#Blue_Team
"Anti-Backdoor Learning:
Training Clean Models on Poisoned Data", 2021.
]-> Repo: https://github.com/bboylyg/ABL
@BlueRedTeam

#exploit
1. Exploit Development:
ASLR - Coming To A KUSER_SHARED_DATA Structure
https://connormcgarr.github.io/kuser-shared-data-changes-win-11

2. LPE based on Sunflower RCE without specifying ports
https://github.com/Ryze-T/CNVD-2022-10270-LPE

@BlueRedTeam

#Cobalt_Strike
Cobalt Strike External C2 Integration With Azure Servicebus, C2 traffic via Azure Servicebus

https://github.com/Cobalt-Strike/community_kit

@BlueRedTeam

#Red_Team
1. Smuggling HTTP requests over fake WebSocket connection
https://github.com/0ang3el/websocket-smuggle
2. JNDI-Injection-Exploit - A Tool Which Generates JNDI Links Can Start Several Servers To Exploit JNDI Injection Vulnerability
https://github.com/welk1n/JNDI-Injection-Exploit
3. TeamsImplant: is a stealthy teams implant that proxies the urlmon.dll
https://github.com/Allevon412/TeamsImplant

@BlueRedTeam

#Cobalt_Strike
Cobalt Strike User-Defined Reflective Loader written in Assembly & C for advanced evasion capabilities.

https://github.com/boku7/BokuLoader

@BlueRedTeam

#Blue_Team
1. Hermetic Wiper Malware Detection Rules
https://github.com/stripesoc/detections/tree/main/hermeticwiper
2. CVE-2021-31166 Detection Rules
https://github.com/mvlnetdev/CVE-2021-31166-detection-rules

@BlueRedTeam

#exploit
1. CVE-2022-21974:
Roaming Security Rights Management Services
Remote Code Execution Vulnerability
https://github.com/0vercl0k/CVE-2022-21974

2. CVE-2022-21971:
Windows Runtime RCE Vulnerability
https://github.com/0vercl0k/CVE-2022-21971

@BlueRedTeam

#Red_Team

Cobaltstrike notes
https://github.com/kluo84/CS-notes

@BlueRedTeam

#tools
Fuzzing Network Applications with AFL and libdesock
https://lolcads.github.io/posts/2022/02/libdesock
]-> A de-socketing library for fuzzing:
https://github.com/fkie-cad/libdesock

@BlueRedTeam

#tools
#Red_Team
1. Copy the properties and groups of a user from neo4j (bloodhound) to create an identical golden ticket
https://github.com/Dramelac/GoldenCopy
2. Jbin Website Secret Scraper will gather all the URLs from the website and then it will try to expose the secret data from them such as API keys, secrets, tokens and many other juicy information
https://github.com/h33tlit/Jbin-website-secret-scraper

@BlueRedTeam

#Blue_Team
HTTP Desync Attacks:
Request Smuggling Reborn
https://portswigger.net/research/http-desync-attacks-request-smuggling-reborn
]-> Http request smuggling vulnerability scanner:
https://github.com/Sh1Yo/request_smuggler

@BlueRedTeam

#Red_Team
Into the art of Binary Exploitation
Part 4 - Reviving of Satanic-ROP
https://infosecwriteups.com/into-the-art-of-binary-exploitation-0x000004-reviving-of-satanic-rop-5ab604b52341

@BlueRedTeam

#exploit
1. CVE-2021-30955:
Apple macOS Kernel Race Condition
https://gist.github.com/jakeajames/37f72c58c775bfbdda3aa9575149a8aa

2. CVE-2021-3489:
Exploitation Analysis of Linux Kernel eBPF RINGBUF Out-of-Bounds Access Vulnerability
https://mp.weixin.qq.com/s/biSNUlzZqqcYiYwfMSaTeg

@BlueRedTeam

#Blue_Team

1. The SpotBugs plugin for security audits of Java web applications and Android applications (also work with Kotlin/Groovy/Scala projects)
https://github.com/find-sec-bugs/find-sec-bugs
2. SOC Skills:
How to Detect Good Apps Gone Bad
https://www.intezer.com/blog/malware-analysis/how-to-detect-legitimate-apps-used-by-attackers

@BlueRedTeam

#Red_Team
1. Golden GMSA Attack
https://www.semperis.com/blog/golden-gmsa-attack
2. Bash Tricks for File Exfiltration over HTTP/S using Flask
https://medium.com/maverislabs/bash-tricks-for-file-exfiltration-over-http-s-using-flask-112aed524ad

@BlueRedTeam

#Blue_Team

Mac OS X Keychain Forensic Tool

https://github.com/n0fate/chainbreaker

@BlueRedTeam

#Cobalt_Strike

The idea is to collect all the C# projects that are Sharp{Word} that can be used in Cobalt Strike as execute assembly command.

https://github.com/N7WEra/SharpAllTheThings

@BlueRedTeam

#Red_Team

Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.

https://github.com/Yuvrajsinh05/Yuvrajsinh05

@BlueRedTeam

#Red_Team

Red Team, Blue Team, and Network Analysis

https://github.com/Jwulfe/Final-Project

@BlueRedTeam

#Red_Team

Penetration Testing, Vulnerability Assessment and Red Team Learning

https://github.com/nairuzabulhul/R3d-Buck3T

@BlueRedTeam

#Cobalt_Strike

Cobalt Strike Beacon Object Files (BOFs) written in rust with rust core and alloc.

https://github.com/wumb0/rust_bof

@BlueRedTeam