NEW BOT Телеграм, страница

Red Blue Team

#tools
#Red_Team
Escalate from a low-integrity Administrator account to NT AUTHORITY\SYSTEM without an LPE exploit by combining a COM UAC bypass and Token Impersonation
https://github.com/FULLSHADE/Auto-Elevate
@BlueRedTeam

GitHub

GitHub - FULLSHADE/Auto-Elevate: Escalate from a low-integrity Administrator account to NT AUTHORITY\SYSTEM without an LPE exploit…

Escalate from a low-integrity Administrator account to NT AUTHORITY\SYSTEM without an LPE exploit by combining a COM UAC bypass and Token Impersonation - FULLSHADE/Auto-Elevate

394 views04:28

Red Blue Team

#Cobalt_Strike
A collection of C# utilities intended to be used with Cobalt Strike's execute-assembly

https://github.com/breakid/SharpUtils

@BlueRedTeam

GitHub

GitHub - breakid/SharpUtils: A collection of C# utilities intended to be used with Cobalt Strike's execute-assembly

A collection of C# utilities intended to be used with Cobalt Strike's execute-assembly - GitHub - breakid/SharpUtils: A collection of C# utilities intended to be used with Cobalt Strike&amp...

415 views04:31

Red Blue Team

#Red_Team
CTF Writeups / Penetration testing / Red Teaming

https://github.com/sujal11111/1337redteamer.github.io

@BlueRedTeam

424 views15:05

Red Blue Team

#exploit
1. CVE-2022-23648:
containerd: Insecure handling of image volumes
https://bugs.chromium.org/p/project-zero/issues/detail?id=2244

2. Exploit tool for CVE-2021-43008
Adminer 1.0 - 4.6.2 Arbitrary File Read vulnerability
https://github.com/p0dalirius/CVE-2021-43008-AdminerRead

@BlueRedTeam

GitHub

GitHub - p0dalirius/CVE-2021-43008-AdminerRead: Exploit tool for CVE-2021-43008 Adminer 1.0 up to 4.6.2 Arbitrary File Read vulnerability

Exploit tool for CVE-2021-43008 Adminer 1.0 up to 4.6.2 Arbitrary File Read vulnerability - GitHub - p0dalirius/CVE-2021-43008-AdminerRead: Exploit tool for CVE-2021-43008 Adminer 1.0 up to 4.6.2 ...

384 views08:55

Red Blue Team

#Red_Team

Bypassing MFA with Pass-the-Cookie
https://stealthbits.com/blog/bypassing-mfa-with-pass-the-cookie

@BlueRedTeam

369 views08:58

Red Blue Team

#Cobalt_Strike
Useful Cobalt Strike BOFs found or used during engagements

https://github.com/wsummerhill/CobaltStrike_BOF_Collections

@BlueRedTeam

GitHub

GitHub - wsummerhill/CobaltStrike_BOF_Collections: Useful Cobalt Strike BOFs found or used during engagements

Useful Cobalt Strike BOFs found or used during engagements - wsummerhill/CobaltStrike_BOF_Collections

383 views09:21

Red Blue Team

#Cobalt_Strike
Agressor noscript that lists available Cobalt Strike beacon commands and colors them based on their type

https://github.com/outflanknl/HelpColor

@BlueRedTeam

GitHub

GitHub - outflanknl/HelpColor: Agressor noscript that lists available Cobalt Strike beacon commands and colors them based on their…

Agressor noscript that lists available Cobalt Strike beacon commands and colors them based on their type - outflanknl/HelpColor

👍2

641 views10:22

Red Blue Team

#Red_Team
1. TCC ClickJacking:
A proof of concept for a ClickJacking attack on macOS
https://github.com/breakpointHQ/TCC-ClickJacking
2. iOS Hacking - A Beginner's Guide to Hacking iOS Apps (2022)
https://martabyte.github.io/ios/hacking/2022/03/13/ios-hacking-en.html

@BlueRedTeam

GitHub

GitHub - breakpointHQ/TCC-ClickJacking: A proof of concept for a clickjacking attack on macOS.

A proof of concept for a clickjacking attack on macOS. - breakpointHQ/TCC-ClickJacking

❤3

400 views09:09

Red Blue Team

#Blue_Team
The LAPSUS$ Group - A Chaotic Start of Ransomware-free Extortion
https://www.picussecurity.com/resource/the-lapsus-group-a-chaotic-start-of-ransomware-free-extortion

Lapsus Group IOC
@BlueRedTeam

Picussecurity

The LAPSUS$ Group - A Chaotic Start of Ransomware-free Extortion

This article explains the LAPSUS$ group that threatened to leak the data of breached organizations, such as Octa and Microsoft, without using ransomware.

