#exploit
+ bluez: malicious USB devices can steal Bluetooth link keys over HCI using fake BD_ADDR, plus bluetoothd double-free
https://bugs.chromium.org/p/project-zero/issues/detail?id=2256

+ CVE-2022-0995:
Linux: watch_queue filter OOB write (and other bugs)
https://bugs.chromium.org/p/project-zero/issues/detail?id=2274

@BlueRedTeam

#CVE-2022

CVE-2022-21449 Proof of Concept demonstrating its usage with a vulnerable client and a malicious TLS server

https://github.com/khalednassar/CVE-2022-21449-TLS-PoC

@BlueRedTeam

#CVE-2022

This repository contains a PoC for remote code execution CVE-2022-26809

https://github.com/DESC0N0C1D0/CVE-2022-26809-RCE

@BlueRedTeam

#CVE-2022

WSO2 RCE (CVE-2022-29464) exploit.

https://github.com/hakivvi/CVE-2022-29464

@BlueRedTeam

#getshell

Target of SQL injection and getshell

https://github.com/xiabee/SQL-Target

@BlueRedTeam

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

https://github.com/MISP/MISP

@BlueRedTeam

#exploit

https://github.com/Threekiii/Awesome-Exploit

@BlueRedTeam

#exploit

+ CVE-2022-21449:
"Psychic Signatures"
PoC demonstrating its usage with a vulnerable client and a malicious TLS server
https://github.com/khalednassar/CVE-2022-21449-TLS-PoC

+ CVE-2022-21449:
Exploitation and Sample Vulnerable Application of the JWT Null Signature Vulnerability
https://github.com/DataDog/security-labs-pocs/tree/main/proof-of-concept-exploits/jwt-null-signature-vulnerable-app

@BlueRedTeam

#Red_Team

+ Adventures with KernelCallbackTable Injection
https://captmeelo.com/redteam/maldev/2022/04/21/kernelcallbacktable-injection.html

+ Exploiting Security Checks on Bind Mount
https://tbhaxor.com/exploit-docker-firewall-bind-mount-security

@BlueRedTeam

#Pentest

https://github.com/shanyuhe/YesPoc

@BlueRedTeam

#Cobalt_Strike

A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techniques.

https://github.com/outflanknl/C2-Tool-Collection

@BlueRedTeam

#Red_Team

Red Team Toolkit is an Open-Source Django Offensive Web-App which is keeping the useful offensive tools used in the red-teaming together.

https://github.com/Johnrhume/UPDATE-Redivivus-Inc..-aa

@BlueRedTeam

#Red_Team

Red Team Stuff

https://github.com/H4sh95/pwn

@BlueRedTeam

#exploit
+ CVE-2022-29464:
WSO2 RCE exploit and writeup
https://github.com/hakivvi/CVE-2022-29464

+ Cronos - Windows 10/11 x64 ring 0 rootkit
https://github.com/XaFF-XaFF/Cronos-Rootkit

@BlueRedTeam

#Blue_Team

The Threat Hunting In Rapid Iterations (THIRI) Jupyter notebook is designed as a research aide to let you rapidly prototype threat hunting rules

https://github.com/mandiant/thiri-notebook

@BlueRedTeam

#CheatSheet

A Hunt Cheat Sheet

@BlueRedTeam

#Cobalt_Strike

Things related to Cobalt Strike

https://github.com/rbctee/CobaltStrike

@BlueRedTeam

Classic Cuckoo

@BlueRedTeam

#CVE-2022

WSO2 RCE (CVE-2022-29464)

https://github.com/cxosmo/CVE-2022-29548

@BlueRedTeam

#Blue_Team

"An Introduction to macOS Forensics with Open Source Software", JSAC 2022.

@BlueRedTeam