#Red_Team

PDF for the Intro to Security Research - Red Team Hacking

https://github.com/zumaroc/intro-to-security-research

@BlueRedTeam

#Red_Team

Red Team engagement platform with the goal of unifying offensive tools behind a simple UI

https://github.com/KCarretto/paragon

@BlueRedTeam

#Red_Team

During pentests or Red Team assessments, it all comes down to our beloved toolbox, containing all the usefull and naughty stuff of a pentester´s every day life. The problem to us is that there are three kind of people outside there.
The first group being the security researchers who develop and publish these tools with the goal of providing knowledge and to rise awareness.
The second group is (besides their own tools) using these tools and techniques to carry out attacks on governments, companies and people.
The last group is trying to keep up with the first two groups by developing and implementing detection mechanisms and countermeasures to defend against the bad guys...

https://luemmelsec.github.io/Circumventing-Countermeasures-In-AD/

@BlueRedTeam

#Promo
Discuss information security and vulnerabilities of various systems in the field of programming and social engineering and cryptography and cryptography and malware analysis. If you are interested, join the following channel:
@PFK_Security

#Blue_Team

1. How to Analyze RTF Template Injection Attacks
https://letsdefend.io/blog/how-to-analyze-rtf-template-injection-attacks
2. Moha Phishing Kit, targeting DEWA suppliers
https://stalkphish.com/2022/02/04/phishing-kit-moha-kit-targeting-dewa-suppliers

@BlueRedTeam

#Red_Team

1. linWinPwn is a bash noscript that automates a number of Active Directory Enumeration and Exploitation steps
https://github.com/lefayjey/linWinPwn
2. MSDT DLL Hijack UAC bypass
https://blog.sevagas.com/?MSDT-DLL-Hijack-UAC-bypass
3. Project Than - Bypass Windows Defender, Using ThreadStackSpoofer, TDP && KCTHijack
https://gitlab.com/ORCA666/3in1

@BlueRedTeam

#Red_Team

Advanced Process Injection

https://github.com/RedTeamOperations/Advanced-Process-Injection-Workshop

@BlueRedTeam

#Red_Team
1. A PoC to make defender useless by removing its token privileges and lowering the token integrity
https://github.com/pwn1sher/KillDefender
2. SSRF Testing Resources
https://github.com/cujanovic/SSRF-Testing
3. A Nim implementation of reflective PE-Loading from memory
https://github.com/S3cur3Th1sSh1t/Nim-RunPE

@BlueRedTeam

#Blue_Team

Decoding Cobalt Strike:
Understanding Payloads
https://decoded.avast.io/threatintel/decoding-cobalt-strike-understanding-payloads
]-> Repo:
https://github.com/avast/ioc/tree/master/CobaltStrike

@BlueRedTeam

#Cobalt_Strike
#C2

Cobalt Strike External C2 Integration With Azure Servicebus, C2 traffic via Azure Servicebus

https://github.com/Flangvik/CobaltBus

@BlueRedTeam

#Red_Team

1. SPF-BYPASS
https://www.redteam.cafe/phishing/long-live-dmarc-email-spoof-issues
2. SIM Hijacking
https://sensepost.com/blog/2022/sim-hijacking

@BlueRedTeam

#hardening
#Blue_Team

Best Practice Auditd Configuration
https://github.com/Neo23x0/auditd

@BlueRedTeam

#Red_Team
1. DDoS Attack Script Python3, Cyber Attack With 36 Methods
https://github.com/MHProDev/MHDDoS
2. PackMyPayload -
Emerging Threat of Containerized Malware
https://github.com/mgeeky/PackMyPayload
3. Kerberos Authentication Relaying, OffensiveCon 2022
https://github.com/tyranid/infosec-presentations/blob/master/OffensiveCon/2022/This%20are%20my%20principals.pdf

@BlueRedTeam

#Whitepaper
#Blue_Team
#Techniques
"Lateral Movement Analyst Reference", 2020.

// This document is designed to help network defenders understand some of the tools and tactics used by attackers in order to inform security and threat hunting activities.

@BlueRedTeam

#exploit
Exploring UNIX pipes for iOS kernel exploit primitives,
and introducing kalloc_data_require
https://tfp0labs.com/blog/unix-pipes-exploitation
]-> Example code for creating read/write primitives from Unix pipes on XNU:
https://github.com/TFP0Labs/pipe_rw

@BlueRedTeam

#Cobalt_Strike

Agressor noscript that lists available Cobalt Strike beacon commands and colors them based on their type

https://github.com/outflanknl/HelpColor

@BlueRedTeam

#Cobalt_Strike

A collection of noscripts for Cobalt Strike

https://github.com/SamSepiolProxy/CobaltStrikeScripts

@BlueRedTeam

#Red_Team

PPE - Poisoned Pipeline Execution

https://medium.com/cider-sec/ppe-poisoned-pipeline-execution-34f4e8d0d4e9

@BlueRedTeam

#Cobalt_Strike

Privat crypt Cobalt Strike and powershell

https://github.com/trewisscotch/Crypt-Cobalt-Strike-Powershell

@BlueRedTeam

#AD

This tool can perform specific LDAP/SAMR calls to a domain controller in order to perform AD privesc.

https://github.com/CravateRouge/bloodyAD

@BlueRedTeam

Network penetration testing resources and network security : @NetPentesters

Persian Channel : @NetPentester