#Phishing

Phishing email analysis

@BlueRedTeam

#Red_Team
Red Teaming Toolkit

A collection of open source and commercial tools that aid in red team operations. This post will help you during red team engagement.

Contents
— Reconnaissance
— Weaponization
— Delivery
— Command and Control
— Lateral Movement
— Establish Foothold
— Escalate Privileges
— Data Exfiltration
— Misc
— References

https://renatoborbolla.medium.com/red-teaming-adversary-simulation-toolkit-da89b20cb5ea

@BlueRedTeam

#exploit

+ CVE-2022-26809:
Weakness in a core Windows 7/10/Server2019/2022 component (RPC)
https://github.com/XmasSnow/CVE-2022-26809-RCE

+ CVE-2022-29072:
7-Zip <21.07 on Windows allows privilege escalation and command execution when a file with the .7z extension is dragged to the Help>Contents area (0-day)
https://github.com/kagancapar/CVE-2022-29072

@BlueRedTeam

#Red_Team

Process Doppelganging (Mitre: T1055.013)

https://www.hackingarticles.in/process-doppelganging-mitret1055-013

@BlueRedTeam

#PTH
​OverPass-the-Hash in 1C Enterprise

To gain access to 1C Enterprise, you need a username and password. In case 1C works with LDAP authentication and you only have the user's NTLM hash, you can use Rubeus to launch 1C using the OverPass-the-Hash attack. Thus, you can access 1C Enterprise without having a password in the plaintext.

Invoke-Rubeus -Command "asktgt /user:i.ivanov /domain:APTNOTES.LOCAL /rc4:A87F3A337D73085C45F9416BE5787D86 /createnetonly:C:\1cestart.exe /show"

Bonus:
If the compromised user has permissions to run "External data processors", you can get a reverse shell of the 1C server.
https://github.com/KraudSecurity/1C-Exploit-Kit/tree/master/1C-Shell

@BlueRedTeam

#tools

+ Flutter Reverse Engineering Framework
https://github.com/Impact-I/reFlutter
+ Stunner is a tool to test and exploit STUN, TURN and TURN over TCP servers
https://github.com/firefart/stunner

@BlueRedTeam

#exploit
Use-After-Free Exploit
in HackSysExtremeVulnerableDriver
https://sophieboyle.github.io/2022/04/09/HEVD-UAF-Exploit.html

@BlueRedTeam

#Red_Team

Windows for Red Teamers

https://github.com/morph3/Windows-Red-Team-Cheat-Sheet

@BlueRedTeam

#Red_Team

FrostByte is a POC project that combines different defense evasion techniques to build better redteam payloads

https://github.com/pwn1sher/frostbyte

@BlueRedTeam

#Red_Team

红蓝对抗以及护网相关工具和资料，内存shellcode（cs+msf）和内存马查杀工具

https://github.com/Mr-xn/RedTeam_BlueTeam_HW

@BlueRedTeam

#Red_Team

Windows Red Team Cheat Sheet

https://reconshell.com/windows-red-team-cheat-sheet/

@BlueRedTeam

#Blue_Team
Microsoft Windows 10/11/server 2016 and above recommended block rules
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-block-rules

@BlueRedTeam

#Red_Team

Red Team Tool

https://github.com/yingshang/redteamTool

@BlueRedTeam

#Red_Team

1. In-Process Patchless AMSI Bypass
https://ethicalchaos.dev/2022/04/17/in-process-patchless-amsi-bypass
2. Analyzing Palo Alto Cortex XDR and finding ways to bypass it
https://mrd0x.com/cortex-xdr-analysis-and-bypass

@BlueRedTeam

#Red_Team

Red Team C code repo

https://github.com/Mr-Un1k0d3r/RedTeamCCode

@BlueRedTeam

#Red_Team

Red Team Notes

https://github.com/biggerduck/RedTeamNotes

@BlueRedTeam

#Red_Team

A Detailed Guide on HTML Smuggling

https://www.hackingarticles.in/a-detailed-guide-on-html-smuggling

@BlueRedTeam

#Red_Team

a tool to bypass av for red team

https://github.com/piiperxyz/go-single-bypass

@BlueRedTeam

#Red_Team

+ Persisting XSS With IFrame Traps
https://www.trustedsec.com/blog/persisting-xss-with-iframe-traps
+ The all-in-one Red Team extension for Web Pentester
https://github.com/LasCC/Hack-Tools

@BlueRedTeam

#exploit
+ bluez: malicious USB devices can steal Bluetooth link keys over HCI using fake BD_ADDR, plus bluetoothd double-free
https://bugs.chromium.org/p/project-zero/issues/detail?id=2256

+ CVE-2022-0995:
Linux: watch_queue filter OOB write (and other bugs)
https://bugs.chromium.org/p/project-zero/issues/detail?id=2274

@BlueRedTeam

#CVE-2022

CVE-2022-21449 Proof of Concept demonstrating its usage with a vulnerable client and a malicious TLS server

https://github.com/khalednassar/CVE-2022-21449-TLS-PoC

@BlueRedTeam