#Red_Team

Certified Red Team Operator

https://github.com/jarrahnejad/jarrahnejad

@BlueRedTeam

#Red_Team

Counter Terrorism Unit and Red Team for United States of America and Alliijng Countries for Foreign Embargos.

https://github.com/capaomega/Reticulating-Documenting-Splines

@BlueRedTeam

#CVE-2022

Spring Framework RCE (CVE-2022-22965) Nmap (NSE) Checker (Non-Intrusive)

https://github.com/alt3kx/CVE-2022-22965

@BlueRedTeam

#exploit
CVE-2022-25372:
Local Privilege Escalation in Pritunl VPN Client
https://rhinosecuritylabs.com/penetration-testing/cve-2022-25372-local-privilege-escalation-in-pritunl-vpn-client

@BlueRedTeam

#Blue_Team
1. Detecting malicious artifacts using an ETW consumer in kernel mode
https://www.countercraftsec.com/blog/post/detecting-malicious-artifacts-using-an-etw-consumer-in-kernel-mode
2. A curated checklist of 300+ tips for protecting digital security and privacy
https://github.com/Lissy93/personal-security-checklist

@BlueRedTeam

#Cobalt_Strike

A spin-off research project. Cobalt Strike x Notion collab 2022

https://github.com/HuskyHacks/CobaltNotion

@BlueRedTeam

#Red_Team

Red Team Service Center Blazor

https://github.com/paulveillard/cybersecurity-red-team

@BlueRedTeam

#Cobalt_Strike

Indicator Of Compromise (IOCs) for Bumblebee & Cobalt Strike

https://github.com/sarventhar/Bumblebee-and-Cobalt-Strike.

@BlueRedTeam

#Cobalt_Strike

Indicator Of Compromise (IOCs) for Bumblebee & Cobalt Strike

https://github.com/sarventhar/Bumblebee-Cobalt-Strike

@BlueRedTeam

#Red_Team

Tampering With ForcePoint One DLP EndPoint
https://mrd0x.com/tampering-with-forcepoint-dlp

@BlueRedTeam

#Blue_Team


Malicious Registry Timestamp Manipulation Technique: Detecting Registry Timestomping
https://www.inversecos.com/2022/04/malicious-registry-timestamp.html

@BlueRedTeam

NetworkAttackMap

This is a medium level view of what internal network offensive operations look like largely from a directory services and connected services perspective. It is designed to help defenders and pentesters think about threats, vulnerabilites, vectors and scopes.

https://github.com/PwnDefend/NetworkAttackMap

@BlueRedTeam

#Red_Team
"Red team: pentest with two contractors at the same time"

Language : Russian
#Video #Pentest
@BlueRedTeam

#tools

Tool and technique to punch holes through firewalls/NATs where both clients and server can be behind separate NATs without any 3rd party involvement. Pwnat uses a newly developed technique, exploiting a property of NAT translation tables, with no 3rd party, port forwarding, DMZ, router administrative requirements, STUN/TURN/UPnP/ICE

https://github.com/samyk/pwnat

@BlueRedTeam

#Red_Team
1. HTB: Overflow
https://0xdf.gitlab.io/2022/04/09/htb-overflow.html
2. Exploiting CVE-2022-0778, a bug in OpenSSL vis-à-vis WebRTC platforms
https://www.rtcsec.com/article/exploiting-cve-2022-0778-in-openssl-vs-webrtc-platforms

@BlueRedTeam

#tools
#Red_Team
1. Quickly discover exposed hosts on the internet using multiple search engine
https://github.com/projectdiscovery/uncover
2. A hacking tool (Reverse shell) based on python-3
https://github.com/JosephFrankFir/Rxploit

@BlueRedTeam

#Blue_Team

1. Firewall analysis: A portable graph based approach
https://diablohorn.com/2022/04/09/firewall-analysis-a-portable-graph-based-approach
2. Analyzing the Exploitation of Spring4Shell Vulnerability (CVE-2022-22965) in Weaponizing and Executing the Mirai Botnet Malware
https://www.trendmicro.com/en_us/research/22/d/cve-2022-22965-analyzing-the-exploitation-of-spring4shell-vulner.html

@BlueRedTeam

#CVE-2022


CVE-2022-22954 is a server-side template injection vulnerability in the VMware Workspace ONE Access and Identity Manager

https://github.com/Vulnmachines/VMWare_CVE-2022-22954

@BlueRedTeam

#Red_Team

Setup noscript for Red Teams

https://github.com/spatiald/setips

@BlueRedTeam

#Cobalt_Strike
描述：通过反射DLL注入、Win API、C#、通过API建立用户、删除、dumphash、开启3389，计划任务、启动项、通过dll加载，让文件不落地。增加隐蔽效果。 同时快速运行frp实现内网穿透,实现Cobalt Strike插件化

https://github.com/n1n1tom/cstools

@BlueRedTeam