#Red_Team

Red Team Service Center Blazor

https://github.com/paulveillard/cybersecurity-red-team

@BlueRedTeam

#Cobalt_Strike

Indicator Of Compromise (IOCs) for Bumblebee & Cobalt Strike

https://github.com/sarventhar/Bumblebee-and-Cobalt-Strike.

@BlueRedTeam

#Cobalt_Strike

Indicator Of Compromise (IOCs) for Bumblebee & Cobalt Strike

https://github.com/sarventhar/Bumblebee-Cobalt-Strike

@BlueRedTeam

#Red_Team

Tampering With ForcePoint One DLP EndPoint
https://mrd0x.com/tampering-with-forcepoint-dlp

@BlueRedTeam

#Blue_Team


Malicious Registry Timestamp Manipulation Technique: Detecting Registry Timestomping
https://www.inversecos.com/2022/04/malicious-registry-timestamp.html

@BlueRedTeam

NetworkAttackMap

This is a medium level view of what internal network offensive operations look like largely from a directory services and connected services perspective. It is designed to help defenders and pentesters think about threats, vulnerabilites, vectors and scopes.

https://github.com/PwnDefend/NetworkAttackMap

@BlueRedTeam

#Red_Team
"Red team: pentest with two contractors at the same time"

Language : Russian
#Video #Pentest
@BlueRedTeam

#tools

Tool and technique to punch holes through firewalls/NATs where both clients and server can be behind separate NATs without any 3rd party involvement. Pwnat uses a newly developed technique, exploiting a property of NAT translation tables, with no 3rd party, port forwarding, DMZ, router administrative requirements, STUN/TURN/UPnP/ICE

https://github.com/samyk/pwnat

@BlueRedTeam

#Red_Team
1. HTB: Overflow
https://0xdf.gitlab.io/2022/04/09/htb-overflow.html
2. Exploiting CVE-2022-0778, a bug in OpenSSL vis-à-vis WebRTC platforms
https://www.rtcsec.com/article/exploiting-cve-2022-0778-in-openssl-vs-webrtc-platforms

@BlueRedTeam

#tools
#Red_Team
1. Quickly discover exposed hosts on the internet using multiple search engine
https://github.com/projectdiscovery/uncover
2. A hacking tool (Reverse shell) based on python-3
https://github.com/JosephFrankFir/Rxploit

@BlueRedTeam

#Blue_Team

1. Firewall analysis: A portable graph based approach
https://diablohorn.com/2022/04/09/firewall-analysis-a-portable-graph-based-approach
2. Analyzing the Exploitation of Spring4Shell Vulnerability (CVE-2022-22965) in Weaponizing and Executing the Mirai Botnet Malware
https://www.trendmicro.com/en_us/research/22/d/cve-2022-22965-analyzing-the-exploitation-of-spring4shell-vulner.html

@BlueRedTeam

#CVE-2022


CVE-2022-22954 is a server-side template injection vulnerability in the VMware Workspace ONE Access and Identity Manager

https://github.com/Vulnmachines/VMWare_CVE-2022-22954

@BlueRedTeam

#Red_Team

Setup noscript for Red Teams

https://github.com/spatiald/setips

@BlueRedTeam

#Cobalt_Strike
描述：通过反射DLL注入、Win API、C#、通过API建立用户、删除、dumphash、开启3389，计划任务、启动项、通过dll加载，让文件不落地。增加隐蔽效果。 同时快速运行frp实现内网穿透,实现Cobalt Strike插件化

https://github.com/n1n1tom/cstools

@BlueRedTeam

#exploit
CVE-2022-22954:
VMware Workspace ONE Access Freemarker Server-side Template Injection
https://github.com/sherlocksecurity/VMware-CVE-2022-22954

@BlueRedTeam

#tools
LogMePwn is a fully automated, multi-protocol, reliable, super-fast scanning and validation toolkit for the Log4J RCE CVE-2021-44228 vulnerability
https://github.com/0xInfection/LogMePwn

@BlueRedTeam

#CVE-2022
PoC for CVE-2022-22954 - VMware Workspace ONE Access Freemarker Server-Side Template Injection

https://github.com/DrorDvash/CVE-2022-22954_VMware_PoC

@BlueRedTeam

Listen Music 🎧

Invite Link: https://news.1rj.ru/str/+VL-gkFeVMXVmNTY0

#Red_Team

Tools for Red Team Recon

https://github.com/yichengchiu/NmapRecoonScanner

@BlueRedTeam

#CVE-2022

CVE-2022-22954 VMware Workspace ONE Access freemarker SSTI 漏洞 命令执行、批量检测脚本

https://github.com/bewhale/CVE-2022-22954

@BlueRedTeam