650 views09:13

Red Blue Team

#Red_Team #Malware
Rootkit for Windows 10/11

Cronos is a Windows 10/11 x64 Ring 0 rootkit. Can hide processes, protect and elevate them with token manipulation.

https://github.com/XaFF-XaFF/Cronos-Rootkit

@BlueRedTeam

GitHub

GitHub - XaFF-XaFF/Cronos-Rootkit: Cronos is Windows 10/11 x64 ring 0 rootkit. Cronos is able to hide processes, protect and elevate…

Cronos is Windows 10/11 x64 ring 0 rootkit. Cronos is able to hide processes, protect and elevate them with token manipulation. - GitHub - XaFF-XaFF/Cronos-Rootkit: Cronos is Windows 10/11 x64 rin...

592 views15:23

Red Blue Team

#CVE-2022
Container Excape PoC for CVE-2022-0847 \"DirtyPipe\"

https://github.com/DataDog/dirtypipe-container-breakout-poc

@BlueRedTeam

GitHub

GitHub - DataDog/dirtypipe-container-breakout-poc: Container Excape PoC for CVE-2022-0847 "DirtyPipe"

Container Excape PoC for CVE-2022-0847 "DirtyPipe" - GitHub - DataDog/dirtypipe-container-breakout-poc: Container Excape PoC for CVE-2022-0847 "DirtyPipe"

401 views15:30

Red Blue Team

#Cobalt_Strike
Python library for dissecting and parsing Cobalt Strike related data such as Beacon payloads and Malleable C2 Profiles

https://github.com/fox-it/dissect.cobaltstrike

@BlueRedTeam

GitHub

GitHub - fox-it/dissect.cobaltstrike: Python library for dissecting and parsing Cobalt Strike related data such as Beacon payloads…

Python library for dissecting and parsing Cobalt Strike related data such as Beacon payloads and Malleable C2 Profiles - fox-it/dissect.cobaltstrike

👍1

606 views19:41

Red Blue Team

#Blue_Team

Detecting shadow credentials
https://cyberstoph.org/posts/2022/03/detecting-shadow-credentials
@BlueRedTeam

cyberstoph.org

Detecting shadow credentials

407 views08:40

Red Blue Team

#Cobalt_Strike
Parses Cobalt Strike malleable C2 profiles.

https://github.com/brett-fitz/pyMalleableProfileParser

@BlueRedTeam

GitHub

GitHub - brett-fitz/pyMalleableProfileParser: Parses Cobalt Strike malleable C2 profiles.

Parses Cobalt Strike malleable C2 profiles. Contribute to brett-fitz/pyMalleableProfileParser development by creating an account on GitHub.

374 views09:27

Red Blue Team

#tools
#Blue_Team

A lightweight extension to automatically detect and provide verbose warnings for embedded iframe elements in order to protect against Browser-In-The-Browser (BITB) attacks
https://github.com/odacavo/enhanced-iframe-protection

@BlueRedTeam

GitHub

GitHub - MalwareCube/enhanced-iframe-protection: A lightweight extension to automatically detect and provide verbose warnings for…

A lightweight extension to automatically detect and provide verbose warnings for embedded iframe elements in order to protect against Browser-In-The-Browser (BITB) attacks. - MalwareCube/enhanced-i...

372 views09:30

Red Blue Team

#Red_Team
1. Circumventing Browser Security Mechanisms For SSRF
https://github.com/httpvoid/writeups/blob/main/Circumventing-Browser-Security-Mechanisms-For-SSRF.md
2. GitLab Arbitrary file read via the bulk imports UploadsPipeline
https://hackerone.com/reports/1439593

@BlueRedTeam

GitHub

writeups/Circumventing-Browser-Security-Mechanisms-For-SSRF.md at main · httpvoid/writeups

Contribute to httpvoid/writeups development by creating an account on GitHub.

381 views09:34

Red Blue Team

#exploit
CVE-2022-23121:
RCE on Western Digital PR4100 NAS
https://research.nccgroup.com/2022/03/24/remote-code-execution-on-western-digital-pr4100-nas-cve-2022-23121

@BlueRedTeam