#Red_Team

Tool created for Red Team to test default credentials on SSH and WinRM and then execute noscripts with those credentials before the password can be changed by Blue Team.

https://github.com/RITRedteam/StreetCred

@BlueRedTeam

#Red_Team

Penetration Testing, Vulnerability Assessment and Red Team Learning

https://github.com/nairuzabulhul/R3d-Buck3T

@BlueRedTeam

#Cobalt_Strike

Cobalt Strike 4.5 cracked version.

https://github.com/trewisscotch/CobaltStr4.5

@BlueRedTeam

#tools
#Blue_Team
1. Fnord - Pattern Extractor for Obfuscated Code
https://github.com/Neo23x0/Fnord
2. A collection of tools to help audit NPM dependencies for suspicious packages or continuously monitor dependencies for future security events
https://github.com/jfrog/jfrog-npm-tools

@BlueRedTeam

#Red_Team
1. SysWhispers integrated shellcode loader w/ ETW patching & anti-sandboxing
https://github.com/ChadMotivation/TymSpecial
2. Kernel mode WinDbg extension and PoCs for token privilege investigation
https://github.com/daem0nc0re/PrivFu

@BlueRedTeam

A small library to alter AWS API requests

https://github.com/Frichetten/aws_api_shapeshifter

#Cloud
#API
#AWS
@NetPentesters

#exploit
1. WebKit RCE on iOS 14.1 Exploit
https://gist.github.com/ujin5/6b9a32eedc5a39d714a3a72f06efffe5

2. Writing Anti-Anti-Virus Exploit
https://ptr-yudai.hatenablog.com/entry/2022/02/13/122744

@BlueRedTeam

#Red_Team
1. Persistence - Notepad++ Plugins
https://pentestlab.blog/2022/02/14/persistence-notepad-plugins
2. Use Flickr app to install malicious apps remotely acting as updates
https://infosecwriteups.com/install-invisible-malicious-apps-remotely-acting-as-updates-71178979ff13

@BlueRedTeam

#Red_Team
Dexter's Red Team Tool that creates cronjob/task scheduler to consistently creates users.

https://github.com/CDT-2215-Team-Bravo/DexterRedTool

@BlueRedTeam

#exploit
1. CVE-2022-22536:
SAP NetWeaver Application Server ABAP/Java/ABAP Platform/SAP Content Server/Web Dispatcher memory pipes (MPI) desynchronization vulnerability
https://github.com/antx-code/CVE-2022-22536

2. CVE-2022-0435:
A Remote Stack Overflow in the Linux Kernel
https://www.appgate.com/blog/a-remote-stack-overflow-in-the-linux-kernel

@BlueRedTeam

#Red_Team

Red Teaming Assessment Scoring System

https://github.com/fin3ss3g0d/APIMon

@BlueRedTeam

#hardening
#Blue_Team
1. A command-line tool to quickly analyze all IPs in a file and see which ones have open ports/vulnerabilities
https://gitlab.com/shodan-public/nrich
2. Active Directory Privilege Escalation Hardening
https://hadess.io/active-directory-privilege-escalation-hardening

@BlueRedTeam

#Red_Team

Tests intrusion (Red Team)

https://github.com/abouchard-cybersec/CR470

@BlueRedTeam

#Red_Team
1. WAF Bypass Methods
https://hadess.io/waf-bypass-methods
2. 0-Click Account Takeover and 2FA Bypass
https://infosecwriteups.com/a-tale-of-0-click-account-takeover-and-2fa-bypass-b369cd70e42f
3. Object Overloading
https://blog.xpnsec.com/object-overloading

@BlueRedTeam

#Red_Team

Blog for tracking internet adventures and open-source projects. Security / Engineering / Red Team / Writeups

https://github.com/0xRJTC/ryanengineers.github.io

@BlueRedTeam

#Blue_Team
Attack Surface Monitoring using Open-Source Intelligence
https://infosecwriteups.com/attack-surface-monitoring-using-open-source-intelligence-90415e863e93

@BlueRedTeam

#exploit
#Red_Team
1. Nightmare: One Byte to ROP // Deep Dive Edition
https://hackmd.io/@pepsipu/ry-SK44pt
2. A multi exploit instagram exploitation framework
https://github.com/TheBirdSecurity/Instagram-Exploitation-Framework

@BlueRedTeam

#exploit
Exploiting CVE-2019-2215:
Brief introduction to binder, eventpoll subsystem and Vectored I/O
https://cutesmilee.github.io/kernel/linux/android/2022/02/17/cve-2019-2215_writeup.html
]-> PoC: https://github.com/cutesmilee/cutesmilee.github.io/blob/main/code/cve-2019-2215-exploit.c

@BlueRedTeam

#Malware_analysis
1. Kraken: A New Golang Botnet in Development
https://www.zerofox.com/blog/meet-kraken-a-new-golang-botnet-in-development
2. TargetCompany Ransomware
https://decoded.avast.io/threatresearch/decrypted-targetcompany-ransomware
@BlueRedTeam

#Red_Team
1. Bypassing Cloudflare’s WAF
https://medium.com/@friendly_/bypassing-cloudflares-waf-b1b83a50fb2f
2. Tool to audit and attack LAPS environments
https://github.com/leoloobeek/LAPSToolkit

@BlueRedTeam