#tools
#Blue_Team
Determine whether a given video sequence has been manipulated or synthetically generated
https://github.com/chinmaynehate/DFSpot-Deepfake-Recognition

@BlueRedTeam

#Red_Team
Method for extracting credentials in Windows

Can't retrieve credentials via DPAPI or Mimikatz? Don't worry, Microsoft has taken care of you. Just use

rundll32 keymgr.dll, KRShowKeyMgr

to retrieve all stored passwords on a host, be it the target server, FTP, or Chrome passwords, Microsoft has you covered.

@BlueRedTeam

Hello, friends who work in RedTeam and BlueTeam, send a message to the following ID:

@BRT01Chat_Bot

#tools
#Blue_Team

Tool and library to check cryptographic public keys for known vulnerabilities

https://github.com/badkeys/badkeys

@BlueRedTeam

#Red_Team

Red Team & Blue Team

https://github.com/digitaloffensive/RTBT

@BlueRedTeam

#Red_Team

This is a project based on a Red Team - Blue Team Exercise

https://github.com/skyeskyeskye/Project-2

@BlueRedTeam

#webshell

k8s webshell

https://github.com/zhxiaohe/k8sexec

@BlueRedTeam

#Offensive

Engineering antivirus evasion
Part 1:
https://blog.scrt.ch/2020/06/19/engineering-antivirus-evasion
]-> C/C++ source obfuscator for antivirus bypass:
https://github.com/scrt/avcleaner

Part 2:
C/C++ source obfuscator for antivirus bypass
https://blog.scrt.ch/2020/07/15/engineering-antivirus-evasion-part-ii
]-> PoC: https://github.com/scrt/avcleaner

Part 3:
https://blog.scrt.ch/2022/04/19/3432

@BlueRedTeam

#exploit

+ CVE-2021-26887:
Group Policy Folder Redirection
https://decoder.cloud/2022/04/27/group-policy-folder-redirection-cve-2021-26887

+ kernel r/w exploit for iOS 15.0 - 15.1.1
https://github.com/potmdehex/multicast_bytecopy

@BlueRedTeam

#Red_Team

Bypassing EDR real-time injection detection logic
https://blog.redbluepurple.io/offensive-research/bypassing-injection-detection

@BlueRedTeam

#Cobalt_Strike

A work in progress of constructing a minimal http(s) beacon for Cobalt Strike.

https://github.com/SecIdiot/minbeacon

@BlueRedTeam

#Red_Team

This is a project based on a Red Team - Blue Team Exercise

https://github.com/NetSPI/ESC

@BlueRedTeam

#Red_Team

+ A blueprint for evading industry leading endpoint protection in 2022
https://vanmieghem.io/blueprint-for-evading-edr-in-2022
+ Reconnaissance
https://dhiyaneshgeek.github.io/red/teaming/2022/04/28/reconnaissance-red-teaming

@BlueRedTeam

#Cobalt_Strike

A work in progress of constructing a minimal http(s) beacon for Cobalt Strike.

https://github.com/surgicalmittens/minbeacon

@BlueRedTeam

#Red_Team

Windows Events Attack Samples

https://github.com/sbousseaden/EVTX-ATTACK-SAMPLES

@BlueRedTeam

#LAPSUS$:

Recent techniques, tactics and procedures

https://research.nccgroup.com/2022/04/28/lapsus-recent-techniques-tactics-and-procedures

@BlueRedTeam

#Red_Team

+Pwning a Server using Markdown: Escalating a bug in a vulnerable markdown parser to exploit LFI and get RCE
https://blog.dixitaditya.com/pwning-a-server-using-markdown
+ Wormable Cross-Site Scripting Vulnerability affecting Rarible’s NFT Marketplace
https://palisade.consulting/blog/rarible-vulnerability

@BlueRedTeam

#Red_Team

Red Teaming Toolkit

https://reconshell.com/red-teaming-toolkit/

@BlueRedTeam