#Cobalt_Strike
描述：通过反射DLL注入、Win API、C#、通过API建立用户、删除、dumphash、开启3389，计划任务、启动项、通过dll加载，让文件不落地。增加隐蔽效果。 同时快速运行frp实现内网穿透,实现Cobalt Strike插件化

https://github.com/n1n1tom/cstools

@BlueRedTeam

#exploit
CVE-2022-22954:
VMware Workspace ONE Access Freemarker Server-side Template Injection
https://github.com/sherlocksecurity/VMware-CVE-2022-22954

@BlueRedTeam

#tools
LogMePwn is a fully automated, multi-protocol, reliable, super-fast scanning and validation toolkit for the Log4J RCE CVE-2021-44228 vulnerability
https://github.com/0xInfection/LogMePwn

@BlueRedTeam

#CVE-2022
PoC for CVE-2022-22954 - VMware Workspace ONE Access Freemarker Server-Side Template Injection

https://github.com/DrorDvash/CVE-2022-22954_VMware_PoC

@BlueRedTeam

Listen Music 🎧

Invite Link: https://news.1rj.ru/str/+VL-gkFeVMXVmNTY0

#Red_Team

Tools for Red Team Recon

https://github.com/yichengchiu/NmapRecoonScanner

@BlueRedTeam

#CVE-2022

CVE-2022-22954 VMware Workspace ONE Access freemarker SSTI 漏洞 命令执行、批量检测脚本

https://github.com/bewhale/CVE-2022-22954

@BlueRedTeam

#Red_Team

Polymorphic code obfuscator for use in Red Team operations

https://github.com/maltek-labs/Malcode-Obfuscator

@IotPenetrationTesting

#Blue_Team
Building Blue Team Home Lab
Part 1 - Introduction
https://facyber.me/posts/blue-team-lab-guide-part-1
Part 2 - Network Topology
https://facyber.me/posts/blue-team-lab-guide-part-2
Part 3 - Deploying a firewall
https://facyber.me/posts/blue-team-lab-guide-part-3

@BlueRedTeam

#Threat_Research
#SCADA_Security
APT Cyber Tools Targeting ICS/SCADA Devices
https://www.cisa.gov/uscert/ncas/alerts/aa22-103a

@BlueRedTeam

#exploit
Exploiting XSS with Javanoscript/JPEG Polyglot
https://systemweakness.com/exploiting-xss-with-javanoscript-jpeg-polyglot-4cff06f8201a

@BlueRedTeam

#CVE-2022

Proof of Concept for exploiting VMware CVE-2022-22954

https://github.com/tyleraharrison/VMware-CVE-2022-22954-Command-Injector

@BlueRedTeam

Network Attack and Defense

The author is a senior in cybersecurity and is about to pursue a postgraduate study in a certain institution of the Chinese Academy of Sciences. He is very interested in cybersecurity and CTF. The fields of study include but are not limited to system security, red team attack and defense, etc. This repository will record his own growth process and careful attention to detail. Organize and study the collected materials. Welcome pr! These materials have basically been seen or are being studied by themselves~ They will give their own understanding of the materials, so they have relatively good reference value!

https://github.com/tangzichengcc/The_Growth_Path_Of_A_Pwner

@BlueRedTeam

#Pentest

"Architect's Kung Fu" tutorial collection, article collection includes paradigm programming, microservices, essential algorithms, security attack and defense, assembly, crawler, reverse engineering, penetration testing...

https://github.com/xiaomiwujiecao/KongFuOfArchitect

@BlueRedTeam

#CVE-2022
Spring Cloud Gateway Actuator API SpEL Code Injection (CVE-2022-22947)

https://github.com/twseptian/cve-2022-22947

@BlueRedTeam

#CVE-2022

spring-cloud / spring-cloud-function,spring.cloud.function.routing-expression,RCE,0day,0-day,POC,EXP,CVE-2022-22963

https://github.com/hktalent/spring-spel-0day-poc

@BlueRedTeam

Exploiting Struts RCE on 2.5.26

https://mc0wn.blogspot.com/2021/04/exploiting-struts-rce-on-2526.html

@BlueRedTeam

#exploit
+ CVE-2022-28345:
Signal client for iOS < 5.33.2 are vulnerable to RTLO Injection URI Spoofing using malicious URLs
https://sick.codes/sick-2022-42

+ CVE-2021-1782:
an iOS in-the-wild vulnerability in vouchers
https://googleprojectzero.blogspot.com/2022/04/cve-2021-1782-ios-in-wild-vulnerability.html

@BlueRedTeam

#CVE-2022
CVE-2022-22954 VMware Workspace ONE Access free marker SSTI

https://github.com/MLX15/CVE-2022-22954

@BlueRedTeam

Exploiting a double-edged SSRF for server and client-side impact

https://www.yassineaboukir.com/blog/exploiting-a-double-edged-SSRF-for-server-and-client-side-impact

@BlueRedTeam

#tools

A tool/library to proxify DLL

https://github.com/jmgk77/PDL

@BlueRedTeam