NEW BOT Телеграм, страница

#Red_Team
Exploits Scripts and other tools that are useful during Penetration-Testing or Red Team engagement

https://github.com/carlwarnberg/FinalEngagement

@BlueRedTeam

GitHub

GitHub - carlwarnberg/FinalEngagement: In a similar vein to Project 2, in this third and final project, we were tasked with performing…

In a similar vein to Project 2, in this third and final project, we were tasked with performing the duties of a Red Team pen tester and a Blue Team SOC analyst, with the added wrinkle of inspecting...

472 views13:29

Red Blue Team

#Red_Team
1. Browser In The Browser (BITB) Attack
https://mrd0x.com/browser-in-the-browser-phishing-attack
2. Simple way to bypass GateKeeper (CVE-2022-22616)
https://jhftss.github.io/CVE-2022-22616-Gatekeeper-Bypass

@BlueRedTeam

Mrd0X

Security Research | mr.d0x

Providing security research and red team techniques

442 views07:19

Red Blue Team

#exploit
From XSS to RCE (dompdf 0day)
https://positive.security/blog/dompdf-rce
]-> RCE exploit for dompdf:
https://github.com/positive-security/dompdf-rce
@BlueRedTeam

positive.security

From XSS to RCE (dompdf 0day) | Positive Security

Using a still unpatched vulnerability in the PHP library dompdf (used for rendering PDFs from HTML), we achieved RCE on a web server with merely a reflected XSS vulnerability as entry point.

434 views08:20

Red Blue Team

#Red_Team
Aretha Red Teaming conceptual mockup

https://github.com/OxfordHCC/arethart

@BlueRedTeam

GitHub

GitHub - OxfordHCC/arethart: Aretha Red Teaming conceptual mockup

Aretha Red Teaming conceptual mockup. Contribute to OxfordHCC/arethart development by creating an account on GitHub.

👍2

376 views02:28

Red Blue Team

#Red_Team
Red Team Field broken down into subject in markdown format

https://github.com/infosecwatchman/rtfm-1

@BlueRedTeam

GitHub

GitHub - infosecwatchman/rtfm-1: Red Team Field broken down into subject in markdown format

Red Team Field broken down into subject in markdown format - infosecwatchman/rtfm-1

385 views02:31

Red Blue Team

#Blue_Team
Securing Developer Tools:
Git Integrations
https://blog.sonarsource.com/securing-developer-tools-git-integrations

@BlueRedTeam

Sonarsource

Securing Developer Tools: Git Integrations

With this series, we present the results of our research on the security of popular developer tools with the goal of making this ecosystem safer: today’s article revisits Git integrations.

397 views03:08

Red Blue Team

#tools
#Red_Team
1. 0d1n: Tool for automating customized attacks against web applications
https://github.com/CoolerVoid/0d1n
2. Abusing Kerberos Constrained Delegation without Protocol Transition
https://snovvcrash.rocks/2022/03/06/abusing-kcd-without-protocol-transition.html

@BlueRedTeam

👍1

379 views09:50

Red Blue Team

#exploit
Abusing Arbitrary File Deletes to Escalate Privilege and Other Great Tricks
https://www.zerodayinitiative.com/blog/2022/3/16/abusing-arbitrary-file-deletes-to-escalate-privilege-and-other-great-tricks

@BlueRedTeam

Zero Day Initiative

Zero Day Initiative — Abusing Arbitrary File Deletes to Escalate Privilege and Other Great Tricks

We would like to thank researcher Abdelhamid Naceri for his great work in developing these exploit techniques, as well as for the vulnerabilities he has been reporting to our program. We look forward to seeing more from him in the future. Until then, follow…

👍1

400 views10:13

Red Blue Team

#CVE-2022
TOP All bugbounty pentesting CVE-2022- POC Exp Things

https://github.com/hktalent/TOP

@BlueRedTeam

GitHub

GitHub - GhostTroops/TOP: TOP All bugbounty pentesting CVE-2023- POC Exp RCE example payload Things

TOP All bugbounty pentesting CVE-2023- POC Exp RCE example payload Things - GhostTroops/TOP

425 views10:17

Red Blue Team

#Red_Team
Red Team Privilege Escalation
Part 1 - Writable SYSTEM Path Privilege Escalation
https://www.praetorian.com/blog/red-team-local-privilege-escalation-writable-system-path-privilege-escalation-part-1
Part 2 - RBCD Based Privilege Escalation
https://www.praetorian.com/blog/red-team-privilege-escalation-rbcd-based-privilege-escalation-part-2

@BlueRedTeam

Praetorian

Red Team Local Privilege Escalation - Writable SYSTEM Path Privilege Escalation - Part 1

Overview In this two-part series we discuss two Windows local privilege escalation vulnerabilities that we commonly identify during red team operations. These issues are of particular interest due to their prevalence within organizations with mature security…

452 views06:55

Red Blue Team

#exploit
CVE-2022-27226:
CSRF to RCE in iRZ Mobile Routers through 2022-03-16
https://johnjhacking.com/blog/cve-2022-27226
]-> PoC: https://github.com/SakuraSamuraii/ez-iRZ

@BlueRedTeam

Johnjhacking

CVE-2022-27226: CSRF to RCE in iRZ Mobile Routers through 2022-03-16

A CSRF issue on iRZ Mobile Routers through 2022-03-16 allows a threat actor to create a crontab entry in the router administration panel. The cronjob will consequently execute the entry on the threat actor's defined interval, leading to remote code execution…

455 views07:01

Red Blue Team

#Red_Team
Windows Red Team Exploitation Techniques
https://hackersploit.org/windows-red-team-exploitation-techniques

@BlueRedTeam

HackerSploit Blog

Windows Red Team Exploitation Techniques

Our objective is to generate a malicious office document that contains a macro that will provide us with a reverse shell on the target system when executed.

👍2🔥2

496 views05:32

About

Blog

Apps

Platform