Team

1. Hacktivism and State-Sponsored Knock-Offs
Attributing Deceptive Hack-and-Leak Operations
https://www.sentinelone.com/labs/hacktivism-and-state-sponsored-knock-offs-attributing-deceptive-hack-and-leak-operations
2. Winshark - Wireshark plugin to work with ETW
(Event Tracing for Windows)
https://github.com/airbus-cert/Winshark

@BlueRedTeam

#Red_Team

Tool created for Red Team to test default credentials on SSH and WinRM and then execute noscripts with those credentials before the password can be changed by Blue Team.

https://github.com/RITRedteam/bruhdotzip
@BlueRedTeam

#Blue_Team

Node/Proxy in Kubernetes RBAC:
Security Architecture Considerations

https://hackmd.io/tHxwouC4TF20xT5qKt_OuQ

@BlueRedTeam

#Red_Team

1. Get fresh Syscalls from a fresh ntdll.dll copy
https://github.com/S3cur3Th1sSh1t/NimGetSyscallStub
2. Exploring the Playstation 5 Security:
ROP userland execution for PS5 (4.03)
https://github.com/ChendoChap/PS5-Webkit-Execution

@BlueRedTeam

#exploit
CVE-2022-21882:
Win32k Window Object Type Confusion
https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2022/CVE-2022-21882.html
]-> PoC: https://github.com/KaLendsi/CVE-2022-21882

@BlueRedTeam

#Red_Team
1. Delegate to KRBTGT service
https://skyblue.team/posts/delegate-krbtgt
// The main appeal of this technique is that it does not require to be joined to the domain, contrarily to DCSync/Golden Tickets attacks: Only network access to LDAP and Kerberos ports is enough

2. Five Hacking Tips - PWNKIT
https://blog.sysrisk.com/2022/01/29/five-hacking-tips-pwnkit


@BlueRedTeam

#Blue_Team

1. Configuring Linux auditd for Threat Detection
https://izyknows.medium.com/linux-auditd-for-threat-detection-d06c8b941505
2. Free Ransomware Decryption Tools
https://www.emsisoft.com/ransomware-decryption-tools/deadbolt

@BlueRedTeam

#Red_Team

Tools Developed for RITSEC Red Team Recruiting

https://github.com/jabbate19/Red-Team-Recruiting

@BlueRedTeam

#Red_Team
A Python package to validate and generate documentation for Atomic Red Team Atomics

https://github.com/MSAdministrator/art-parser

@BlueRedTeam

#Red_Team

Evaluación final curso Pentesting Web, Diplomado Red Team, USACH, enero 2022

https://github.com/Ppamo/2022.01---pentesting-web---evaluaci-n-final

@BlueRedTeam

#Red_Team

Evaluación final curso Pentesting Web, Diplomado Red Team, USACH, enero 2022

https://github.com/Sohrabian/special-cyber-security-topic

@BlueRedTeam