#bank
Xenomorph Android Banking Trojan

https://www.threatfabric.com/blogs/xenomorph-a-newly-hatched-banking-trojan.html

@BlueRedTeam

#exploit
1. CVE-2022-25375:
Demo exploit of RNDIS USB Gadget
https://github.com/szymonh/rndis-co

2. CVE-2022-24112:
Apache APISIX apisix/batch-requests RCE
https://github.com/Mr-xn/CVE-2022-24112
]-> https://github.com/shakeman8/CVE-2022-24112

@BlueRedTeam

#tools
#Red_Team

PELoader with various shellcode injection techniques

https://github.com/Hagrid29/PELoader

@BlueRedTeam

#Red_Team

Bash Tricks for Command Execution and Data Extraction over HTTP/S
https://medium.com/maverislabs/bash-tricks-for-command-execution-and-data-extraction-over-http-s-ca76e9c80933

@BlueRedTeam

#Malware

New Sandworm malware Cyclops Blink replaces VPNFilter

https://www.ncsc.gov.uk/news/joint-advisory-shows-new-sandworm-malware-cyclops-blink-replaces-vpnfilter

@BlueRedTeam

#Blue_Team
"Anti-Backdoor Learning:
Training Clean Models on Poisoned Data", 2021.
]-> Repo: https://github.com/bboylyg/ABL
@BlueRedTeam

#exploit
1. Exploit Development:
ASLR - Coming To A KUSER_SHARED_DATA Structure
https://connormcgarr.github.io/kuser-shared-data-changes-win-11

2. LPE based on Sunflower RCE without specifying ports
https://github.com/Ryze-T/CNVD-2022-10270-LPE

@BlueRedTeam

#Cobalt_Strike
Cobalt Strike External C2 Integration With Azure Servicebus, C2 traffic via Azure Servicebus

https://github.com/Cobalt-Strike/community_kit

@BlueRedTeam

#Red_Team
1. Smuggling HTTP requests over fake WebSocket connection
https://github.com/0ang3el/websocket-smuggle
2. JNDI-Injection-Exploit - A Tool Which Generates JNDI Links Can Start Several Servers To Exploit JNDI Injection Vulnerability
https://github.com/welk1n/JNDI-Injection-Exploit
3. TeamsImplant: is a stealthy teams implant that proxies the urlmon.dll
https://github.com/Allevon412/TeamsImplant

@BlueRedTeam

#Cobalt_Strike
Cobalt Strike User-Defined Reflective Loader written in Assembly & C for advanced evasion capabilities.

https://github.com/boku7/BokuLoader

@BlueRedTeam

#Blue_Team
1. Hermetic Wiper Malware Detection Rules
https://github.com/stripesoc/detections/tree/main/hermeticwiper
2. CVE-2021-31166 Detection Rules
https://github.com/mvlnetdev/CVE-2021-31166-detection-rules

@BlueRedTeam

#exploit
1. CVE-2022-21974:
Roaming Security Rights Management Services
Remote Code Execution Vulnerability
https://github.com/0vercl0k/CVE-2022-21974

2. CVE-2022-21971:
Windows Runtime RCE Vulnerability
https://github.com/0vercl0k/CVE-2022-21971

@BlueRedTeam

#Red_Team

Cobaltstrike notes
https://github.com/kluo84/CS-notes

@BlueRedTeam

#tools
Fuzzing Network Applications with AFL and libdesock
https://lolcads.github.io/posts/2022/02/libdesock
]-> A de-socketing library for fuzzing:
https://github.com/fkie-cad/libdesock

@BlueRedTeam

#tools
#Red_Team
1. Copy the properties and groups of a user from neo4j (bloodhound) to create an identical golden ticket
https://github.com/Dramelac/GoldenCopy
2. Jbin Website Secret Scraper will gather all the URLs from the website and then it will try to expose the secret data from them such as API keys, secrets, tokens and many other juicy information
https://github.com/h33tlit/Jbin-website-secret-scraper

@BlueRedTeam

#Blue_Team
HTTP Desync Attacks:
Request Smuggling Reborn
https://portswigger.net/research/http-desync-attacks-request-smuggling-reborn
]-> Http request smuggling vulnerability scanner:
https://github.com/Sh1Yo/request_smuggler

@BlueRedTeam

#Red_Team
Into the art of Binary Exploitation
Part 4 - Reviving of Satanic-ROP
https://infosecwriteups.com/into-the-art-of-binary-exploitation-0x000004-reviving-of-satanic-rop-5ab604b52341

@BlueRedTeam

#exploit
1. CVE-2021-30955:
Apple macOS Kernel Race Condition
https://gist.github.com/jakeajames/37f72c58c775bfbdda3aa9575149a8aa

2. CVE-2021-3489:
Exploitation Analysis of Linux Kernel eBPF RINGBUF Out-of-Bounds Access Vulnerability
https://mp.weixin.qq.com/s/biSNUlzZqqcYiYwfMSaTeg

@BlueRedTeam

#Blue_Team

1. The SpotBugs plugin for security audits of Java web applications and Android applications (also work with Kotlin/Groovy/Scala projects)
https://github.com/find-sec-bugs/find-sec-bugs
2. SOC Skills:
How to Detect Good Apps Gone Bad
https://www.intezer.com/blog/malware-analysis/how-to-detect-legitimate-apps-used-by-attackers

@BlueRedTeam

#Red_Team
1. Golden GMSA Attack
https://www.semperis.com/blog/golden-gmsa-attack
2. Bash Tricks for File Exfiltration over HTTP/S using Flask
https://medium.com/maverislabs/bash-tricks-for-file-exfiltration-over-http-s-using-flask-112aed524ad

@BlueRedTeam

#Blue_Team

Mac OS X Keychain Forensic Tool

https://github.com/n0fate/chainbreaker

@BlueRedTeam