NEW BOT Телеграм, страница

#exploit
1. PHP filter_var shenanigans
https://pwning.systems/posts/php_filter_var_shenanigans

2. RTLO Injection URI Spoofing:
WhatsApp, iMessage, Instagram, Facebook Messenger. CVE-2020-20093, CVE-2020-20094, CVE-2020-20095, CVE-2020-20096
https://sick.codes/sick-2022-40

@BlueRedTeam

pwning.systems

PHP filter_var shenanigans

It is likely that we have all seen PHP filters that prevent us from encountering vulnerabilities. Here in this blog post, I'll walk you through my thought process for bypassing a filter by looking for a bug in the filter itself in order to reach a bug!

384 views10:38

Red Blue Team

#Red_Team

Account Manipulation
https://github.com/redcanaryco/atomic-red-team/blob/master/atomics/T1098/T1098.md

@BlueRedTeam

GitHub

atomic-red-team/atomics/T1098/T1098.md at master · redcanaryco/atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK. - redcanaryco/atomic-red-team

393 views10:42

Red Blue Team

#Red_Team

Red Team deployment tool for UFSIT.

https://github.com/coledmcmullen/red-team-deployment

@BlueRedTeam

GitHub

GitHub - coledmcmullen/red-team-deployment: Red Team deployment tool for UFSIT.

Red Team deployment tool for UFSIT. Contribute to coledmcmullen/red-team-deployment development by creating an account on GitHub.

357 views23:55

Red Blue Team

#Red_Team
Red Team Suite Key Management & Utility Software

https://github.com/Tech-Slayers/RTS-Encryption-Manager

@BlueRedTeam

GitHub

GitHub - Tech-Slayers/RTS-Encryption-Manager: Red Team Suite Key Management & Utility Software

Red Team Suite Key Management & Utility Software. Contribute to Tech-Slayers/RTS-Encryption-Manager development by creating an account on GitHub.

👍2

365 views23:59

Red Blue Team

#Cobalt_Strike

Cobalt Strike noscript for ScareCrow payloads (EDR/AV evasion)

https://github.com/Verizon/redshell

@BlueRedTeam

GitHub

GitHub - Verizon/redshell: An interactive command prompt for red teaming and pentesting. Automatically pushes commands through…

An interactive command prompt for red teaming and pentesting. Automatically pushes commands through SOCKS4/5 proxies via proxychains. Optional Cobalt Strike integration pulls beacon SOCKS4/5 proxie...

👍1

396 views00:06

Red Blue Team

#Red_Team
AzureRT - A Powershell module implementing various Azure Red Team tactics

https://github.com/mgeeky/AzureRT

@BlueRedTeam

GitHub

GitHub - mgeeky/AzureRT: AzureRT - A Powershell module implementing various Azure Red Team tactics

AzureRT - A Powershell module implementing various Azure Red Team tactics - mgeeky/AzureRT

437 views00:15

Red Blue Team

Comparison_MS_Def_v3.pdf

296.2 KB

#Blue_Team
Ultimate Comparison of Microsoft Defender for Endpoint Features by Operating System. v.3.0, 2022.
]-> https://campbell.scot/march-22-defender-for-endpoint-feature-comparison

@BlueRedTeam

446 views03:14

Red Blue Team

#CVE-2022
Spring Cloud Gateway RCE - CVE-2022-22947

https://github.com/sagaryadav8742/springcloudRCE

@BlueRedTeam

GitHub

GitHub - sagaryadav8742/springcloudRCE: Spring Cloud Gateway RCE - CVE-2022-22947

Spring Cloud Gateway RCE - CVE-2022-22947 . Contribute to sagaryadav8742/springcloudRCE development by creating an account on GitHub.

582 views23:38

Red Blue Team

#Blue_Team

Tracking WMI Activity with PSGumshoe
https://www.darkoperator.com/blog/2022/3/27/tracking-wmi-activity-with-psgumshoe

https://github.com/PSGumshoe/PSGumshoe

@BlueRedTeam

Shell is Only the Beginning

Tracking WMI Activity with PSGumshoe

WMI (Windows Management Instrumentation) is the Microsoft implementation of the Web-Based Enterprise Management (WBEM) and Common Information Model (CIM) standards from the Distributed Management Task Force (DMTF). This allows for a unified way…

361 views08:34

Red Blue Team

#Red_Team
1. Pwning 3CX Phone Management Backends from the Internet
https://medium.com/@frycos/pwning-3cx-phone-management-backends-from-the-internet-d0096339dd88
2. Local Privilege Escalation Attack via Razer Synapse Installer (CVE-2021-44226)
https://blog.syss.com/posts/razer-lpe-attack

@BlueRedTeam

Medium

Pwning 3CX Phone Management Backends from the Internet

After an unplanned journey with Microsoft Exchange the month before, I started to look for new interesting vulnerability research targets…

388 views08:38

Red Blue Team

#Red_Team

Alias identity manager for Red Teams, OSINT collectors, journalists, and privacy-conscious people

https://github.com/mattreduce/sockdrawer

@BlueRedTeam

GitHub

GitHub - srcmtd/sockdrawer: Alias identity manager for Red Teams, OSINT collectors, journalists, and privacy-conscious people

Alias identity manager for Red Teams, OSINT collectors, journalists, and privacy-conscious people - srcmtd/sockdrawer

390 views08:42

Red Blue Team

#Blue_Team
1. Open Source Security Guide
https://github.com/mikeroyal/Open-Source-Security-Guide
2. Suricata Open Ruleset
https://github.com/ptresearch/AttackDetection

@BlueRedTeam

GitHub

GitHub - mikeroyal/Open-Source-Security-Guide: Open Source Security Guide. Learn all about Security Standards (FIPS, CIS, FedRAMP…

Open Source Security Guide. Learn all about Security Standards (FIPS, CIS, FedRAMP, FISMA, etc.), Frameworks, Threat Models, Encryption, and Benchmarks. - GitHub - mikeroyal/Open-Source-Security-G...

352 views08:23

Red Blue Team

#Red_Team
Kubernetes Attack Path
Part 1 - Discovery & Initial Access
https://medium.com/swlh/kubernetes-attack-path-part-1-discovery-initial-access-771365e21b58
Part 2 - Post Initial Access
https://medium.com/swlh/kubernetes-attack-path-part-2-post-initial-access-1e27aabda36d

@BlueRedTeam