#Red_Team

1. Get fresh Syscalls from a fresh ntdll.dll copy
https://github.com/S3cur3Th1sSh1t/NimGetSyscallStub
2. Exploring the Playstation 5 Security:
ROP userland execution for PS5 (4.03)
https://github.com/ChendoChap/PS5-Webkit-Execution

@BlueRedTeam

#exploit
CVE-2022-21882:
Win32k Window Object Type Confusion
https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2022/CVE-2022-21882.html
]-> PoC: https://github.com/KaLendsi/CVE-2022-21882

@BlueRedTeam

#Red_Team
1. Delegate to KRBTGT service
https://skyblue.team/posts/delegate-krbtgt
// The main appeal of this technique is that it does not require to be joined to the domain, contrarily to DCSync/Golden Tickets attacks: Only network access to LDAP and Kerberos ports is enough

2. Five Hacking Tips - PWNKIT
https://blog.sysrisk.com/2022/01/29/five-hacking-tips-pwnkit


@BlueRedTeam

#Blue_Team

1. Configuring Linux auditd for Threat Detection
https://izyknows.medium.com/linux-auditd-for-threat-detection-d06c8b941505
2. Free Ransomware Decryption Tools
https://www.emsisoft.com/ransomware-decryption-tools/deadbolt

@BlueRedTeam

#Red_Team

Tools Developed for RITSEC Red Team Recruiting

https://github.com/jabbate19/Red-Team-Recruiting

@BlueRedTeam

#Red_Team
A Python package to validate and generate documentation for Atomic Red Team Atomics

https://github.com/MSAdministrator/art-parser

@BlueRedTeam

#Red_Team

Evaluación final curso Pentesting Web, Diplomado Red Team, USACH, enero 2022

https://github.com/Ppamo/2022.01---pentesting-web---evaluaci-n-final

@BlueRedTeam

#Red_Team

Evaluación final curso Pentesting Web, Diplomado Red Team, USACH, enero 2022

https://github.com/Sohrabian/special-cyber-security-topic

@BlueRedTeam

#Red_Team
A very simple way of running Atomic Red Team tests!

https://github.com/Adam-Mashinchi/atomic-unit-test

@BlueRedTeam

#Red_Team

Various Red Team noscripts I'm working on

https://github.com/MdbookTech/redteam-noscripts

@BlueRedTeam

#Red_Team

Red Team vs Blue Team project

https://github.com/arochelle12/RedvsBlue

@BlueRedTeam

#Blue_Team

A curated collection of resources, tools, and other shiny things for cybersecurity blue teams

https://github.com/fabacab/awesome-cybersecurity-blueteam#policy-enforcement

@BlueRedTeam

#Red_Team

1. Moodle: Blind SQL Injection (CVE-2021-36393)
and Broken Access Control (CVE-2021-36397)
https://0xkasper.com/articles/moodle-sql-injection-broken-access-control.html
2. Understanding Process Ghosting in Detail
https://dosxuz.gitlab.io/post/processghosting

@BlueRedTeam

#Red_Team

In this repo you will get the information of Red Team Security related links

https://github.com/pathakabhi24/RedTeam-Security

@BlueRedTeam

#Red_Team

1. PwnKit PoCs
https://sketchymoose.blogspot.com/2022/02/looking-at-some-pwnkit-pocs-for-fun.html
2. Data exfiltration using XXE on a hardened server
https://infosecwriteups.com/data-exfiltration-using-xxe-on-a-hardened-server-ef3a3e5893ac
3. Multiple HTTP Redirects to Bypass SSRF Protections
https://infosecwriteups.com/multiple-http-redirects-to-bypass-ssrf-protections-45c894e5d41c

@BlueRedTeam

#Red_Team

PDF for the Intro to Security Research - Red Team Hacking

https://github.com/zumaroc/intro-to-security-research

@BlueRedTeam

#Red_Team

Red Team engagement platform with the goal of unifying offensive tools behind a simple UI

https://github.com/KCarretto/paragon

@BlueRedTeam

#Red_Team

During pentests or Red Team assessments, it all comes down to our beloved toolbox, containing all the usefull and naughty stuff of a pentester´s every day life. The problem to us is that there are three kind of people outside there.
The first group being the security researchers who develop and publish these tools with the goal of providing knowledge and to rise awareness.
The second group is (besides their own tools) using these tools and techniques to carry out attacks on governments, companies and people.
The last group is trying to keep up with the first two groups by developing and implementing detection mechanisms and countermeasures to defend against the bad guys...

https://luemmelsec.github.io/Circumventing-Countermeasures-In-AD/

@BlueRedTeam

#Promo
Discuss information security and vulnerabilities of various systems in the field of programming and social engineering and cryptography and cryptography and malware analysis. If you are interested, join the following channel:
@PFK_Security

#Blue_Team

1. How to Analyze RTF Template Injection Attacks
https://letsdefend.io/blog/how-to-analyze-rtf-template-injection-attacks
2. Moha Phishing Kit, targeting DEWA suppliers
https://stalkphish.com/2022/02/04/phishing-kit-moha-kit-targeting-dewa-suppliers

@BlueRedTeam

#Red_Team

1. linWinPwn is a bash noscript that automates a number of Active Directory Enumeration and Exploitation steps
https://github.com/lefayjey/linWinPwn
2. MSDT DLL Hijack UAC bypass
https://blog.sevagas.com/?MSDT-DLL-Hijack-UAC-bypass
3. Project Than - Bypass Windows Defender, Using ThreadStackSpoofer, TDP && KCTHijack
https://gitlab.com/ORCA666/3in1

@BlueRedTeam