Exploiting a double-edged SSRF for server and client-side impact

https://www.yassineaboukir.com/blog/exploiting-a-double-edged-SSRF-for-server-and-client-side-impact

@BlueRedTeam

#tools

A tool/library to proxify DLL

https://github.com/jmgk77/PDL

@BlueRedTeam

#Red_Team

Corrupting the Source Docker Image
https://tbhaxor.com/corrupting-source-docker-image

@BlueRedTeam

#Phishing

Phishing email analysis

@BlueRedTeam

#Red_Team
Red Teaming Toolkit

A collection of open source and commercial tools that aid in red team operations. This post will help you during red team engagement.

Contents
— Reconnaissance
— Weaponization
— Delivery
— Command and Control
— Lateral Movement
— Establish Foothold
— Escalate Privileges
— Data Exfiltration
— Misc
— References

https://renatoborbolla.medium.com/red-teaming-adversary-simulation-toolkit-da89b20cb5ea

@BlueRedTeam

#exploit

+ CVE-2022-26809:
Weakness in a core Windows 7/10/Server2019/2022 component (RPC)
https://github.com/XmasSnow/CVE-2022-26809-RCE

+ CVE-2022-29072:
7-Zip <21.07 on Windows allows privilege escalation and command execution when a file with the .7z extension is dragged to the Help>Contents area (0-day)
https://github.com/kagancapar/CVE-2022-29072

@BlueRedTeam

#Red_Team

Process Doppelganging (Mitre: T1055.013)

https://www.hackingarticles.in/process-doppelganging-mitret1055-013

@BlueRedTeam

#PTH
​OverPass-the-Hash in 1C Enterprise

To gain access to 1C Enterprise, you need a username and password. In case 1C works with LDAP authentication and you only have the user's NTLM hash, you can use Rubeus to launch 1C using the OverPass-the-Hash attack. Thus, you can access 1C Enterprise without having a password in the plaintext.

Invoke-Rubeus -Command "asktgt /user:i.ivanov /domain:APTNOTES.LOCAL /rc4:A87F3A337D73085C45F9416BE5787D86 /createnetonly:C:\1cestart.exe /show"

Bonus:
If the compromised user has permissions to run "External data processors", you can get a reverse shell of the 1C server.
https://github.com/KraudSecurity/1C-Exploit-Kit/tree/master/1C-Shell

@BlueRedTeam

#tools

+ Flutter Reverse Engineering Framework
https://github.com/Impact-I/reFlutter
+ Stunner is a tool to test and exploit STUN, TURN and TURN over TCP servers
https://github.com/firefart/stunner

@BlueRedTeam

#exploit
Use-After-Free Exploit
in HackSysExtremeVulnerableDriver
https://sophieboyle.github.io/2022/04/09/HEVD-UAF-Exploit.html

@BlueRedTeam

#Red_Team

Windows for Red Teamers

https://github.com/morph3/Windows-Red-Team-Cheat-Sheet

@BlueRedTeam

#Red_Team

FrostByte is a POC project that combines different defense evasion techniques to build better redteam payloads

https://github.com/pwn1sher/frostbyte

@BlueRedTeam

#Red_Team

红蓝对抗以及护网相关工具和资料，内存shellcode（cs+msf）和内存马查杀工具

https://github.com/Mr-xn/RedTeam_BlueTeam_HW

@BlueRedTeam

#Red_Team

Windows Red Team Cheat Sheet

https://reconshell.com/windows-red-team-cheat-sheet/

@BlueRedTeam

#Blue_Team
Microsoft Windows 10/11/server 2016 and above recommended block rules
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-block-rules

@BlueRedTeam

#Red_Team

Red Team Tool

https://github.com/yingshang/redteamTool

@BlueRedTeam

#Red_Team

1. In-Process Patchless AMSI Bypass
https://ethicalchaos.dev/2022/04/17/in-process-patchless-amsi-bypass
2. Analyzing Palo Alto Cortex XDR and finding ways to bypass it
https://mrd0x.com/cortex-xdr-analysis-and-bypass

@BlueRedTeam

#Red_Team

Red Team C code repo

https://github.com/Mr-Un1k0d3r/RedTeamCCode

@BlueRedTeam

#Red_Team

Red Team Notes

https://github.com/biggerduck/RedTeamNotes

@BlueRedTeam

#Red_Team

A Detailed Guide on HTML Smuggling

https://www.hackingarticles.in/a-detailed-guide-on-html-smuggling

@BlueRedTeam

#Red_Team

a tool to bypass av for red team

https://github.com/piiperxyz/go-single-bypass

@BlueRedTeam