Windows for Red Teamers. Contribute to morph3/Windows-Red-Team-Cheat-Sheet development by creating an account on GitHub.

FrostByte is a POC project that combines different defense evasion techniques to build better redteam payloads - pwn1sher/frostbyte

红蓝对抗以及护网相关工具和资料，内存shellcode（cs+msf）和内存马查杀工具. Contribute to Mr-xn/RedTeam_BlueTeam_HW development by creating an account on GitHub.

View a list of recommended block rules, based on knowledge shared between Microsoft and the wider security community.

Some of you may remember my patchless AMSI bypass article and how it was used inside SharpBlock to bypass AMSI on the child process that SharpBlock spawns. This is all well a good when up against client environments that are not too sensitive to the fork…

Red Team C code repo. Contribute to Mr-Un1k0d3r/RedTeamCCode development by creating an account on GitHub.

红队笔记. Contribute to biggerduck/RedTeamNotes development by creating an account on GitHub.

Learn how HTML Smuggling bypasses firewalls using JS blobs and payloads, with live noscripts, attack demos, and mitigation steps.

a tool to bypass av for red team. Contribute to piiperxyz/go-single-bypass development by creating an account on GitHub.

It may be a reflected XSS vulnerability where we've tricked our user into clicking a link, but when they land on the page where we were able to inject our…

CVE-2022-21449 Proof of Concept demonstrating its usage with a client running on a vulnerable Java version and a malicious TLS server - notkmhn/CVE-2022-21449-TLS-PoC

WSO2 RCE (CVE-2022-29464) exploit and writeup. Contribute to hakivvi/CVE-2022-29464 development by creating an account on GitHub.

Target of SQL injection and getshell. Contribute to xiabee/SQL-Target development by creating an account on GitHub.

MISP (core software) - Open Source Threat Intelligence and Sharing Platform - MISP/MISP

CVE-2022-21449 Proof of Concept demonstrating its usage with a client running on a vulnerable Java version and a malicious TLS server - notkmhn/CVE-2022-21449-TLS-PoC