#getshell

Target of SQL injection and getshell

https://github.com/xiabee/SQL-Target

@BlueRedTeam

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

https://github.com/MISP/MISP

@BlueRedTeam

#exploit

https://github.com/Threekiii/Awesome-Exploit

@BlueRedTeam

#exploit

+ CVE-2022-21449:
"Psychic Signatures"
PoC demonstrating its usage with a vulnerable client and a malicious TLS server
https://github.com/khalednassar/CVE-2022-21449-TLS-PoC

+ CVE-2022-21449:
Exploitation and Sample Vulnerable Application of the JWT Null Signature Vulnerability
https://github.com/DataDog/security-labs-pocs/tree/main/proof-of-concept-exploits/jwt-null-signature-vulnerable-app

@BlueRedTeam

#Red_Team

+ Adventures with KernelCallbackTable Injection
https://captmeelo.com/redteam/maldev/2022/04/21/kernelcallbacktable-injection.html

+ Exploiting Security Checks on Bind Mount
https://tbhaxor.com/exploit-docker-firewall-bind-mount-security

@BlueRedTeam

#Pentest

https://github.com/shanyuhe/YesPoc

@BlueRedTeam

#Cobalt_Strike

A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techniques.

https://github.com/outflanknl/C2-Tool-Collection

@BlueRedTeam

#Red_Team

Red Team Toolkit is an Open-Source Django Offensive Web-App which is keeping the useful offensive tools used in the red-teaming together.

https://github.com/Johnrhume/UPDATE-Redivivus-Inc..-aa

@BlueRedTeam

#Red_Team

Red Team Stuff

https://github.com/H4sh95/pwn

@BlueRedTeam

#exploit
+ CVE-2022-29464:
WSO2 RCE exploit and writeup
https://github.com/hakivvi/CVE-2022-29464

+ Cronos - Windows 10/11 x64 ring 0 rootkit
https://github.com/XaFF-XaFF/Cronos-Rootkit

@BlueRedTeam

#Blue_Team

The Threat Hunting In Rapid Iterations (THIRI) Jupyter notebook is designed as a research aide to let you rapidly prototype threat hunting rules

https://github.com/mandiant/thiri-notebook

@BlueRedTeam

#CheatSheet

A Hunt Cheat Sheet

@BlueRedTeam

#Cobalt_Strike

Things related to Cobalt Strike

https://github.com/rbctee/CobaltStrike

@BlueRedTeam

Classic Cuckoo

@BlueRedTeam

#CVE-2022

WSO2 RCE (CVE-2022-29464)

https://github.com/cxosmo/CVE-2022-29548

@BlueRedTeam

#Blue_Team

"An Introduction to macOS Forensics with Open Source Software", JSAC 2022.

@BlueRedTeam

#Blue_Team

SG TCP/IP Ports Database
https://www.speedguide.net/ports.php

@BlueRedTeam

#Blue_Team

SANS Pen Testing Blueprint

@BlueRedTeam

#Blue_Team

The Fundamental Guide to Building a Better SOC

@BlueRedTeam

#CVE-2022

WSOB is a python created to exploit the new vulnerability on WSO2 assigned as CVE-2022-29464.

https://github.com/oppsec/WSOB

@BlueRedTeam